Privacy Policy

This page explains what personal data this website collects, why, and what you can do about it. In short: we only keep what you send us and what you allow us to read, there are no analytics or advertising cookies, and nothing is sold.

Who is responsible

The website is run by Kubx Studio, which is responsible for your data (the "controller").

Questions about your data: contact@kubxstudio.gg.

What we collect and why

When you send us a message

The contact form sends us your name, email address, the type of project and your message, together with your IP address and the time. We use them only to answer you and to prepare an offer or a project with you (the legal basis is taking steps at your request before a contract, and our legitimate interest in answering enquiries). We do not add you to a newsletter.

Protection against abuse

To stop spam and repeated sign-in attempts, the site briefly records how often a form is sent from an IP address. These records are deleted automatically after one day (legitimate interest: keeping the site secure). Our hosting provider also keeps standard server logs (IP address, time, page requested, browser) for running and securing the server.

Cookies and storage in your browser

• One session cookie (kx_sid), which the site needs to send forms safely. It holds no personal information and is deleted when you close your browser.
• A few technical notes in your browser's session storage, for the tab you are using: whether the other page was already loaded ahead, whether your device runs the lighter version of the site, whether you turned the video sound on or off, and a copy of the islands' public player counts for a few minutes. They never leave your device and are deleted when you close the tab.

We use no analytics, advertising or tracking cookies, so there is nothing to accept or decline.

Content loaded from other services

To show the page, your browser fetches some files directly from other companies, which therefore receive your IP address and browser details: fonts from Google Fonts (Google), scripts from jsDelivr, and the live player counts of our Fortnite islands from Epic Games' public API. Videos that play from YouTube, TikTok, Instagram or Vimeo are loaded from those platforms when they come into view (YouTube in its privacy-enhanced mode, Vimeo with its do-not-track setting on, so it sets no cookies), so those platforms receive your IP address and may store data in your browser under their own rules. Some pictures on this site may be kept on another website; your browser then loads them from that website, which learns your IP address and at most that the request came from this site, not which page. Their own privacy policies apply to what they receive.

Numbers from YouTube, TikTok and Instagram

The views, likes, comments and shares shown next to videos, and the follower counts of channels, are read from the platforms. For YouTube we use the YouTube API Services, which read public numbers only; the YouTube Terms of Service and the Google Privacy Policy apply to that.

If you connect your TikTok or Instagram account

Creators we work with can connect their account through an invite link, and we connect our own accounts the same way. You sign in on TikTok or Instagram itself; we never see your password. With your permission we then read:

• your account id, username, display name and follower, like and video counts;
• the views, likes, comments and shares of your videos (on Instagram also your Reels' insights).

We use this only to show the results of the videos made for us or our clients, on this website and in its admin. We cannot post, comment, send messages or change anything on your account. The access the platform gives us is stored encrypted. The legal basis is your consent: you can withdraw it at any time by removing our app in your TikTok or Instagram settings, or by asking us to disconnect you. We then delete the access; the numbers already shown stay as they were unless you ask us to remove them too.

Who receives your data

Only the services needed to run the site: our hosting provider (Hostinger), and the services named above for what your browser loads from them. We do not sell or rent personal data. Some of these providers may process data outside the European Economic Area; where they do, they rely on the safeguards the law requires (such as the European Commission's standard contractual clauses).

How long we keep it

• Messages: as long as needed to handle your enquiry and any project that follows. Ask us and we delete them sooner.
• Abuse-protection records: one day.
• Access to a connected account: until you or we disconnect it, or the platform ends it.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit or object to how we use it, and to receive it in a portable form; where we rely on your consent, you can withdraw it at any time. Write to contact@kubxstudio.gg. You also have the right to complain to the data protection authority of your country.

Security

The site is served over an encrypted connection (HTTPS), access to the admin is restricted, and sign-in tokens for connected accounts are stored encrypted.

Children

This website is meant for businesses and creators, not for children. If you are under 16, ask a parent or guardian before sending us a message or connecting an account.

Changes

When the site changes what it does with personal data, we update this page and the date at the top.