Privacy Policy

This policy applies to man1k.xyz and any subdomain operated by the same owner. It explains what data is collected, who processes it, and how it is used.

This is a static artist website. There is no user registration, login system, or server-side data storage. All data processing occurs either in the browser or via explicitly listed third-party services.

• No personal accounts or registration data
• No passwords or credentials of any kind
• No first-party cookies set by man1k.xyz
• No server-side logs retained beyond standard hosting (Cloudflare)

When DNT/GPC is not active, the following analytics tools may run:

• Google Analytics 4 (GA4) — page views, session data, referral sources. Configured with IP anonymization and limited data retention.
• Simple Analytics — cookieless, privacy-first analytics. No personal data collected. Privacy policy →
• TikTok Pixel — loaded for advertising and audience-matching purposes (retargeting, Lookalike Audiences, Advanced Matching using hashed contact data). Disabled entirely when DNT/GPC is active. TikTok Technology Limited acts as an independent data controller for data it receives — see Cookie Policy, Section 03.1 for full detail.
• Cloudflare Web Analytics — served via Cloudflare's CDN; cookieless, collects only aggregate traffic metrics.

The /subscribe page uses Buttondown to manage the mailing list. When you subscribe, your email address is transmitted to and stored by Buttondown under their own privacy policy. No email data is retained by man1k.xyz servers directly — Buttondown is the sole processor and data store for this list.

Beyond your email address, Buttondown records the following as part of standard newsletter operation:

• An internal subscriber ID assigned automatically on signup
• Engagement analytics — opens, clicks, and reply activity for each newsletter sent
• Your email domain (e.g. gmail.com), open rate, click rate, and current subscription status (active / unsubscribed / bounced)
• Internal notes may occasionally be attached to a subscriber record for list-management purposes

You can unsubscribe at any time via the unsubscribe link included in every newsletter email, or by sending a direct request to [email protected]. Unsubscribing stops engagement tracking and updates your status; you may separately request full deletion of your subscriber record via the same channels.

Buttondown privacy policy →

Separately from the email newsletter, MAN1K (Yaroslav Boruk) maintains a phone contact database used to send SMS updates about releases, live shows, and merchandise. Unlike the newsletter, this database is compiled directly by the artist from multiple sources over time rather than a single online opt-in form.

The following fields may be stored per contact: phone number, country, name, city, and source (a note on how the contact was acquired).

Separately, AlphaSMS generates a report for each SMS campaign sent, containing:

• Recipient country and mobile operator (per campaign, not stored on individual contact records)
• Click rate on links included in the message
• Campaign start and end time
• A Mailing ID identifying that specific send

Opt-out: you can stop receiving messages at any time by blocking the sender ID on your phone, or by requesting removal directly at [email protected]. Removal requests are honored by deleting the contact from the AlphaSMS address book.

AlphaSMS is operated by Interconnect Solutions (InterConnect Solutions Pte. Ltd., Singapore), which publishes its own GDPR-referencing privacy policy →. That policy states Interconnect Solutions acts as a data processor for contact data supplied by its customers and does not use it for any purpose other than the one the customer specifies.

In addition to the copies held by Buttondown and AlphaSMS, MAN1K (Yaroslav Boruk) retains a local backup of the email newsletter and SMS phone contact data, kept in a secure location. This backup exists for two reasons:

• To be able to fulfil GDPR data-subject requests (access, rectification, erasure) independently of the processor's own systems and availability
• To allow the contact list to be migrated if MAN1K ever switches to a different newsletter or SMS processor, without losing the ability to reach existing subscribers

If a processor migration takes place, affected subscribers will be notified by email or SMS, including a link or contact address to unsubscribe from the new processor. A deletion request made under Section 08, Your Rights removes your data from this local backup as well as from the active processor.

The site uses three live third-party embeds. Each platform may collect data in accordance with its own privacy policies when their content loads:

• SoundCloud — hidden audio player in /game/ (loaded only on user interaction)
• Bandsintown — live events listing widget on /lives
• YouTube (youtube-nocookie.com, privacy-enhanced mode) — promo video embed on the homepage (/), loaded on page load

External streaming platforms (Bandcamp, Spotify, etc.) appear only as outbound links on the site — no iframes or embeds are loaded from these services.

The site loads the VCR OSD Mono typeface from CDNFonts. Most pages also self-host a local variant of the font file (vcrosdmonorus_vhsicons.ttf) to minimize external connections. The /about and /game/ pages load DotGothic16 from Google Fonts for Japanese text rendering and game UI respectively.

This site stores the following keys in localStorage for functional purposes. No personal data is included in any of these keys, and none is transmitted externally.

• _m1k_v1 — aesthetic visit counter (homepage only; alters a decorative text element after 3+ visits; not suppressed by DNT)
• mk_r — rate-limit event counter (cleared on rate window expiry)
• mk_b — rate-ban expiry timestamp (cleared when ban expires)
• vxb — game high score fallback when IndexedDB is unavailable (/game/ only)

Under GDPR and equivalent legislation, you have the right to access, rectify, erase, or port any personal data concerning you held by third-party services listed above. Exercise these rights directly with each service via their respective privacy policies.

For any privacy concerns relating specifically to man1k.xyz content or operations, contact [email protected].

Privacy inquiries: [email protected]

This policy may be updated when third-party services change or new features are added. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after an update constitutes acceptance of the revised policy.