Privacy Policy

1. Who we are

Fretlore is an independent game project. For privacy-related matters, contact privacy@fretlore.com.

Website: fretlore.com
Privacy contact: privacy@fretlore.com

For applicable data protection laws, the operator is the controller of personal data processed through this website.

2. Information we process

The website does not require registration and does not provide user accounts or contact forms. Email links open your email application rather than submitting a message through this website.

When you visit the website, limited technical information may be processed automatically to deliver it. This may include:

• IP address;
• browser and device information;
• request and routing information;
• referring page;
• approximate geographic location;
• diagnostic information.

The website is hosted and delivered through Cloudflare Pages. Cloudflare processes technical web requests needed to serve the website independently of your analytics choice.

3. Analytics

We load Google Analytics 4 (GA4) only after you explicitly accept analytics and that choice is effective.

If you accept analytics, we may collect information such as:

• page views, sessions and visits;
• scrolling and interaction events;
• outbound link clicks and qualifying file-download clicks;
• referring source and UTM campaign information;
• approximate location;
• browser and device information;
• the platform clicked, destination URL and button position for relevant link events;
• interactions with contact email links and successful use of email copy buttons.

Enhanced Measurement is enabled for page views, scrolling, outbound clicks and qualifying file downloads. Video engagement measurement is enabled for supported embedded YouTube players, but this website does not currently embed a YouTube player.

Our consent-gated custom events are social_click, steam_click, email_click, email_copy and steam_wishlist_click. The generic Steam social link can trigger social_click and steam_click. Wishlist on Steam buttons separately trigger steam_wishlist_click, which sends the button position and destination URL. GA4 may also record its own automatic outbound-click event.

Email events use an email category, not the contents of a visitor's message. GA4 user-provided data collection and automatic detection of user-provided data are off.

Google Signals is enabled for all available regions. For eligible activity, Google may associate analytics data with signed-in Google account information for reporting. Detailed location and device collection is also enabled, so reports may include approximate location and device or browser characteristics.

4. Legal bases

We process technical information required to operate, deliver and protect the website based on our legitimate interest in maintaining a secure and functional website.

Google Analytics processing is based on your consent.

You may refuse analytics without losing access to the website. You may also withdraw your consent at any time.

5. Service providers

We currently use:

• Cloudflare Pages — website hosting and delivery;
• Google Analytics 4 — optional website analytics after accepted consent.

These providers may process information on our behalf and may also process certain information according to their own privacy policies and legal obligations.

Steam, Telegram, Instagram, X, Discord, YouTube, TikTok, Threads, Bluesky and Reddit are linked as external destinations, not embedded services. Following a link sends a request to that destination, where its own privacy policy applies. Loading fretlore.com does not itself contact Steam.

Wishlist on Steam links include source, medium, campaign and button-placement UTM parameters that Steam receives when you follow a link. The generic Steam social link uses a separate campaign.

6. Data retention

Google Analytics user-level and event-level data retention is configured to 14 months. Reset user data on new activity is enabled, so new activity may extend the retention period for a user identifier. This reset applies to user-level data, not event-level data.

Google Analytics retention settings apply to user-level and event-level data used in detailed reporting tools and may not remove previously generated aggregated reporting data.

When browser storage is available, your analytics choice is stored locally until you change it or clear the website's browser storage. A separate functional cookie may preserve withdrawal if localStorage cannot be updated.

Technical information processed by Cloudflare is retained according to Cloudflare's applicable service and privacy policies.

7. International data transfers

Cloudflare and Google operate internationally. Information may therefore be processed in countries outside your country of residence.

Where required by applicable law, international transfers are subject to appropriate legal safeguards used by the relevant provider, such as adequacy mechanisms or contractual safeguards.

8. Your rights

Depending on where you live, you may have rights including:

• access to your personal data;
• correction of inaccurate data;
• deletion of your data;
• restriction of processing;
• objection to certain processing;
• data portability where applicable;
• withdrawal of consent at any time;
• lodging a complaint with your competent data protection authority.

Withdrawal of consent does not affect processing that lawfully occurred before consent was withdrawn.

To make a privacy request, contact:

privacy@fretlore.com

9. Analytics consent withdrawal

You can review or change your analytics choice at any time through the Cookie Policy link at the bottom of fretlore.com.

When analytics consent is withdrawn:

• further GA4 analytics events are disabled for the current document;
• the website attempts to clear or reject the stored analytics preference;
• the website attempts to remove accessible GA4 cookies matching _ga and _ga_* where technically possible.

If localStorage cannot preserve the withdrawal, the first-party fretlore-analytics-revoked cookie can prevent an older accepted preference from taking effect after a reload. It contains only a boolean revocation marker and has a maximum age of approximately one year. If neither localStorage nor cookie persistence works, withdrawal remains effective for the current document, but cannot be guaranteed across reloads.

10. Sale of personal data and advertising

We do not sell or rent personal data collected through fretlore.com.

Ads personalization is off in all regions, and no Google Ads account is linked. Google Signals remains enabled as described above.

11. Changes to this policy

This Privacy Policy may be updated when the website, analytics configuration, service providers or applicable legal requirements change.

The current version is available through the Privacy Policy link on fretlore.com.