Privacy Policy

Last updated: August 27, 2026

Controller

Eszenyi-Farkas Anette, operating the AIANDGRACE independent creative project.

Contact: hello@aiandgrace.com

No account is required to use this website, play its games, or use its interactive experiences. Personal data is collected only when you choose to submit the contact form or send an email, and where technically necessary to deliver, secure, and operate the site. Privacy-preserving aggregate website analytics are described below.

Local browser storage (on your device only)

The two Star Route games store the following values in localStorage on your device: your best score, your sound-effects preference, your music preference, your control sensitivity, an optional callsign you enter, the time of your previous visit, and whether the Signal War prologue has already been shown.

These values are used only to remember your game progress, settings, and returning-player behavior. The game code does not transmit them anywhere: they never leave your device, and Eszenyi-Farkas Anette cannot view, retrieve, correct, or delete them. You can remove them at any time by clearing your browser's site data for aiandgrace.com. They are not used for analytics, advertising, profiling, behavioral tracking, or identification across websites.

This section is included for transparency. These locally stored values are not transmitted to or accessible by the operator.

The Völva’s Vision does not store your selected rune or its music setting. Its locally hosted meditation music is set to begin automatically when the Völva menu opens and can be switched off at any time. If a browser blocks audible autoplay, playback begins at the first permitted user interaction.

Cookies, analytics, and tracking

AIANDGRACE uses Cloudflare Web Analytics to understand aggregate website use and real-world page performance. The service measures items such as visits, page views, referring sites, country, device type, browser, operating system, page-load performance, and Core Web Vitals. These measurements are used to improve site performance, navigation, content, and product decisions.

Cloudflare Web Analytics is designed without analytics cookies or localStorage, does not use browser fingerprinting, does not track individual visitors across Cloudflare customers' websites, and does not log URL query strings for Web Analytics. Cloudflare states that Web Analytics does not collect or use visitors' personal data. The Cloudflare Web Analytics beacon is loaded from Cloudflare's analytics infrastructure and may send measurement data to Cloudflare's RUM endpoint at cloudflareinsights.com. The service is used for aggregate traffic and performance measurement, not advertising, cross-site tracking or user profiling.

AIANDGRACE does not use the analytics service for advertising, behavioral profiling, cross-site tracking, or marketing personalization. No advertising cookies or third-party marketing pixels are intentionally deployed.

The external form processor may present a CAPTCHA or similar anti-abuse challenge after you submit the contact form; that external service may process technical data under its own terms. No contact-form data is sent until you choose to press the submit button.

Contact form and email correspondence

If you use the contact form, AIANDGRACE requests your name, email address, inquiry type, and message. The form does not accept attachments. The submission is transmitted over HTTPS to FormSubmit, which delivers it to hello@aiandgrace.com. FormSubmit states that form submissions are retained in its submission archive for 30 days. See the FormSubmit privacy notice.

If you instead write directly to hello@aiandgrace.com, your email may contain: your name, your email address, recipient information, the subject line, the message content, any attachments, timestamps, and delivery and technical email metadata. Incoming mail for hello@aiandgrace.com is routed through Cloudflare Email Routing to a Gmail mailbox operated by Google.

This information is used for: receiving and responding to inquiries; project administration; maintaining necessary correspondence; security and preventing abuse; handling an existing or proposed collaboration or agreement; and establishing, exercising, or defending legal claims where necessary.

Legal bases, where the EU General Data Protection Regulation (GDPR) applies:

• Article 6(1)(f) GDPR (legitimate interests) — responding to ordinary correspondence, administration, security, keeping necessary records, and, to the extent applicable to technical website data, understanding aggregate site use and improving website performance and usability;
• Article 6(1)(b) GDPR — only where your message requests steps before entering into an agreement, or concerns an existing agreement with you;
• a legal obligation — only where a specific obligation actually applies to the correspondence.

Form anti-abuse protection

FormSubmit may require an anti-spam challenge when a form is submitted. If a challenge is shown, the challenge provider and FormSubmit may process limited technical information needed to distinguish legitimate submissions from automated abuse. You may avoid the form processor by copying the published email address and contacting AIANDGRACE directly through a mail service of your choice.

Retention

Routine correspondence is normally deleted within 12 months after the matter is concluded. It may be retained longer where necessary for an ongoing relationship, compliance with a legal obligation, a security incident, a dispute, or the establishment, exercise, or defense of legal claims.

Device-only localStorage remains on your device until you delete the site data yourself; the operator cannot delete it remotely.

Hosting and security records are kept by the hosting platform for as long as needed for site delivery, security, abuse prevention, and diagnostics, according to the platform's own operational practices. The operator does not maintain a separate copy and does not set the platform's retention schedule.

For Cloudflare Web Analytics, Cloudflare currently states that unsampled beacon data is retained for 7 days and then aggregated for longer-term storage. The Web Analytics interface currently makes up to the previous six months of analytics data available. AIANDGRACE does not maintain a separate visitor-level analytics database.

Hosting and security

The website is hosted on Cloudflare Pages. Cloudflare and its relevant group entities may process limited technical data required for site delivery, security, abuse prevention, diagnostics, reliability, and the privacy-preserving Web Analytics service described above. Such technical data may include IP address, browser or device information, request timestamps, the requested URL, security events, and diagnostic or server-log information.

For the Web Analytics RUM beacon specifically, Cloudflare states that the source IP address is received as part of normal HTTP request handling but is discarded at the nearest Cloudflare data center and is not stored in the service's core databases or logs.

Where GDPR applies, this processing supports the operator's legitimate interest in providing a secure and reliable website and in understanding aggregate site use and performance so the service can be improved (Article 6(1)(f) GDPR).

Recipients and service providers

• Cloudflare and relevant Cloudflare group entities — hosting, content delivery, security, diagnostics, privacy-preserving aggregate Web Analytics, and Email Routing for the website;
• FormSubmit / Devro LABS — processing and delivery of contact-form submissions, including temporary submission storage;
• Google — destination mailbox delivery and storage for email routed from hello@aiandgrace.com.

Personal data is not sold and is not shared for marketing.

International processing

The technology providers above may process technical data on servers outside Hungary or the European Economic Area as part of their global infrastructure. Where GDPR applies, applicable safeguards may include an adequacy decision of the European Commission, Standard Contractual Clauses, or other safeguards available under applicable law, depending on the provider and the transfer. Details are available in the providers' own privacy documentation.

Providing data

You are not legally or contractually required to provide personal data through this website. However, the operator cannot respond to an inquiry without receiving an email address and sufficient message content.

Children

The website does not offer user accounts, public profiles, behavioral advertising, or forms directed at children. AIANDGRACE does not intentionally request personal information from children. If a parent or guardian believes that a child has sent personal information by email, they may contact hello@aiandgrace.com.

Automated decision-making

The website does not use automated decision-making or profiling producing legal or similarly significant effects.

Your rights

Where GDPR applies, and depending on the specific processing and its legal basis, you may have the right to: access your personal data; have it corrected; have it deleted; restrict its processing; object to processing based on legitimate interests; receive it in a portable format where processing is based on contract or consent; and withdraw consent where processing is based on consent, without affecting prior processing.

Note that the operator cannot retrieve, correct, or delete the device-only localStorage values described above, because they were never received; those values are directly in your control through your browser settings.

To exercise a right, write to hello@aiandgrace.com.

Complaints — supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of an alleged infringement. The competent authority in Hungary is:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Email: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/

Changes

This notice may be updated if the website's functionality, providers, or data practices change. The date above shows the latest revision.

Contact

For privacy-related questions: hello@aiandgrace.com