Privacy policy

Last updated: 2026-09-27

Who we are

This website and the Shiver My Bricks! mailing list are run by Nikolay Egorov, a private individual, who is the data controller. For any privacy question or request, write to hello@shivermybricks.com.

We apply the protections of the EU General Data Protection Regulation (GDPR) to all subscribers, wherever they live.

What we collect and why

Mailing list

When you subscribe, we store your email address. When you confirm the subscription via the link we send you, we also store the date, time and IP address of that confirmation as proof of your consent.

We use this data only to send you emails about major Shiver My Bricks! milestones: the Steam page announcement, beta tests, the Early Access launch and the full release. We expect only a handful of emails in total. We never sell or share your address for anyone else's marketing.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email.

If you don't confirm your subscription, your address is never mailed again and is deleted within 30 days.

Security logs

To protect the website against abuse, our server and our network provider (Cloudflare) process technical data such as IP addresses and browser information. This is based on our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR). Our own server logs are deleted automatically after 14 days.

No tracking

This website uses no analytics and sets no tracking cookies. Our emails contain no tracking pixels and no click tracking. The anti-bot check on the signup form runs on our own server and uses no cookies.

Who processes your data for us

Cloudflare is a US company. Where data is transferred to the United States, it is protected under the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

Where your email address goes

Your subscription is stored on our server in the Netherlands. Our emails are delivered by Yandex Cloud Postbox, a service of Yandex.Cloud LLC in Russia: to deliver each email, your email address and the content of the email are sent to this service. It keeps delivery logs and, if a message bounces or you mark it as spam, a record that your address must not be mailed.

Depending on where you live, this may be a transfer of your data to a country whose data protection rules differ from yours. In particular, if you live in the European Economic Area, the United Kingdom, Switzerland or Brazil, please be aware of the risks: Russia is not recognised as providing an adequate level of data protection, no Standard Contractual Clauses or similar safeguards are in place with this provider, and Russian authorities may be able to access data held there.

We transfer your address only with your consent (for the GDPR, Art. 49(1)(a)). You give it when you submit the signup form and confirm it when you click the link in the confirmation email. You can withdraw it at any time by unsubscribing — after that, no further emails and therefore no further transfers take place.

How long we keep your data

We keep your email address until you unsubscribe. After that we keep only a record that the address must not be mailed again, unless you ask us to erase it completely.

Your rights

You have the right to access, correct, export and erase your data, to restrict or object to its processing, and to withdraw your consent at any time. The subscription management page linked in every email lets you download or wipe your data yourself; you can also simply email us.

You also have the right to lodge a complaint with the data protection authority in your country.

Changes

If we change this policy, we will update the date above. We will not use your data for new purposes without asking for your consent first.