Privacy policy
Plain words, no tricks. This page covers paulyuki.com: what stays in your browser, what my server writes down, why, and for how long.
Last updated October 10, 2026
The short version
- No ads, and I never sell or share your data.
- Game saves and Cindy's memory live in your own browser, and only if you allow them.
- My server notes the IP, country and browser of each visit, to count visitors and to stop attacks. Full IPs are cut down after 30 days and the logs are deleted after 180 days.
- You can change your choice at any time.
01Who runs this site
Paul Yuki, a software engineer based in the Philippines. For anything about your data, email paul.hansen.yuki@gmail.com.
02What stays in your browser
The site uses your browser's local storage, not tracking cookies. Necessary items are always on. Everything marked game saves or analytics is written only after you allow it. Before you choose, the games still work, but nothing new is kept after you leave.
| Name | What it does | Type | How long |
|---|---|---|---|
yuki-consent | Remembers your choice on this banner. | necessary | 12 months |
yuki-theme yuki-style yuki-music yuki-type-warned | Dark or light theme, modern or retro style, music on or off, and a dismissed tip. You set these yourself. | necessary | Until you clear them |
yuki-pid yuki-visit-s yz-sess yuki-cindy-invite | Tab-only items: the live viewer counter, counting a visit once, and showing Cindy's tour invite once. | necessary | Until the tab closes |
yuki-quest | Side quest progress: level, XP, bugs squashed, waves cleared, biggest wave, current world. | game saves | Until you clear it or say no |
yuki-flappy-* yuki-type-best-* | Your Flappy pet and best scores, your typing best. | game saves | Until you clear it or say no |
yuki-cindy-brain yuki-crew-brain | Cindy's memory of the name you gave her and the topics you asked about, and which crew lines you liked. | game saves | Until you clear it or say no |
yuki-visitor yuki-cindy-tour yuki-cindy-pos yuki-quest-big yuki-flappy-big | Visit count for the welcome-back greeting, tour progress, where you dragged the chat button, and game size. | game saves | Until you clear it or say no |
yz-vid | A random ID with no personal details, so my visit counter can tell new and returning visitors apart. | analytics | Until you clear it or say no |
_ga _ga_* | Google Analytics cookies, set through Google Tag Manager. | analytics | Up to 2 years |
Saying no, or switching a category off later, deletes that category's saved items from your browser right away.
03What my server writes down
Visit log
Each page view sends one small message to my own server with: the time, your IP address, the country and network that IP belongs to, your browser, system and device type, the page, the site that linked you here, screen size, time zone, language, and your cookie choice. The random yz-vid ID is included only if you allowed analytics.
The country and network are looked up on my server from public internet registry data. Your IP is not sent to any lookup service.
Security log
Requests that look like attacks are logged with the IP, time, address requested and browser string: scanning for passwords or backup files, injection attempts, form spam, floods, and wrong admin passwords. An address that crosses the limit is blocked automatically, first for 24 hours, longer if it comes back. A blocked visitor sees a reference code and can email me to be unblocked.
Live counter
The "viewing now" counter uses a random tab ID and your IP for about two minutes, then forgets them.
Why, and for how long
I keep these logs to run the site safely and to see how many people visit and from where. That is a legitimate interest; the analytics ID and game saves rely on your consent instead. Full IPs in the visit log are shortened after 30 days (the last part is removed). Visit, security and sign-in logs are deleted after 180 days. Blocks last as long as they are active. Logs stay on my hosting account and nobody else gets them.
04Cindy, the chat
Cindy answers in your browser. To help her learn, single keywords from a question (never names, email addresses or numbers) and the topic they matched are sent to my server and counted together with everyone else's. Nothing links them to you. The name you tell her stays in your browser, under game saves.
05Google services
- Google Tag Manager and Google Analytics help me see which work people read. Analytics cookies are set only after you allow analytics. Before that, Google's Consent Mode keeps them off and only anonymous, cookieless signals are sent. See Google's privacy policy.
- Google Fonts deliver the typefaces, so Google's servers see your IP when fonts load.
- reCAPTCHA, when a contact form is shown, checks that you are human. It follows Google's privacy policy and terms.
Links to GitHub, LinkedIn, YouTube and other sites follow those sites' own policies once you click.
06Email
If you email me, I use your address and message only to reply, and I do not add you to any list.
07Your rights
Under the Philippine Data Privacy Act of 2012, and the GDPR or UK GDPR if you are in Europe or the UK, you can ask what I hold about you, ask me to correct or delete it, object to how it is used, and withdraw consent at any time. Because the logs are tied to IP addresses, please include your IP and the rough date of your visit so I can find the records.
You can also complain to the National Privacy Commission or to the data protection authority where you live.
08Children
This site is for a general audience and does not knowingly collect details from children. If you think a child shared something with Cindy, email me and I will delete it.
09Changes
When this policy changes I will update this page and the date at the top. If a change needs your consent again, the banner will ask.