Privacy Policy

Last updated: 25 August 2026

Notice: this is a draft. The studio’s identity (trade name and contact email) is final; remaining values in [BRACKETS] are operational details to be completed, and the full text should be reviewed by a lawyer before launch.

1. Who we are (Data Controller)

The data controller for the personal data collected through this website is:

Chickpeas Studio operates as an unincorporated independent project and is not registered in any commercial registry.

2. What data we collect

This website is a showcase for our games. We do not run analytics, advertising, user accounts, or newsletters. We only process personal data in these cases:

  • Contact inquiries — if you email us, we process your name, email address, and the content of your message.
  • Cookie preferences — your cookie choice is stored in a technical cookie on your device (see our Cookie Policy).
  • Server logs — our hosting provider, [HOSTING PROVIDER], automatically records standard connection data (IP address, browser type, pages visited, timestamp) for security and operational purposes.
Purpose Legal basis (GDPR)
Answering your inquiries Legitimate interest / pre-contractual measures (Art. 6.1.b, 6.1.f)
Site security and operation Legitimate interest (Art. 6.1.f)
Remembering your cookie choice Legal obligation (Art. 6.1.c)

4. How long we keep your data

  • Inquiry emails: only as long as needed to handle your request, and no longer than [24 MONTHS].
  • Server logs: [RETENTION PERIOD OF YOUR HOSTING PROVIDER — typically 30 days].
  • Cookie preference: 6 months, after which we ask again.

5. Who we share data with

We do not sell, rent, or share your personal data with third parties, except our hosting provider [HOSTING PROVIDER], which processes server data on our behalf as a data processor under a GDPR-compliant agreement.

6. International transfers

[STATE WHERE YOUR DATA IS HOSTED. If your hosting provider stores data outside the European Economic Area, describe the safeguards in place — e.g. EU Standard Contractual Clauses. Otherwise state: “Your data is processed within the European Economic Area and is not transferred to third countries.”]

7. Your rights

Under the GDPR you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (for cookies: use the “Cookie Settings” link in the footer)

To exercise any of these rights, email us at [email protected] with proof of identity. We respond within one month.

8. Right to complain

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es — or with your local supervisory authority.

9. Changes to this policy

We may update this policy to reflect legal or technical changes. The “last updated” date at the top always shows the current version.