01 · Current status
Collection only when you choose it
This notice covers the studio website, newsletter, and contact services. For sign-in, followed games, avatars, notifications, and optional game connections, read the Dexter Account privacy notice.
Newsletter and contact forms send information only after you choose to submit and complete the security check. Forms may be temporarily paused. A submission rejected while intake is paused is not stored by Dexter's intake service.
Support and privacy email routes, newsletter confirmation, and unsubscribe remain available when new form submissions are paused.
03 · Contact
Your message to the studio
When you send a contact form, we process your name, email address, selected category, message, privacy acknowledgment, submitting site and page, and a random submission identifier. A spam-trap field and short-lived Cloudflare Turnstile token help prevent abuse. Cloudflare protects the submission, Supabase stores a copy, and Google Workspace delivers it to the studio for a human reply.
We use the submission identifier to handle retries and reduce duplicate messages. A delivery with an uncertain result is reviewed before another send is attempted. Resend handles newsletter mail, while human contact messages and replies use Google Workspace. Contacting us does not subscribe you to the newsletter.
04 · Security checks
Cloudflare Turnstile
Enabled forms use Cloudflare Turnstile to distinguish legitimate requests from automated abuse. Cloudflare may process network, browser, device, and interaction signals to produce a short-lived verification token. Forms remain disabled if the security check is unavailable, and submissions are validated before acceptance.
For rate limiting and consent evidence, Dexter's form records store a keyed hash derived from the request IP address rather than the raw address. We do not store a user-agent hash in those records. The request IP is sent to Cloudflare to verify the token. Infrastructure providers may process request metadata in their security logs. Dexter's hashes are removed with the associated record under the retention periods below.
05 · Retention and choices
Retention and your choices
We remove unconfirmed or still-confirming newsletter requests after seven days, the Supabase database copy of a contact submission after one year, newsletter and contact delivery metadata after 90 days, unsubscribed records after 24 months, and expired rate-limit buckets. Confirmed newsletter records remain only while the subscription is active.
Copies in the studio's Gmail mailbox are permanently deleted at 700 days. Support conversation archives in Google Groups are separate copies; reviews at least every 30 days remove conversations before they reach that same 700-day bound. Press and privacy routes do not keep Google Groups conversation history. Limited recovery copies may remain briefly in Google's backup systems after deletion from the active mailbox. Records may be retained longer when reasonably necessary for a legal obligation, security investigation, fraud or abuse prevention, or dispute.
Every studio update provides an unsubscribe action. Removing a record from one service does not immediately remove provider logs or backups in all services. To prevent old campaigns from being sent again, we retain a permanent record of the campaign identifier, source brand, content fingerprint, and first-seen time; it contains no subscriber address, subject, or message body. Resend retains email data for 30 days across standard plans. Its account data, including email metadata, logs, and API records, remains stored in the United States regardless of sending region. Resend's DPA says customer data is deleted within 90 days after account termination unless continued storage is required or authorized by law.
06 · Hosting data
Infrastructure logs
Vercel hosts the site and may process routine HTTP request information such as IP addresses, device details, and security logs while delivering it. Cloudflare provides authoritative DNS and the protected forms gateway and may process DNS-query and request-security metadata under its policies and service terms.
07 · Game sites and external links
Separate destinations
Links to our game websites, stores, or other services lead to separately operated pages. Their privacy notices apply after you leave this site. Game-specific support and privacy pages are maintained with their respective products.
08 · Privacy contact
Privacy questions and requests
For access, correction, deletion, or privacy questions, email privacy@dexterinteractive.com. The route stays available when new form intake is paused.
We will update this notice when our providers, purposes, or retention practices change.