Privacy.
we're a tiny indie dev with no ad business and no interest in who you are, so this policy is pretty short. TL;DR: we keep almost nothing, and the little that exists is sitting in your own browser, sitting in an inbox because you wrote to us, or an address you typed into the signup box yourself. there's a page counter as well, and it doesn't know your name.
Who this is, and what it covers
LOBA LOCA LTD. is an indie game dev based in Toronto, Ontario, Canada. we decide what happens to the small amount of data described here, which makes us the ones you complain to. reach us at hola@loba-lo.ca. this policy covers this website only.
What we collect
almost nothing, and only if you hand it over. no advertising, no cross-site tracking, no profile of you sitting anywhere. we do keep a plain count of which pages get looked at, which has its own section further down. fonts are served from this domain instead of an external font CDN.
the only thing stored on your device is your light or dark theme choice, kept in your browser's local storage. we don't set any cookies ourselves, though the bot check on the signup form might. that's further down.
the one thing we keep on a server is your email address, and only if you typed it into the box yourself.
What our host sees
the site is served through a hosting provider and a content network. their servers record info like IP address, page requested, browser's user agent, the time, and they may set a short-lived security cookie to tell humans apart from bots. either way, we don't use any of that shit for anything.
the signup box also runs Cloudflare Turnstile, a bot check that reads how your browser behaves rather than making you click on buses and traffic lights. it may leave a short-lived cookie, and when you subscribe we hand Cloudflare your IP, but only so they can confirm the check was real. we don't keep it, we don't need it.
Counting pages
we run Cloudflare Web Analytics, so we can tell whether anyone actually read the devlog. it sets no cookies, saves nothing on your device, and doesn't fingerprint you. it can't follow you to another site and it won't recognise you when you come back tomorrow.
what it records is the page that got loaded, the link you came in from if there was one, your country, roughly what browser and device you're on, and how fast the page rendered. Cloudflare says it doesn't store any part of your IP address. what the dashboard calls a "visit" is only a page view that arrived from somewhere off this site, so it's a rough tally, not a person.
because Cloudflare already sits in front of the site, they switch this on for us and the script comes down with the page from static.cloudflareinsights.com. block it and nothing breaks. all we get out of it is a number on a chart.
What you send us
if you email us, we hold the contents of that email, including your address and anything you write, only to answer you and keep things on the record. our mail runs on Google Workspace, so it lives on Google's servers, some of them outside Canada.
e-mail us if you need us to delete your thread, and we will.
The mailing list
put your address in the box on the front page and we keep it, along with the date, your country code, which form you used, and a copy of the sentence you agreed to. the country, not your IP.
it's for emailing you about our games. nothing else, ever. it lives in a Cloudflare database in eastern north america, which is the closest thing to Toronto they offer and is still the United States, so it's stored outside Canada.
we keep it until you tell us to stop. email us to get your name removed from the rolls and you're off the same day. when we start actually sending stuff there'll be an unsubscribe link on every one.
What we don't do
no selling, no buying, no profile building, no ad targeting, no data brokers. we don't hand your details to anyone else, full stop. we won't put you on a mailing list either, unless you're the one who asked.
Links out
our links go to Steam, YouTube, Bluesky and FurAffinity. once you're over there, go read their privacy policy not ours!!
two things on this site load something from somewhere else without you clicking a link: the bot check on the signup box, and the analytics script. both are Cloudflare, both are covered further up.
Kids
this site isn't aimed at children under 13 and we don't knowingly collect anything from them. if a kid has emailed us and you'd rather that didn't sit in our inbox, write to us and it's gone. same goes if a kid has put an address in the signup box.
Your rights
you can ask to see, correct, or delete anything we hold about you at any time. write to hola@loba-lo.caand we'll sort it, normally within a month. to clear your local theme preference, wipe your browser's site data for this domain.
in Canada that's your PIPEDA right of access and correction, and an unresolved complaint can go to the Office of the Privacy Commissioner. in the UK or the EU you also have the right to object, to restrict, and to get a copy of your data in a portable form, and you can complain to your national supervisory authority. our basis for holding your email is the legitimate interest of replying to a message you chose to send us. for the mailing list it's your consent, which you can take back whenever you like.
Updates
we won't bury changes in legalese. we will update this page whenever there are changes.
Last updated: 24 August 2026. LOBA LOCA.