Privacy Policy
Updated: July 22, 2026
This policy explains how OldSkull Arena processes waitlist data for closed testing. The form stores signups in Cloudflare D1, sends a transactional confirmation email, and uses technical anti-spam checks.
Who is responsible for the data
Data controller: the OldSkull Arena project team. Before company registration, privacy requests are handled by the project team; the planned public contact address is privacy@oldskull-arena.com.
What data we collect
For the waitlist, we use email, selected language, optional Discord or Telegram handle, selected interests, communication consent, email send and confirmation timestamps, technical anti-spam data, infrastructure-derived country, and hashed IP and one-time token values. Raw IP addresses and confirmation tokens are not stored.
Why we use it
We use the data to maintain the early tester list, send invitation waves, understand language preferences, protect the form from spam, and record consent for closed testing emails.
Legal basis
For email communication, we rely on user consent. For technical logs, security, and abuse prevention, we may rely on legitimate interest in keeping the site secure and operational.
Processors
The landing runs on Cloudflare Pages, waitlist signups are stored in Cloudflare D1, and Cloudflare Email Service processes transactional confirmation delivery. Later, data may be moved or synchronized into the main OldSkull Arena backend. We do not sell waitlist data or use it for third-party advertising.
Retention
Waitlist data is kept until early testing is complete or until the user asks us to delete it. Technical logs and anti-spam events should be retained only for the time needed for security and diagnostics.
Your rights
You can request access, correction, deletion, restriction of processing, data portability, and withdrawal of consent for email communication. If you believe your data is handled incorrectly, you may contact your data protection authority.
International transfers
Infrastructure providers may process data in different countries. We use providers and settings that support applicable GDPR requirements and transfer mechanisms.
Children
The waitlist is not intended for children. If we learn that we received a child's data without the required parent or legal guardian consent, we will delete it.
Changes
We may update this policy as analytics, email delivery, or other infrastructure services are connected. The update date will be shown at the top of the page.