Privacy Notice
Last updated: 4 September 2026
Who is responsible
Broadmoor Studio operates this site and is the data controller for everything described below. Contact: support@broadmoorstudio.com.
What we collect
If you create an account. The username you choose and your password stored as a scrypt hash (we never hold the password itself), plus a session token for each sign-in with the time it was created. An email address is optional — you can register without one, and it is only used if you ever need a password reset.
If you play a game that records progress. Lap and session times, the world they were set in, and when. These are attached to your account so the times are yours.
Your IP address, for rate limiting only. Sign-in and password-reset requests are counted per IP address in memory to stop password guessing. That counter is never written to disk and never attached to your account.
Server logs. Like any web server, ours records each request: IP address, the page requested, the time, and the browser string. They are rotated and overwritten automatically after roughly two months, are read only in aggregate, and are not joined to accounts.
What you choose to send. A message through the contact form or by email. You can leave your name and email off it, though the server log still records the IP it came from.
What we do not collect. No device identifier, no location, no advertising ID of our own, and no cross-site profile. Broadmoor Studio runs no analytics product of its own.
Why, and on what legal basis
- Account, sign-in, saved times — to provide what you asked for. Performance of a contract, GDPR Article 6(1)(b).
- Rate limiting, abuse prevention, server logs — to keep the service standing up. Legitimate interests, Article 6(1)(f).
- Advertising cookies — consent, Article 6(1)(a), which you can withdraw at any time through Google's controls linked below.
How long we keep it
- Account and saved times — until you delete your account, which deletes them.
- Session tokens — until you sign out, or the account is deleted.
- Reset tokens — cleared when used; reset links expire.
- Server logs — about two months, then overwritten.
- Rate-limit counters — in memory only; gone when the service restarts.
Who else sees it
- Hetzner — hosts the server. Germany.
- Google — serves the ads on this site. United States.
- Stripe — processes payments. Card details never touch this site and we never see them. United States.
- Cloudflare — answers DNS for the domain. United States.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Google and Stripe are outside the EEA and UK; transfers to them rely on the standard contractual clauses in their own terms.
Ads, and tracking across sites
No advertising script loads until you allow it. The first time you visit, a bar at the bottom of the page asks. Until you choose, nothing from Google is fetched and no advertising cookie is set. If you choose No ads, that is remembered and nothing is loaded on later visits either.
If you allow them, ads are served by Google AdSense. Google may then set cookies or use device identifiers, and may build a profile of your activity across other sites over time to choose which ads to show. That is Google's processing, not ours, and we receive none of it.
To change your mind, clear this site's data in your browser, or open the browser
console on any page here and run BM_ADS_RESET() — the bar comes back on
the next page load. You can also review what Google holds at
My Ad Center,
and read
Google's advertising policy.
Your answer is stored in this browser only, as a single value in local storage. It is not sent anywhere.
Do Not Track
We run no analytics or tracking of our own, so a Do Not Track signal changes nothing about what this site does — there is nothing for it to switch off. We do not currently pass the signal on to our advertising partner. Use the Google controls above to change what Google does.
Your rights, and how to use them
You can see, take, correct or delete everything attached to your account. Sign in and open Profile in any game that uses the account system:
- Download my data gives you a JSON file with your account details, sign-in times and every saved lap. That covers access (Article 15) and portability (Article 20).
- Delete my account erases the account row, every saved lap and every session, in one transaction. It is a deletion, not a flag, and it cannot be undone (Article 17).
To correct something, restrict processing, or object to it, email support@broadmoorstudio.com and we will answer within one month. If you are in the EEA or UK and are unhappy with the response, you can complain to your national data protection authority.
Automated decisions
If a lap time is rejected as implausible, that is an automated check on the number itself and it does not affect your account. If you think a time was wrongly rejected, email us and a person will look at it.
Children
This site is not directed to children under 13 and we do not knowingly collect their personal information. We do not ask for a date of birth: collecting one to prove we asked would gather more personal data than the check protects. If you believe a child has created an account, email us and we will delete it.
Changes to this notice
The date at the top changes whenever this notice does. If a change materially affects what we collect or why, we will say so on the site's front page for at least thirty days before it takes effect.