Privacy Policy

Short version: we collect your email address only if you type it into the signup form, we use it only to email you about Beat Baes, we never sell it, and analytics and ad measurement both stay off unless you accept them in the cookie banner.

1. Who is responsible

Barely Playable Games is the data controller for this site. Contact: hello@beatbaes.com.

2. What we collect

• Email signups. Your email address, whether you ticked the “private test rounds” box, and the time you submitted. That's all the form sends.
• Analytics, if you accept them. Pages visited, referrer, approximate region, device and browser type, and how you interact with the page. See section 5.
• Server logs. Our host records standard request logs, including IP address, for security and reliability. We don't use these to build a profile of you.

We don't ask for your name, address, date of birth or payment details, and the site takes no payments.

3. Why we use it, and our lawful basis

• To email you about the game, because you asked us to (consent). Every email includes an unsubscribe link, and you can withdraw consent at any time.
• To understand how the site is used, only with your consent, via the cookie banner.
• To keep the site up and secure, our legitimate interest in operating it.

4. Who we share it with

We do not sell your data. We use a small number of processors to run the site: our hosting provider, our automation platform for storing signups, and, only if you accept them in the cookie banner, the analytics and advertising-measurement processors named in section 5. One of those, Reddit, is an advertising platform: if you accept, and you arrived from a Reddit ad, we tell Reddit that a conversion happened so that campaign's performance can be measured. We do not run display ads or personalised ads on this site itself, and we send Reddit only the small, fixed set of conversion events described in section 5, never a general feed of your activity on this site. Reddit is an independent company and operates its advertising platform under its own privacy policy and data practices, which we do not control and this page does not describe; see Reddit's own privacy policy for what it does with data once received. Our hosting and signup-storage providers act on our instructions in the way a processor normally does.

5. Cookies, analytics and ad measurement

Analytics and ad measurement both load only after you accept them in the cookie banner. Decline, and none of the code below is ever downloaded, no cookies or storage from any of these providers are created, and no request reaches any of them. If you accept, Google Analytics sets first-party cookies (_ga and _ga_…) to recognise a repeat visit, and Reddit's pixel may set its own cookie the same way any advertiser's conversion pixel does; the Google ones are removed again if you withdraw consent (see below for what we can and can't undo for Reddit). Your consent choice itself is remembered in your browser's local storage, not in a cookie sent to us.

If you accept, we use three processors:

• PostHog (PostHog Inc., United States). Product and web analytics, session replay, feature flags, surveys and error reporting. It records pages visited, referrer, approximate region derived from your IP, device and browser type, and how you interact with the page. Session replay records interactions with the page; text you type into form fields is masked and is not recorded.
• Google Analytics 4 (Google Ireland Limited / Google LLC). Website analytics: pages visited, referrer, approximate region, device and browser type, and a small number of events such as clicking a link out to itch.io or completing the signup form. We run it with Google's advertising features switched off. Advertising storage, advertising user data and ad personalisation are set to “denied” permanently and are never granted, Google Signals is disabled, and your data is not used to build advertising audiences. We do not run Google Ads.
• Reddit Pixel and Conversions API (Reddit, Inc., United States). Advertising measurement, used only to tell Reddit whether one of its own ad clicks led to a real visit, a real email signup, or real engagement with the playable build. If your visit carried a Reddit ad's click identifier, we send that identifier back to Reddit alongside the conversion, plus your IP address and browser type, which is how Reddit matches a conversion to the ad that produced it. We do not send your email address or name to Reddit, and Reddit does not receive this click identifier at all unless you actually arrived from a Reddit ad.

We do not send your email address, your name, anything you type into a form, or error message text to any of these providers. A web address is stripped of anything except basic campaign tags before being recorded, so unsubscribe links and similar one-off links are never passed on; the one exception, described above, is Reddit's own click identifier, sent only to Reddit and only when it is present. Analytics and ad measurement also stay off entirely on our own test and preview builds.

If your browser sends a “Do Not Track” signal, we honour it and analytics and ad measurement stay off even if you accepted them.

You can change your mind at any time. Withdrawing consent takes effect immediately for everything we control: we stop collecting, stop any session recording, discard the anonymous id used to group your visit, and delete the Google Analytics cookies from your browser, without needing to reload the page. Reddit publishes no equivalent client-side opt-out for its pixel, so withdrawing consent stops us sending it anything further but cannot retroactively undo whatever it may already have recorded for the current visit before you withdrew.

Analytics preference. Change

6. How long we keep it

Signup addresses are kept until you unsubscribe or ask us to delete them, or until the project ends. Analytics data is retained according to each provider's default retention period. Server logs are short-lived.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, and to object to processing. Email hello@beatbaes.com and we'll action it. You can also complain to your local data protection authority.

8. International transfers

Our hosting and processors may store or process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

9. Children

The site isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child has given us their email address, contact us and we'll delete it.

10. Changes

We'll update this page as the project grows and change the date above. See also our Terms & Conditions.