MAN1K
ABØUT MUSIC MERCH LIVES GALLERY SUBSCRIBE
ABØUT MUSIC MERCH LIVES GALLERY SUBSCRIBE
Home//Legal//Privacy Policy

Privacy Policy

man1k.xyz // Last updated: 30 September 2026 // Build 26.9
DNT Respected GPC Respected No First-Party Cookies No User Accounts GA4 When DNT Inactive Simple Analytics Active SMS Database via AlphaSMS GDPR Compliant
00 //

Scope

This policy explains how personal data is processed in connection with the Services. Terms such as "the Operator", "the Services", "you", "Controller" and "Processor" have the meaning given in the Terms of Use. The Operator is the Controller. The website is static: no user accounts, no passwords, and no first-party cookies.

01 //

Data & Sources

  • Email: email address, subscriber ID, subscription status, email domain, engagement (opens, clicks, replies) and occasional internal notes.
  • SMS: phone number, country, name, city and source (how the contact was acquired). Per-campaign reports include recipient country and operator, link click rate, send time and mailing ID.
  • Website usage: analytics data described in Section 02.

Contact data comes from: the /subscribe form; exports from third-party platforms where you subscribed, followed or opted in (e.g. Fourthwall, Bandcamp, ReverbNation, ticket sellers); and direct consent given in person (concerts, promotions, personal conversation). The SMS database is compiled by the Operator from these sources over time. Those platforms are independent controllers for the data they collect; see Terms of Use, Section 04 on data accuracy.

02 //

Analytics

DNT / GPC Behavior

If your browser sends a Do Not Track or Global Privacy Control signal, Google Analytics 4 and the TikTok Pixel are not loaded.

  • Google Analytics 4 — page views, sessions, referrals; IP anonymised.
  • Simple Analytics and Cloudflare Web Analytics — cookieless, aggregate statistics only.
  • TikTok Pixel — installed but not currently used; see Cookie Policy.
03 //

Purposes & Legal Basis

  • Sending newsletters and SMS updates about releases, live shows and merch — consent.
  • Measuring and optimising campaigns and the website — legitimate interest.
  • Cross-channel analytics: data from email, SMS and other channels may be combined into a single contact record for internal analytics, deduplication and segmentation — legitimate interest.
  • AI tools: email addresses, phone numbers and related campaign data may be processed by cloud-based AI/LLM tools, acting as Processors, to optimise campaigns (e.g. segmentation, timing, content) — legitimate interest.
04 //

Processors & Third Parties

No sale: personal data is never sold or rented. It is shared only with Processors acting on the Operator's behalf, solely to provide the services described in this policy.
Buttondown
Email newsletter
Subscriber list, delivery and engagement tracking.
Data Processing Agreement →
AlphaSMS
SMS delivery
alphasms.net, operated by Interconnect Solutions Pte. Ltd. (Singapore), account no. 118134. Hosts the SMS contact book; numbers may be checked by HLR lookup before sending.
Privacy policy →
AI / LLM tools
Campaign optimisation
Cloud AI/LLM providers processing contact and campaign data (Section 03).
Google
GA4, YouTube, Fonts
Analytics (DNT/GPC off); privacy-enhanced YouTube embed on the homepage; DotGothic16 font on /about and /game/.
Privacy policy →
Cloudflare
CDN, hosting, R2, analytics
Serves all traffic and gallery images (pics.man1k.xyz); aggregate analytics.
Privacy policy →
Simple Analytics
All pages
Cookieless analytics, no personal data.
Privacy policy →
TikTok
Pixel (inactive)
Installed, not currently used. Not loaded under DNT/GPC.
Privacy policy →
SoundCloud
/game/
Game audio player, connects only on PLAY.
Privacy policy →
Bandsintown
/lives
Live events widget.
Privacy policy →
CDNFonts
All pages
VCR OSD Mono typeface.
Privacy policy →

Embedded platforms and the source platforms in Section 01 (Fourthwall, Bandcamp, ReverbNation) act as independent controllers under their own policies.

05 //

Storage & Retention

Contact data is held by the relevant Processors and in a secured local backup kept by the Operator for handling data-subject requests and migrating between providers. Data is retained for as long as reasonably necessary for the purposes described in this policy, then deleted or anonymised. Third-party retention follows their own policies.

06 //

Changes of Processor or Jurisdiction

The Operator may add or replace Processors, or change where data is stored, at any time. Such changes are reflected by updating this page, without individual notice. Current Processors and transfers relevant to your data are disclosed on individual request under the GDPR (Section 08). International transfers rely on the safeguards required by applicable law.

07 //

Local Storage

The site keeps a few non-personal technical values in your browser (visit counter, rate-limiter state, game high score). They are never transmitted. Details: Cookie Policy.

08 //

Your Rights

Under the GDPR and equivalent laws you may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time. Requests: [email protected]. Erasure covers the active Processors and the local backup. You may also lodge a complaint with a data-protection authority.

  • Email: unsubscribe link in every newsletter.
  • SMS: block the sender ID or request removal by email.
09 //

Contact & Updates

Privacy inquiries: [email protected]. This policy is updated under Terms of Use, Section 08.

Simple Analytics Badge
© 2026 Yaroslav Boruk (MAN1K) // All rights reserved
Terms → Copyright → Cookies →
MAN1K