WHAT I DO WITH YOUR DATA.

THE SHORT VERSION

I collect the few things I need to answer you and build your game. It lives in one account I control. I don't sell it. Ask me to delete it and it's gone.

WHAT I COLLECT

Two forms on this site take information, and neither asks for more than it needs.

• The build request form. Your name, your brand or store, your category, your state, your Instagram handle (optional), your email, and your answer to the question about where you are with paid traffic right now (the field is called ad_situation). There's also a hidden spam-trap field that bots fill in and humans never see. If you arrived from a link with campaign tags on it (utm_source, utm_medium, utm_campaign, utm_content), those four tags ride along with the form so I know which link sent you. They describe the link, not you.
• The demo's email gate. If you play the demo and enter your email to unlock a code, I receive your email address, the prize tier the game landed on, and the demo code itself. A copy of the code is also saved in your own browser so it's still there when you come back.
• Analytics and tracking pixels, when they're enabled. More on that below.

Netlify, the host this site runs on, also keeps standard server logs — IP address, browser type, what was requested — the way every web host does.

WHY I COLLECT IT

Two reasons. To reply to build requests within 24 hours. And to send the occasional update about what I'm building. That's the whole list — I read what you send myself, there's no scoring engine running in the background, no profiling, and nothing gets quietly handed to a "partner network".

WHERE IT LIVES

Both forms land in Netlify Forms, the form handler built into the host this site runs on. Right now that is the only place your submission goes — there is no mailing-list tool wired up yet, and when I add one I'll name it on this page before the first send. Netlify is an American company, so what you send is stored on servers outside Canada.

Concretely, on how long I keep it: build requests stay for 24 months after our last exchange, demo emails for 24 months after the last email you opened, then they're deleted. Ask me sooner and it's gone sooner.

I DON'T SELL IT

Not to advertisers, not to data brokers, not to "partners". I don't rent it, trade it, or bundle it into anything. The only outsider that ever touches it is Netlify — the host that serves this site and holds the form entries — and only so it can do that job. If I ever add another service that handles what you send, it gets named on this page.

COOKIES AND PIXELS

This site doesn't set advertising cookies of its own.

The demo game ships with a Meta Pixel slot that is off by default. The pixel only loads and only fires when tracking is switched on for that page by dropping in a real pixel ID — until then no pixel code loads at all and nothing goes to Meta.

If it is switched on, what it sends is game events: page viewed, age gate passed, chip dropped, prize won and which tier it was, store link clicked, and the fact that the email gate was completed. It does not send your email address. The pixel script would also be a file fetched from Meta's servers, so Meta would see your IP address and your browser the way any file request does. On a live client build, the tracking that runs is usually the client's own pixel on the client's own page, and their privacy policy covers it.

Nothing else on this site is loaded from anyone else's servers. The fonts and the demo's physics engine are served from this site rather than from a font host or a CDN, so with the pixel slot empty these pages don't request a single file from a third party.

The demo also uses your browser's local storage to remember your prize code, how many drops you have left today, that you already passed the age gate, and whether you muted the sound. That's a functional thing rather than tracking — I can't read your local storage. The only reason I know your code is that the email gate sent me a copy when you unlocked it, as described above.

UNSUBSCRIBE OR DELETE

Every update email I send has an unsubscribe link and it works on the first click. If you'd rather tell me — or you want everything you've ever sent me erased — email hello@DOMAIN_PLACEHOLDER and say so. No retention offers, no "are you sure" maze. I'll confirm when it's done.

THE CANADIAN RULES (PIPEDA AND CASL)

INSERT COIN is run from Ontario, Canada, so Canada's privacy law (PIPEDA) and anti-spam law (CASL) apply to how I handle this. In practice: I collect only what I've told you I collect, I use it only for the reason you gave it to me, I email you because you asked me to or because you asked me to build you something, every message says who it's from and how to stop it, and you can ask to see what I'm holding on you.

IF YOU'RE IN THE US

Most of the people who fill in that form are American. A growing list of states — California, Colorado, Connecticut, Virginia, Texas and others — give residents rights over their personal information: to know what's held, to get a copy, to correct it, to have it deleted, and to opt out of it being sold or shared. I don't sell or share personal information, so there's nothing to opt out of on that one.

You exercise the rest the same way everyone else does: email hello@DOMAIN_PLACEHOLDER and tell me what you want. I'll check you're actually you, then do it. Same treatment whether or not your state has passed a law yet.

CHANGES TO THIS PAGE

If this page changes, the date at the top changes with it. If a change actually matters, I'll say so in an email instead of quietly editing a paragraph.

ASK ME ANYTHING

One person reads that inbox and it's me — hello@DOMAIN_PLACEHOLDER.