Privacy

Cookies

This site sets no cookies and writes nothing to your browser's storage — no local storage, no session storage, no fingerprinting. That is why you were never asked to accept anything: there is nothing to accept.

The site exists in English and in French. To offer you the other version, your browser compares its own language with the page's: this happens on your device, nothing is sent or kept. So your choice is not remembered from one visit to the next.

What the server records

The site is hosted on our own server. Like any web server, it keeps two logs, with different purposes and different retention.

Security log

For each request: date, page, response status, browser identification and IP address. It keeps the server running and blocks abuse. Kept 90 days, then deleted, and never shared. We take only one thing from it for audience: the number of visitors per country and per day, to see where the audience connects from. The country is derived from the IP address with a database installed on our side (the address is sent to no one); only those totals are kept past the 90 days, and they cannot single anyone out.

Audience log

Which pages are read, which chapters are opened, which tracks and videos are played, and that a game of KRAKEN.EXE or BASTION.EXE was started (never its score, never whether it was won), and, when you arrive from another site, that site's name only (for example instagram.com, never the address of the page), plus a plain mark when the visit comes from our own network, so we don't count ourselves. It records what is viewed, never who views it: no IP address, no browser identification, no identifier of any kind, so two visits cannot be linked to the same person. We use it to decide which parts of the story are worth writing next.

Embedded players

Videos and the album player come from YouTube and Bandcamp. Their players load only once you click them — until then, nothing is requested from those services and they learn nothing about your visit. From the moment you press play, their own terms and their own trackers apply, outside our control. The same goes for the music in the game: YouTube is contacted only once you press Start with the music box ticked, or open the music drawer.

BASTION.EXE's end screen has share buttons. They contact nobody by themselves: the text and the picture are built in your browser, and the apps you pick in your device's share sheet, or the Le Bastion ticket page, are only reached if you press a button and choose to go there.

Video thumbnails are the one exception: they are served by YouTube's image host, which sees a request for an image when the page loads.

Third parties

No analytics provider, no advertising network, no social widget, no content delivery network. Links to streaming platforms and social networks are ordinary links: nothing is sent until you follow one.

Your rights

Under the GDPR you may ask what is held about you, and ask for it to be erased. In practice the audience log holds nothing that could be traced back to you, and the security log is deleted after 90 days. For anything else, write to music@sikfoal.com.