Privacy Policy

1. Summary

Stop Killing Games is an advocacy campaign, not a commercial service. We keep data collection to a minimum:

• There are no user accounts and no logins for visitors.
• The only information you actively submit is what you send through our partner/sponsor contact form.
• We use privacy-friendly, cookieless analytics only if you allow it — it stays off until you opt in.
• We do not sell or share your personal data, run advertising trackers, build profiles, or send marketing.

2. Who We Are (Data Controller)

The Stop Killing Games initiative ("SKG", "we", "us", "our") operates this website (www.stopkillinggames.com) and is the controller for the personal data described here.

Contact for privacy matters: contact@stopkillinggames.com

Stop Killing Games is a volunteer-run community initiative. For any privacy question, or to exercise your rights, please use the contact address above.

3. What We Collect, Why, and Our Legal Basis

Under the EU/UK General Data Protection Regulation (GDPR), we rely on the following:

a. Contact form submissions

When you use the partner/sponsor form, we process the name or organization, email address, and message you provide, plus the fact that you ticked the consent box. We use this solely to read and respond to your inquiry. The message is delivered to our team inbox; no automated reply or newsletter is created.

Legal basis: your consent, given by ticking the consent box before sending (Art. 6(1)(a)), and/or the taking of steps at your request prior to any potential agreement and our legitimate interest in responding to inbound enquiries (Art. 6(1)(b)/(f)). You may withdraw consent or ask us to delete the message at any time (see Section 8).

b. Analytics / traffic measurement

We use Vercel Web Analytics, a cookieless analytics tool. It does not set cookies, does not store an identifier on your device, and does not build a cross-site or persistent profile of you. It produces aggregate counts (such as page views and approximate visitor numbers) using an anonymized value derived server-side from request data. To calculate this it briefly processes technical data including your IP address and user-agent; the IP address is not stored in the analytics data.

Legal basis: your consent (Art. 6(1)(a)). Because this measurement is non-essential, it stays switched off until you actively enable it; the analytics script is only loaded after you opt in, and you can withdraw your consent at any time (see Section 5).

c. Server logs & security

Our hosting provider processes standard technical data (such as IP address, request time, requested URL, and user-agent) to deliver the site and protect it against abuse and denial-of-service attacks.

Legal basis: our legitimate interest in operating a secure, reliable website (Art. 6(1)(f)).

4. Cookies & Local Storage

We do not use advertising or tracking cookies. The table below lists everything this site stores on your device. Items marked strictly necessary are required for the site to work and are exempt from consent; the functional items remember your preferences; analytics is cookieless and only runs if you switch it on.

5. Your Analytics Choice (Opt-In)

Analytics is switched off by default and only runs if you actively turn it on. You can change your choice whenever you like:

• Use the cookie banner shown on your first visit to accept or decline, or
• Open "Cookie Preferences" in the footer at any time and switch Analytics on or off.

We store your choice (see skg-analytics-consent above). Unless you have turned analytics on, the analytics script is never loaded on your device.

6. Service Providers (Sub-processors)

We rely on the following providers, who process data on our behalf under their terms and data processing agreements:

• Vercel Inc. (USA) — website hosting, content delivery, and cookieless Web Analytics. Processes technical/server-log and aggregate analytics data.
• Resend (Plus Five Five, Inc., USA) — delivery of contact-form submissions to our inbox. Processes the name, email address, and message you submit.

Each provider processes data under a data processing agreement incorporated into its standard terms. We do not sell your data or share it with third parties for their own purposes.

7. International Data Transfers

Our hosting (Vercel) and email delivery (Resend) providers are based in the United States, so personal data you submit may be transferred to and processed there. For transfers of personal data from the EU/EEA and UK to the US, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), as incorporated into these providers' data processing terms, to provide an appropriate safeguard.

8. Data Retention

• Contact-form emails: kept for as long as needed to handle your inquiry and any resulting relationship, and in any case no longer than 24 months after our last correspondence unless a longer period is required for legal reasons, after which they are deleted.
• Analytics: retained only in aggregate form by Vercel; no device identifier or personal profile about you is retained.
• Server logs: retained by our hosting provider for a limited period for security and operational purposes.
• Your cookie/analytics choice: stored on your own device until you clear it; we hold no server-side record of it.

9. Your Rights (GDPR)

If you are in the EU/EEA or UK, you have the right to:

• Access (Art. 15): request a copy of the personal data we hold about you.
• Rectification (Art. 16): ask us to correct inaccurate data.
• Erasure (Art. 17): ask us to delete your data ("right to be forgotten").
• Restriction (Art. 18): ask us to limit how we use your data.
• Portability (Art. 20): receive data you gave us in a structured, machine-readable format.
• Object (Art. 21): object to processing based on our legitimate interests (for example, server logs and responding to your inquiry).
• Withdraw consent: at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email contact@stopkillinggames.com. We aim to respond within 30 days. Because we hold little data and no accounts, the fastest way to have a contact-form message erased is to email us from, or quote, the address you used.

10. Right to Lodge a Complaint

If you believe we have mishandled your data, you may complain to your local Data Protection Authority. A list of EU authorities is available at edpb.europa.eu. We would appreciate the chance to address your concern first.

11. California Privacy (CCPA/CPRA)

We do not sell or "share" personal information as those terms are defined under the California Consumer Privacy Act, and we do not use it for cross-context behavioral advertising. California residents may exercise applicable rights (to know, delete, and correct) by emailing contact@stopkillinggames.com. We will not discriminate against you for exercising these rights.

12. Children

This site is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data through the contact form, please contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Please review this page periodically.