Last updated: June 4, 2026 · Effective: June 4, 2026 · Operator: Umber Krakatoa, 2207 E Cesar Chavez St, Suite 140, Austin, TX 78702 · [email protected]

Privacy Policy

Summary: We collect only what you give us voluntarily (name, phone, email via our subscribe form). We use cookies to remember your preferences. Push notifications are handled by OneSignal. We do not sell your data. You must be 18 or older to use this site.

1. Who We Are

Umber Krakatoa ("we," "our," "us") operates the website at umberkrakatoaexa.org as a free social gaming hub for entertainment purposes. We are based at 2207 E Cesar Chavez St, Suite 140, Austin, TX 78702, USA. Our contact email for privacy matters is [email protected].

2. Age Requirement

This website is intended for users who are 18 years of age or older. We do not knowingly collect personal information from minors. If you believe a minor has submitted information to us, please contact us immediately at [email protected] and we will delete it.

3. Information We Collect

3.1 Information You Provide Voluntarily

When you use our newsletter/subscription form, you may provide:

Full name — to personalize communications
Phone number — optionally, for contact purposes
Email address — to deliver newsletters and notification updates

Submission of this form requires your explicit consent via a checkbox that is not pre-checked. You cannot submit the form without actively checking this box.

3.2 Automatically Collected Information

Our web server and analytics tools may automatically log:

IP address (anonymized where technically feasible)
Browser type and version
Pages visited and time on site
Referring URL
Device type

This information is used solely for operational purposes (security, performance monitoring, and understanding aggregate traffic) and is not linked to personal identity.

3.3 Browser Local Storage

Our achievements / Passport Stamps system stores small text entries in your browser's local storage to track which stamps you have earned. This data never leaves your device and is not transmitted to our servers. You can clear it at any time through your browser settings.

4. Push Notifications — OneSignal

Push notifications on this site are handled by OneSignal, a third-party service. When you opt in to push notifications through our subscribe form, OneSignal receives your email address and a push-service identifier for your browser. OneSignal's own privacy policy governs their data practices — please review it at onesignal.com/privacy_policy.

You can revoke push notification permission at any time through your browser's notification settings (typically found in browser Settings → Privacy & Security → Notifications).

5. Cookies

We use cookies and similar browser-storage technologies for the following purposes:

Preference cookies: Storing your cookie consent choice so we do not show the banner again
Session storage: Remembering that you have passed the age-verification gate during the current browser session
Local storage: Saving your achievement stamp status locally in your browser
Third-party cookies: OneSignal may set cookies for push-notification functionality

You are presented with a clear choice (Accept / Reject) via our cookie banner when you first visit the site. Accepting or rejecting all cookies is equally accessible — both options are the same size and visual weight.

You can also manage cookies through your browser settings. Note that rejecting all cookies will not prevent you from using the site; it may only limit some preference-remembering functionality.

6. How We Use Your Information

To deliver newsletter communications you have signed up for
To send push notifications you have opted in to receive
To respond to enquiries you send us
To monitor and improve site performance and security
To comply with legal obligations

We do not use your information for automated profiling, behavioral advertising, or selling to third parties.

7. Data Sharing

We share your data only with:

OneSignal — for push notification delivery (as described above)
Hosting providers — who process server logs in the course of hosting the website
Legal authorities — only when required by applicable law

We do not sell, rent, or broker your personal data to any third party for marketing purposes.

8. Data Retention

Email addresses and names collected through our subscribe form are retained for as long as you remain subscribed. Server logs are typically retained for 90 days. You may request deletion of your data at any time (see Section 9).

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal)
Object to processing based on legitimate interests
Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request." We will respond within 30 days.

10. Security

We take reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, or loss. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

11. Links to Other Websites

Our site may contain links to external websites (for example, game developer homepages). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will provide additional notice where feasible.

13. Contact

For any privacy-related questions or requests:

Email: [email protected]
Post: Umber Krakatoa, 2207 E Cesar Chavez St, Suite 140, Austin, TX 78702, USA
Phone: +1 (512) 661-0394