We ask for one thing: your email address. This page explains what we do with it, what our tools see, and what you can ask us to do about any of it.

Dragon Gate Studio Ltd. (“we,” “us”) operates dragongate.studio. This policy is part of our Terms of Service.

1. What we collect

What you give us

The signup form on this site collects one field:

Data	Required	Why
Email address	Yes	To send you occasional news about Beyond the Gates of Kunlun

That is the whole form. We don’t ask for your name, your location, your Discord handle, or how you found us. If you email us directly, we’ll have whatever you put in that message, and we keep it only as long as it takes to deal with it.

What our tools collect on their own

We measure the site in two ways, and they are deliberately different.

Cloudflare Web Analytics runs on every page. It counts page views and visits, and records the referring site, country, browser, device type and how quickly pages loaded. It sets no cookies, stores nothing on your device, and does not fingerprint you or follow you between sites — so it needs no permission from you, and there is nothing about it to switch off. Cloudflare already serves every page of this site as our host, so this adds no company that wasn’t already handling your request.

Google Analytics 4 runs on the home page only. It reports pages viewed, time on page, where visitors came from, device type, and approximate region derived from IP address, and it uses cookies to tell one visitor from another. It does not tell us who you are. Unlike the above, this one does involve a company outside our hosting, and it does store something on your device — which is why section 7 explains exactly when it runs and how to refuse it.

Cloudflare also hosts the site and sits in front of it. As part of serving and protecting the site it processes standard request data, including IP addresses, browser and device information, and which pages were requested.

2. What we use it for

• Sending you occasional email about Beyond the Gates of Kunlun and Dragon Gate Studio — a few times a year, not a few times a week
• Answering you when you write to us
• Understanding, in aggregate, how people find and use the site

We do not sell your data. We do not rent, trade, or share it with anyone for their own marketing. We do not use it for advertising or ad targeting. We do not build profiles about you or make automated decisions about you.

3. Your consent, and taking it back

Submitting the form is your express consent to receive email from us, and it is the only basis on which we email you. You can withdraw it at any time — every email we send carries a one-click unsubscribe link, and it takes effect immediately. You can also write to [email protected] and ask to be removed.

Withdrawing consent stops the email. It doesn’t require any explanation, and it doesn’t affect anything else.

4. Who else handles your data

We keep the list of services short on purpose. These are the ones that touch data from this site:

• Mailchimp (Intuit Inc.) — stores the mailing list and sends the email. Privacy statement
• Cloudflare, Inc. — hosting, CDN, and security; the cookieless Web Analytics described above; and the Cloudflare Worker that passes your address from the form to Mailchimp. Privacy policy
• Google LLC — Google Analytics 4 on the home page, and nothing else. Privacy policy

These companies act as our service providers. They are permitted to use your data to provide their service to us, and not for their own purposes.

That list is the whole of it. The typefaces are served from this domain rather than from Google’s font service, so reading a page here does not quietly hand your IP address to a company that isn’t named above. There are no embedded videos, no social widgets, no comment systems, no advertising, and no tracking pixels. Nothing here follows you to any other website.

5. Where your data goes

Dragon Gate Studio Ltd. is a Canadian company. Your email address is stored and processed in the United States, on Mailchimp’s servers. Cloudflare and Google likewise operate globally and may process data outside Canada.

We want to be plain about what that means: while your data is in another country, it is subject to that country’s laws, and it may be accessible to that country’s courts, law enforcement, and national security authorities under their legal processes. If you would rather your address not leave Canada, don’t join the list — the Discord is an alternative way to follow the work, on its own terms.

6. How long we keep it

We keep your email address for as long as you’re subscribed. If you unsubscribe, Mailchimp retains the record as unsubscribed so that we don’t email you again by mistake. If you ask us to delete it outright, we delete it from Mailchimp and from any of our own records, and we confirm when it’s done.

7. Cookies

This site sets no advertising cookies, no social media cookies, and no tracking pixels. What it does set:

• Google Analytics (_ga, _ga_*) — distinguishes visitors and sessions. Expire after two years and 24 hours respectively.
• Cloudflare (__cf_bm) — bot management. Expires after 30 minutes. It is required for the site to be served safely.

Cloudflare Web Analytics, which runs on every page, is not in that list because it sets no cookie at all. That is the point of it: we can count visitors without storing anything on anyone’s device.

When the analytics cookie is set

If you are in the EEA or the United Kingdom, it isn’t set unless you say yes. On your first visit a notice appears at the foot of the home page asking whether to allow analytics. Until you answer, and if you decline, no analytics cookie is stored — Google receives only an anonymous, cookieless signal that a page was viewed, which it cannot tie to you or to your next visit. Declining is one click, in the same place and the same size as allowing.

Everywhere else, analytics run by default and you can switch them off whenever you like.

Either way, “Cookie choices” in the footer of the home page reopens that notice, and your answer takes effect immediately. We remember it in your browser’s local storage — not in a cookie, and it never leaves your device — and we ask again after a year. Clearing your browser data clears it too.

The __cf_bm cookie is not covered by that choice. It is strictly necessary to serve the site safely, and it carries no analytics.

Independently of all this, the Google Analytics Opt-out Browser Add-on, a content blocker, or your browser’s own tracking protection will each stop analytics on every site you visit. The site works normally without them.

8. Your rights

You can ask us to:

• Tell you what we hold — a copy of your data and an account of how it’s been used and who it’s been given to
• Correct it — if anything is wrong or out of date
• Delete it — permanently, from our records and from Mailchimp
• Hand it over — in a common machine-readable format
• Stop — withdraw consent and come off the list

Email [email protected]. We’ll respond within 30 days, and usually a great deal sooner — this is a small studio and one person reads that inbox. There is no charge.

If you aren’t satisfied with how we’ve handled it, you can complain to the Office of the Privacy Commissioner of Canada or, in British Columbia, the Office of the Information and Privacy Commissioner for BC. If you are in the EEA or the UK, you can also complain to your national data protection authority; in the UK that is the Information Commissioner’s Office.

9. Security

Your address travels over HTTPS to a Cloudflare Worker, which passes it to Mailchimp. The site is served with HSTS, a strict Content Security Policy, and the usual hardening headers. No credentials are exposed to your browser.

No system is perfect. If there is ever a breach affecting your data that creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and tell you directly, as Canadian law requires.

10. Children

This site isn’t directed at children, and the mailing list is for people aged 16 and over. We don’t knowingly collect data from anyone younger. If you believe a child has given us an address, write to us and we’ll delete it. (Our Discord community follows Discord’s own minimum age of 13.)

11. Which law applies

Dragon Gate Studio Ltd. is a federally incorporated Canadian company with its registered office in Vancouver, British Columbia. This policy is written to meet Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act, which govern how we handle personal information, and Canada’s Anti-Spam Legislation (CASL), which governs the email we send.

If you are in the European Economic Area or the United Kingdom, our legal basis for processing your address is your consent, given when you submit the form, and withdrawable at any time. If you are in the United States, we also comply with the CAN-SPAM Act.

12. Changes

If we change this policy in a way that matters, we’ll say so by email to subscribers before it takes effect, and the date at the top will change. Small corrections we’ll just make.

13. Contact

Dragon Gate Studio Ltd.
403–134 Abbott Street, Vancouver, BC V6B 2K4, Canada
Privacy questions and requests: [email protected]

Nathan Brine is the person accountable for privacy at the studio, and reads that address.