Privacy Policy

This policy explains what data Cinderpoint (Cinderpoint Systems LLC) collects on cinderpoint.com. The short version: the website logs standard server access for 24 hours and stores only an email you choose to give us.

Data Controller

The data controller under Regulation (EU) 2016/679 (GDPR) is Cinderpoint Systems LLC. A Data Protection Officer is not required under GDPR Art. 37 for this operation; contact waydell@cinderpoint.com for any data-protection matter. Cinderpoint Systems LLC is registered in Wyoming, United States; no marketing email is sent from this site and the mailing address is not published here per our minimum-exposure policy.

What cinderpoint.com Collects

Our web servers automatically collect basic technical request data (IP address, User-Agent, timestamp) for security and diagnostic purposes. This data is automatically discarded within 24 hours and is not used for analytics, profiling, or marketing. Lawful basis: legitimate interest under GDPR Art. 6(1)(f) for the security and operation of the site. This site does not use tracking cookies, advertising networks, or third-party analytics scripts. cinderpoint.com sets no cookies of any kind (functional, analytics, or advertising), so no cookie banner is displayed. If you submit your email through a contact form, that address is stored only to respond to you. The homepage newsletter section and the Outpaced by AI book page include a signup form that submits your email directly to Kit (ConvertKit) when you send it; see Third-Party Services below for how that is handled. We do not sell, rent, or share any email address for marketing.

Children's Privacy

No personal data beyond a voluntarily submitted email is collected or stored. We do not knowingly collect data from minors.

Your Rights (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights over any personal data we hold about you under the General Data Protection Regulation (Regulation (EU) 2016/679): access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and the right to lodge a complaint with a supervisory authority (Art. 77). Exercise any of these by emailing waydell@cinderpoint.com; we respond within 30 days as required by Art. 12(3).

California Residents (CCPA / CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. Cinderpoint Systems LLC does not sell your personal information and does not share it for cross-context behavioral advertising. We do not process "sensitive personal information" as defined by CPRA. The only personal information we hold is an email address you voluntarily submit. You may request access to, deletion of, or correction of that email by contacting waydell@cinderpoint.com.

Fonts and CDNs

This site self-hosts all fonts (Inter and IBM Plex Mono site-wide, plus Atkinson Hyperlegible on /screening/; all under SIL Open Font License 1.1). We do not load fonts from Google Fonts or any other third-party CDN. No IP-address logging by font providers, no GDPR-flagged data transmission, no surprise dependencies.

Third-Party Services

Some pages link out to third-party sites (for example YouTube, SSRN, Substack, Zenodo, and Amazon for the book listing); these are plain outbound links, not embedded players or widgets, so no third-party script or player runs on this site itself. Following a link takes you to that service, which then applies its own privacy policy. The SAIERA Safemachine: Screening game mirrored at /screening/ makes plain data-only requests (no cookies, no script, no tracking) to fetch shared content it displays: promotional listings and crisis-resource data from cinderpoint.com (the canonical host for content shared across apps and games), and its commitment statement from rusthorn.com, the Rusthorn games imprint's own domain under the same corporate parent, Cinderpoint Systems LLC. If any of these requests fails, the game falls back to content bundled with it; the game also offers share buttons that open a prefilled post on LinkedIn or X only if you click them. The homepage newsletter section and the Outpaced by AI book page each include a signup form that submits your email address directly to Kit (ConvertKit) at app.kit.com when you send it; Kit then collects and stores it as an independent data processor under Kit's own privacy policy, and Cinderpoint does not otherwise access, sell, or share that address. Aside from that form submission, which happens only when you choose to send it, the site makes no third-party requests.

Cookies

This site does not set any cookies of its own. It uses your browser's localStorage only to remember your light/dark theme preference and (on /screening/) local game progress, both stored only on your device and never transmitted anywhere. No third-party embed on this site sets a cookie, because there are no embeds, only outbound links (see Third-Party Services above). No cookie banner is shown because no consent-required cookies or comparable tracking are placed by Cinderpoint™.

Changes to This Policy

If we update this policy, the effective date above changes and the canonical version at cinderpoint.com/privacy.html is updated. We will not notify you by email unless the change materially affects how we use data you have given us.

This page describes our values and current practices. It is not a contract, warranty, or guarantee, and may be updated.

Contact

Questions about this privacy policy: waydell@cinderpoint.com. We aim to respond within 5 business days.