Privacy Policy
1.Introduction
Reino Studios ("Reino Studios," "we," "us," or "our") operates the website https://reinostudios.com/ (the "Site"). This Privacy Policy explains what personal data is involved when you visit the Site, why, who else receives it, how long it is kept, and what rights you have over it.
The Site is a static, published website. It has no user accounts, no forms, no database and no server-side application code. There is nothing on this Site for you to fill in, and the Site itself asks you for nothing. That is not a marketing claim; it is a description of the architecture, and it is the reason this Policy is much shorter than most.
This Policy covers the Site only. The BON: Block of Neon game has its own separate privacy notice, available at https://reinostudios.com/bon/privacy. If you play the game, that document — not this one — describes how the game handles your data.
For the purposes of the EU and UK General Data Protection Regulation, Reino Studios is the controller of the personal data described in this Policy. You can reach us at any time at reinostudioses@gmail.com.
2.Summary (The Short Version)
- The Site does not ask you for any personal data. There is no form, no sign-up, no login and no upload anywhere on it.
- We do not use analytics, advertising, tracking pixels, fingerprinting or any third-party tag. We do not sell, rent or share personal data with data brokers, ever.
- The Site sets no cookies. The only thing stored on your device is your chosen language, saved locally when you pick one, and never sent anywhere.
- Two things do involve your data automatically: our hosting provider records standard server access logs, and your browser downloads the Site’s fonts from Google, which reveals your IP address to Google. Both are explained in full in sections 3 and 4.
- If you are featured on the Achievement Wall, that is because you sent us your achievement yourself and agreed to be featured. You can ask us to remove it at any time and we will.
- You can contact us about your data at reinostudioses@gmail.com. If you are in the EU, UK or Georgia, you also have the right to complain to your data protection authority.
3.What Data Is Involved When You Visit
3.1Information you provide directly: none
There is no form, text field, search box, comment box, sign-up, login or file upload anywhere on the Site. You cannot submit information to us through it, because there is nothing to submit it to — the Site is a set of pre-built pages served as files, with no application server and no database behind them.
The Site previously operated an Achievement Wall submission form that collected names, email addresses and proof photographs. That form, the database behind it and all of the associated processing have been permanently removed. See section 6 for what happened to data collected while it was in operation.
3.2Server access logs (automatic)
The Site is hosted by Vercel Inc. Like every web server, Vercel’s infrastructure records a log entry for each request it serves. Those entries typically include:
- your IP address
- the date and time of the request
- the page or file requested, and the HTTP status returned
- your browser’s user-agent string (browser and operating system)
- the referring page, where your browser sends one
These logs are generated by the hosting infrastructure, not by any code we wrote, and are used only to deliver the Site, keep it available and protect it against abuse and denial-of-service attacks. We do not use them to build profiles, we do not combine them with any other data, and we do not attempt to identify individual visitors from them. Retention is governed by Vercel’s own log retention periods (see section 9).
3.3Material you choose to send us
If you email us, or message us on one of our social media profiles, we receive whatever you choose to send: your name or handle, your email address or account name, and the contents of your message — including any screenshot you attach. We receive this because you sent it, not because the Site collected it.
We use it only to reply to you and, where you have asked to be considered for the Achievement Wall, to verify and publish your achievement as described in section 5.
3.4Local storage on your device
When you choose a language using the language switcher, your browser stores that choice locally under the name "reino-lang" so the Site opens in the same language next time. This is stored by your browser on your own device. It is not a cookie, it is never transmitted to us or to anyone else, and it contains nothing but a two-letter language code such as "EN" or "KA". You can clear it at any time by clearing your browser’s site data.
3.5What we do not do
- No analytics of any kind — no Google Analytics, no Plausible, no self-hosted analytics, no page-view counters.
- No advertising, no advertising identifiers and no ad networks.
- No tracking pixels, web beacons, session recording or heat mapping.
- No device or browser fingerprinting.
- No social media tracking widgets, embedded feeds, share buttons or "like" buttons. Our social links are ordinary hyperlinks (see section 13).
- No sale, rental or disclosure of personal data to data brokers, advertisers or any other third party for their own purposes.
- No automated decision-making and no profiling within the meaning of GDPR Article 22.
The Site’s Content-Security-Policy blocks the browser from opening network connections to anywhere other than the Site itself, which means a tracker cannot be introduced without also changing that policy in a published, reviewable code change.
4.Fonts Served by Google (Important)
We want to be straightforward about the one third party your browser contacts automatically when you open the Site.
The Site uses three typefaces — Inter Tight, Instrument Serif and JetBrains Mono — which your browser downloads from Google’s font servers at fonts.googleapis.com and fonts.gstatic.com. Making that request necessarily reveals to Google:
- your IP address
- your browser’s user-agent string
- the fact that a page on reinostudios.com was loaded, and when
This happens automatically as part of rendering the page, before you interact with anything. Google states that it does not use the Google Fonts service to set cookies or to build advertising profiles, and that requests for font files are served from a domain that is kept separate from its advertising infrastructure. Google’s handling of that data is governed by its own privacy policy, at https://policies.google.com/privacy, over which we have no control.
We disclose this because it is a genuine transfer of personal data to a third party and to a third country, and because a policy that claimed "we contact no one" while loading remote fonts would be untrue. If you wish to avoid it, a browser extension that blocks third-party requests, or a browser with such blocking built in, will prevent the font request; the Site is designed to remain fully readable with fallback system fonts if it fails.
5.The Achievement Wall
The Achievement Wall at https://reinostudios.com/wall features players who have reached a qualifying milestone in BON: Block of Neon. It is curated entirely by hand by the studio. There is no submission form and no way to upload anything to it.
How a player comes to be featured:
- You contact us yourself — by email or through one of our social media profiles — and send evidence of your achievement, such as a screenshot.
- We review it manually. Nothing is automated and no decision about you is made by a machine.
- If we feature you, we publish only a display name of your choosing, the achievement you reached, and optionally a short note from the studio and an official certificate image.
- The published entry is written into the Site’s source code and published as part of the next build. It is ordinary page content, exactly like any other text on the Site.
What is never published:
- Your email address, social media handle or any other contact detail.
- Your full legal name, unless you specifically asked us to use it.
- The original message, screenshot or proof material you sent us.
- Any location, device or account information.
We publish an entry only where you have agreed to be featured. That agreement is your consent under GDPR Article 6(1)(a), and you may withdraw it at any time by emailing reinostudioses@gmail.com. On withdrawal we remove the entry from the Site at the next deployment. Withdrawal does not affect the lawfulness of publication before it was withdrawn.
Please bear in mind that the Site is public. Once a page has been published, search engines and other services may have copied or cached it, and we cannot remove those third-party copies — we can only remove our own. Where you ask us to, we will confirm what we have removed and can point you to the relevant search engine’s own removal process.
6.Data From the Retired Submission System
Until August 2026 the Site operated a submission form which collected first and last names, email addresses, proof photographs and a hashed record of the submitting IP address, stored in a hosted database and object storage.
That system has been decommissioned. The application code, the database schema and the storage buckets have been deleted from the project. If you submitted an achievement while the form was in operation and you want confirmation of what remains, or written confirmation of erasure, email reinostudioses@gmail.com and we will respond as described in section 10.
7.Legal Bases for Processing (GDPR Article 6)
Where the GDPR applies to you, we rely on the following legal bases. Each row states the only purpose for which the data in question is used.
| Data | Purpose | Legal basis |
|---|---|---|
| Server access logs (IP, timestamp, URL, user agent, referrer) | Delivering the Site, keeping it available, and protecting it against abuse and attack | Legitimate interests — Art. 6(1)(f). Our interest is operating and securing a website; the data is not used to identify or profile visitors, and is retained only briefly. |
| Your IP address, disclosed to Google when your browser fetches the Site’s fonts | Rendering the Site in its intended typefaces | Legitimate interests — Art. 6(1)(f), in presenting the Site as designed. Disclosed in full in section 4 so you can block it if you prefer. |
| The contents of an email or message you send us | Replying to you | Legitimate interests — Art. 6(1)(f), in answering correspondence addressed to us; or performance of a contract under Art. 6(1)(b) where your message concerns one. |
| Display name, achievement and any certificate published on the Achievement Wall | Featuring you publicly on the Wall | Consent — Art. 6(1)(a). Withdrawable at any time (section 5). |
| Your language preference, stored on your own device | Opening the Site in the language you chose | Not personal data processed by us — it never leaves your device. Stored at your explicit request when you use the language switcher. |
We do not process any special category data under GDPR Article 9, and we do not ask for any.
8.Retention
| Data | How long it is kept |
|---|---|
| Server access logs | Retained by our hosting provider under its own retention schedule, typically a short rolling window measured in days rather than months. We do not export, archive or separately store them. |
| Emails and social media messages | Kept for as long as needed to deal with your message and for a reasonable period afterwards for our own records, then deleted. If you ask us to delete correspondence sooner, we will. |
| Achievement Wall entries | Published for as long as the Wall features them, or until you withdraw consent — whichever comes first. Past weeks may remain visible as an archive. |
| Proof material you sent us | Kept only as long as needed to verify the achievement and prepare the entry, then deleted. It is never published. |
| Language preference on your device | Until you clear your browser’s site data. It is not held by us at all. |
9.Recipients and International Transfers
The complete list of third parties involved in the operation of this Site is as follows. There are no others.
| Recipient | Role | What it receives |
|---|---|---|
| Vercel Inc. (United States) | Hosting and content delivery. Acts as our processor. | Server access logs for requests to the Site, as described in section 3.2. |
| Google (Google Ireland Limited / Google LLC) | Serves the Site’s web fonts. Acts as an independent controller for that request. | Your IP address and user agent when your browser fetches a font, as described in section 4. |
| Google (Gmail) | Provides the email account we use for correspondence. Acts as our processor for the mailbox. | The contents of any email you send us. |
| Meta, ByteDance, Google, Reddit and X | Operate the social media platforms on which we maintain profiles. Independent controllers. | Only what you send them directly by messaging us there, under their own policies. |
Both Vercel and Google are established in, or transfer data to, the United States. Where personal data of individuals in the European Economic Area, the United Kingdom or Switzerland is transferred outside those areas, the transfer is made on the basis of the European Commission’s Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework and its UK Extension, as applicable to the provider concerned. You may ask us for further detail at reinostudioses@gmail.com.
We may also disclose personal data where we are legally required to do so — for example in response to a valid order from a competent authority — or where it is necessary to establish, exercise or defend legal claims. We have not received any such request in relation to this Site.
10.Your Rights
Depending on where you live, you have some or all of the following rights over your personal data. Under the GDPR you have all of them.
- Access — to be told whether we hold personal data about you and to receive a copy of it (Art. 15).
- Rectification — to have inaccurate data corrected, and incomplete data completed (Art. 16).
- Erasure — to have your data deleted, including removal of an Achievement Wall entry (Art. 17).
- Restriction — to have processing limited in the circumstances the law provides for (Art. 18).
- Portability — to receive data you gave us in a structured, commonly used, machine-readable format (Art. 20).
- Objection — to object to processing based on legitimate interests, including anything described in section 7 on that basis (Art. 21).
- Withdrawal of consent — to withdraw consent to being featured on the Achievement Wall at any time, without affecting the lawfulness of what was published beforehand (Art. 7(3)).
- Complaint — to lodge a complaint with a supervisory authority (Art. 77). See below.
To exercise any of these, email reinostudioses@gmail.com. We will respond within one month of receiving your request, and will tell you if we need longer because the request is complex. Exercising these rights is free of charge. We may ask you for information sufficient to confirm that the request is genuinely yours — but only where it is genuinely necessary, and we will not use anything you send for that purpose for anything else.
Realistically, in most cases we hold nothing about you at all: unless you have written to us or are featured on the Achievement Wall, simply visiting the Site leaves us with no record that identifies you.
If you are in the European Economic Area or the United Kingdom, you may complain to the data protection authority in your country of residence, place of work, or the place where you believe an infringement occurred. In Spain this is the Agencia Española de Protección de Datos (https://www.aepd.es). A list of EEA authorities is published by the European Commission. If you are in Georgia, you may complain to the Personal Data Protection Service. We would appreciate the chance to resolve the matter first, but you are not obliged to contact us before complaining.
11.Cookies and Similar Technologies
The Site sets no cookies. Nothing in its code writes a cookie, and there is no advertising, analytics or tracking technology of any kind to require one. This is why the Site shows no cookie banner: there is nothing to ask your consent for.
The complete list of storage the Site uses on your device is:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| reino-lang | Local storage (not a cookie) | Remembers the language you selected with the language switcher | Until you clear your browser’s site data |
This entry is written only when you actively choose a language, is read only to display the Site in that language, and is never transmitted off your device. We consider it strictly necessary to provide the language preference you explicitly asked for, and therefore exempt from the consent requirement under Article 5(3) of the ePrivacy Directive.
12.Children
The Site is a general-audience website about a puzzle game and is not directed at children under 13 (or the equivalent minimum age where you live). It does not knowingly collect personal data from children — in the ordinary course it collects no personal data from anyone.
We do not knowingly feature a child on the Achievement Wall without the consent of a parent or guardian. If you believe we have published information about a child, or that a child has sent us personal data, contact reinostudioses@gmail.com and we will delete it promptly.
13.Security
The most effective security measure available to us is that there is almost nothing to secure. The Site holds no database, no user accounts, no credentials and no stored personal data. There is no login to compromise and no records to exfiltrate, because there are no records.
The measures that do apply:
- The Site is served exclusively over HTTPS, with HTTP Strict Transport Security enabled.
- A strict Content-Security-Policy restricts what the browser is permitted to load and connect to, which limits the impact of any content injection.
- The Site is published as pre-built static files with no server-side application code, removing entire classes of vulnerability, including injection against a database that does not exist.
- Additional protective headers are set, including X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy.
- Correspondence and any proof material you send is held in our email account, protected by the provider’s account security, and deleted when no longer needed.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Where a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where the law requires it, you.
14.Links to Other Sites
The Site links to the BON: Block of Neon game and to our profiles on Instagram, TikTok, YouTube, Reddit and X. These are plain hyperlinks — no embedded players, feeds, share buttons or tracking widgets — so nothing is sent to those platforms until you actually click through.
Once you follow a link you are on someone else’s service, governed by their privacy policy and not by this one. We have no control over, and accept no responsibility for, how they handle your data.
15.Changes to This Policy
We may update this Policy to reflect changes to the Site or to the law. The "Last Updated" date at the top always shows the current version, and the full history of every change is publicly visible in the Site’s source repository.
If we ever make a change that materially affects your rights — for example introducing analytics, cookies or any new collection of personal data — we will make that clear on the Site before or when the change takes effect, and where the law requires consent we will ask for it rather than assume it.
16.Contact
Reino Studios — controller for the purposes of this Policy
Website: https://reinostudios.com/
Email: reinostudioses@gmail.com
Questions about this Policy, or about any data you believe we hold, are welcome. We read every message and we will answer plainly.