Privacy Policy

Last updated: July 2026

Controller

Eszenyi-Farkas Anette, operating the AIANDGRACE independent creative project.

Contact: hello@aiandgrace.com

No account is required to use this website or play Star Route. Personal data is collected only when you choose to submit the contact form or send an email, and where technically necessary to deliver and secure the site.

Local browser storage (on your device only)

The two Star Route games store the following values in localStorage on your device: your best score, your sound-effects preference, your music preference, your control sensitivity, an optional callsign you enter, the time of your previous visit, and whether the Signal War prologue has already been shown.

These values are used only to remember your game progress, settings, and returning-player behavior. The game code does not transmit them anywhere: they never leave your device, and Eszenyi-Farkas Anette cannot view, retrieve, correct, or delete them. You can remove them at any time by clearing your browser's site data for aiandgrace.com. They are not used for analytics, advertising, profiling, behavioral tracking, or identification across websites.

This section is included for transparency. These locally stored values are not transmitted to or accessible by the operator.

Cookies, analytics, and tracking

The current site does not intentionally deploy advertising cookies, behavioral tracking, analytics scripts, or tracking pixels. The external form processor may present a CAPTCHA or similar anti-abuse challenge after you submit the contact form; that external service may process technical data under its own terms. No contact-form data is sent until you choose to press the submit button.

Contact form and email correspondence

If you use the contact form, AIANDGRACE requests your name, email address, inquiry type, and message. The form does not accept attachments. The submission is transmitted over HTTPS to FormSubmit, which delivers it to hello@aiandgrace.com. FormSubmit states that form submissions are retained in its submission archive for 30 days. See the FormSubmit privacy notice.

If you instead write directly to hello@aiandgrace.com, your email may contain: your name, your email address, recipient information, the subject line, the message content, any attachments, timestamps, and delivery and technical email metadata.

This information is used for: receiving and responding to inquiries; project administration; maintaining necessary correspondence; security and preventing abuse; handling an existing or proposed collaboration or agreement; and establishing, exercising, or defending legal claims where necessary.

Legal bases, where the EU General Data Protection Regulation (GDPR) applies:

• Article 6(1)(f) GDPR (legitimate interests) — responding to ordinary correspondence, administration, security, and keeping necessary records;
• Article 6(1)(b) GDPR — only where your message requests steps before entering into an agreement, or concerns an existing agreement with you;
• a legal obligation — only where a specific obligation actually applies to the correspondence.

Form anti-abuse protection

FormSubmit may require an anti-spam challenge when a form is submitted. If a challenge is shown, the challenge provider and FormSubmit may process limited technical information needed to distinguish legitimate submissions from automated abuse. You may avoid the form processor by copying the published email address and contacting AIANDGRACE directly through a mail service of your choice.

Retention

Routine correspondence is normally deleted within 12 months after the matter is concluded. It may be retained longer where necessary for an ongoing relationship, compliance with a legal obligation, a security incident, a dispute, or the establishment, exercise, or defense of legal claims.

Device-only localStorage remains on your device until you delete the site data yourself; the operator cannot delete it remotely.

Hosting and security records are kept by the hosting platform for as long as needed for site delivery, security, abuse prevention, and diagnostics, according to the platform's own operational practices. The operator does not maintain a separate copy and does not set the platform's retention schedule.

Hosting and security

The website is hosted on Cloudflare Pages. Cloudflare and its relevant group entities may process limited technical data required for site delivery, security, abuse prevention, diagnostics, and reliability. Such technical data may include: IP address, browser or device information, request timestamps, the requested URL, security events, and diagnostic or server-log information.

Where GDPR applies, this processing supports the operator's legitimate interest in providing a secure and reliable website (Article 6(1)(f) GDPR).

Recipients and service providers

• Cloudflare and relevant Cloudflare group entities — hosting, content delivery, and security for the website;
• FormSubmit / Devro LABS — processing and delivery of contact-form submissions, including temporary submission storage;
• the professional email-hosting provider used for hello@aiandgrace.com — email delivery and storage for messages you choose to send.

Personal data is not sold and is not shared for marketing.

International processing

The technology providers above may process technical data on servers outside Hungary or the European Economic Area as part of their global infrastructure. Where GDPR applies, applicable safeguards may include an adequacy decision of the European Commission, Standard Contractual Clauses, or other safeguards available under applicable law, depending on the provider and the transfer. Details are available in the providers' own privacy documentation.

Providing data

You are not legally or contractually required to provide personal data through this website. However, the operator cannot respond to an inquiry without receiving an email address and sufficient message content.

Children

The website does not offer user accounts, public profiles, behavioral advertising, or forms directed at children. AIANDGRACE does not intentionally request personal information from children. If a parent or guardian believes that a child has sent personal information by email, they may contact hello@aiandgrace.com.

Automated decision-making

The website does not use automated decision-making or profiling producing legal or similarly significant effects.

Your rights

Where GDPR applies, and depending on the specific processing and its legal basis, you may have the right to: access your personal data; have it corrected; have it deleted; restrict its processing; object to processing based on legitimate interests; receive it in a portable format where processing is based on contract or consent; and withdraw consent where processing is based on consent, without affecting prior processing.

Note that the operator cannot retrieve, correct, or delete the device-only localStorage values described above, because they were never received; those values are directly in your control through your browser settings.

To exercise a right, write to hello@aiandgrace.com.

Complaints — supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of an alleged infringement. The competent authority in Hungary is:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/

Changes

This notice may be updated if the website's functionality, providers, or data practices change. The date above shows the latest revision.

Contact

For privacy-related questions: hello@aiandgrace.com