Effective September 29, 2026
Privacy Policy
This policy describes the current GameToolsmith MVP. The tools require no account or payment. We collect only what is needed to operate the site, prevent abuse, and review anonymous feedback.
What we process
- Page requests: IP address, browser/device details, requested path, and timestamps may be processed by Cloudflare for delivery and security.
- Anonymous comments: comment text, page, moderation status, optional context if offered, timestamps, and one-way hashes used for rate limits and duplicate detection. The application does not store the raw IP in Turso.
- Product events: fixed event names and bounded values such as a selected symptom or result type. Free-form tool input and comment text are not accepted by the events endpoint.
Why we use it
We use this data to deliver and secure the service, apply rate limits, review comments before publication, correct game-tool data, investigate incidents, and maintain the comment service. We do not sell personal information or use it for cross-site behavioral advertising.
Cookies
We use a short-lived, HttpOnly form-proof cookie to distinguish a real form visit from automated submissions. It lasts no more than one hour and is SameSite=Lax. We currently use no advertising or analytics cookies, so there is no non-essential cookie preference banner.
Service providers
| Provider | Purpose and data |
|---|---|
| Cloudflare | Hosting, CDN, TLS, security, request handling, and bounded Worker logs. |
| Turso / libSQL | Stores comments, moderation state, and anti-abuse hashes. |
Clicking an external evidence link sends you to that site, which then processes the visit under its own policy.
Retention
- Comments and their anti-abuse hashes remain until an administrator deletes them.
- Approved comments remain while published and may be hidden or deleted after a valid request.
- Cloudflare technical-log retention is controlled by our Cloudflare configuration and its applicable service terms.
Your choices and rights
Depending on where you live, you may ask to access, correct, delete, or restrict data linked to your submission, or object to certain processing. Because comments are anonymous, we may request the page, approximate date, a quotation, and reasonable information showing that the request concerns your content. Use the email listed on the Contact page.
Children, security, and changes
This service is not directed to children under 13. Do not submit sensitive personal information. We use access controls, one-way hashing, validation, moderation, and rate limits, but no online service can guarantee absolute security. Material policy changes will be reflected by the effective date.