Privacy Policy

Effective date: 19 September 2026

1. Who we are

Brew or False is an indie game published by Studio 2034.
Contact for data and privacy questions: Contact us

2. Data stored on your device

Brew or False stores core game data in your browser's localStorage to make the game work. This includes progress, scores, mistakes, run history, feature states, and device-local premium activation data. Data is sent to our services only when you use an optional server-backed feature described below.

This data:

stays on your device by default
is shared with our services only when you use an optional server-backed feature described below
can be deleted at any time by clearing your browser storage

Legal basis: performance of the service (Article 6.1.b GDPR).

3. Device unlock codes

If you enter a device unlock code (including trial codes we sometimes distribute), the app generates a device identifier and sends it, together with the code you entered, to our redeem-code service, hosted on Cloudflare (Workers and a D1 database), to enforce a usage limit and prevent abuse.

Cloudflare also processes your IP address for this request to prevent abuse and enforce rate limits.

Legal basis: legitimate interest in preventing abuse of unlock codes (Article 6.1.f GDPR).
Cloudflare acts under its own privacy policy: https://www.cloudflare.com/privacypolicy/

4. Payments

Payments are processed by Stripe. When you pay, Stripe collects data such as your email address, payment details, IP address, and device information.

Stripe acts under its own privacy policy: https://stripe.com/privacy

Legal basis: performance of a contract (Article 6.1.b GDPR).
Stripe may transfer data outside the EU using Standard Contractual Clauses.

5. Emails and optional forms

If you contact us, choose to share gameplay statistics by email, or submit an optional signup form, we receive your email address and any content you send.

These actions are voluntary. Any optional form may be provided by a third-party email platform acting under its own terms and privacy policy.

Legal basis: your consent (Article 6.1.a GDPR).

5A. Optional public leaderboard

If you choose to join the public leaderboard, Brew or False creates a separate device identifier and sends your chosen nickname and opt-in status to our leaderboard service hosted on Cloudflare. When score submission is enabled, completed RUN games may also send a run identifier, run number, content version, run duration, your answers and answer timings so the server can recalculate the score and protect the leaderboard against cheating.

The public leaderboard displays your nickname, rank and score. Your device identifier, individual answers and timings are not displayed publicly.

You can leave the leaderboard from the game. The service then deletes your leaderboard profile, submitted runs and saved best scores associated with that leaderboard device identifier.

Legal basis: your consent (Article 6.1.a GDPR). Cloudflare processes the service requests and may process your IP address for security and rate limiting under its own privacy policy.

6. Data retention

Game data stored in your browser remains until you delete it. Device-unlock-code redemption records (Section 3) are kept indefinitely; contact us to request deletion. Optional leaderboard records remain until you leave the leaderboard or request deletion. Emails are kept only as long as necessary to handle your request.

7. Analytics, cookies and tracking

Brew or False uses GoatCounter to measure aggregate website usage. GoatCounter does not use cookies or browser storage for visitor tracking and does not store IP addresses or full User-Agent headers. See GoatCounter's privacy documentation.

Brew or False does not use advertising trackers. Stripe may set cookies during checkout under its own responsibility.

Our hosting provider may process standard server logs, such as IP address and timestamp, for security and reliability purposes only.

8. Your rights

You have the right to request access, correction, or deletion of your personal data, and to object to processing where applicable.

To exercise your rights, contact: Contact us

You also have the right to lodge a complaint with your local data protection authority.