01 Who we are

This site is run by Robophobic Limited, a Limited Liability Company (LLC) based in Miami, Florida, USA. We decide how the data described here is handled, which makes us its controller under the EU and UK General Data Protection Regulation (GDPR).

For anything about your data, write to .

02 What happens when you visit

Delivering the pages

The site is hosted on Microsoft Azure. To send you a page, Microsoft's servers necessarily receive what every web request carries: your IP address, your browser's user agent and the address of the page you asked for. Microsoft handles this on our behalf, to deliver the site and keep it secure. We rely on our legitimate interest in running a website (Article 6(1)(f) GDPR).

The artwork, fonts and theme music all come from this site. No content is downloaded from anyone else. The music plays only when you press play, and we don't remember that you did.

Counting visitors

We use Google Analytics to see how many people visit and how long they stay. It's set up so that Google never learns who you are.

1. Your browser Sends the page's address without anything after it, its title, your browser's main language (such as "en") and how long the page was on screen.
2. Our server, Frankfurt Drops your IP address. Replaces any ID with a code that changes every day. Cuts your browser down to its family and main version.
3. Google Analytics Receives only what's left, from our server's address, never yours.

Your browser sends these small messages to our own server at anonymize.robophobic.tv, not to Google. That server runs in Germany. Like any web server, it receives your IP address and browser details, because every request carries them. It uses them once, to work out a visitor code: a one-way scramble of the two, re-keyed every day with a secret, and shortened so that different visitors sometimes share a code. That lets us count roughly how many people visited on a given day without being able to tell who they were, or to recognise anyone the next day. Then it discards them. They are never written down or passed on.

We also never send where you came from (the referrer) or anything that followed the page's address, such as campaign tags. We've switched off Google signals, ad personalisation and data sharing in our Analytics settings.

Our legal basis is our legitimate interest in understanding, in aggregate, how the site is used (Article 6(1)(f) GDPR). Nothing is stored on your device, the statistics are anonymous and serve only this site, and you can object at any time. The set-up is designed to meet the conditions European regulators, including France's CNIL, set for audience measurement without consent.

Links to other sites

If you follow a link elsewhere (to YouTube, once the trailer is out), that site's own privacy policy applies.

03 What we don't do

• Set cookies, or store anything on your device in any other way.
• Fingerprint your device or follow you across other websites.
• Show ads, or build advertising profiles.
• Sell your data, or share it beyond the providers named below.

04 Who else is involved, and where

Both companies are certified under the EU–US Data Privacy Framework, which the European Commission recognises as protecting personal data transferred to the US. What reaches Google has already been anonymised.

05 How long it's kept

• Our anonymising server: no data is kept. Each message is handled in memory and discarded.
• Our server's operational logs: 30 days. They are set up to contain no personal data, and are not involved in tracking or logging information about visitors.
• Google Analytics: event-level data for 14 months. Totals built from it, such as visits per day, can be kept longer.
• Hosting: Microsoft keeps short-term operational records under its own security policies.

06 Your choices and rights

Opting out. Turn on Global Privacy Control or Do Not Track in your browser, and this site sends nothing at all when you visit. You can also tell us you object by writing to .

Your rights. You can ask us for access to your data, and to correct, erase or restrict it, or to object to how we use it. We have to be honest about one thing: the statistics can't be traced back to you, so there is usually nothing held that we could find and attribute to you. If you think we've got something wrong, you can also complain to the data protection authority where you live (list of EU authorities).

07 Privacy laws around the world

Privacy and cookie laws differ from place to place. This site stores nothing on your device and keeps nothing that identifies you, so one set-up works for all of them. Here's how the laws people ask about most apply.

Cookie laws, and why there's no banner

Europe's ePrivacy Directive, the UK's Privacy and Electronic Communications Regulations (PECR) and similar laws elsewhere require your consent before a site stores or reads information on your device, such as a cookie, for anything beyond showing you the site. We don't set cookies or use any similar storage, and we don't read any identifier from your device. Our visitor counting is designed to meet the conditions European regulators set for measuring audiences without consent. There's nothing to ask your permission for, so there's no banner.

California (CCPA and CPRA)

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California residents the right to:

• know what personal information a business collects, uses and discloses, and why;
• have it deleted or corrected;
• opt out of its sale, or of its sharing for cross-context behavioural advertising;
• limit how sensitive personal information is used;
• not be treated differently for using any of these rights.

In the past 12 months, the only personal information involved in running this site is what every web request carries: an IP address, browser details and the page asked for. The CCPA calls these identifiers and internet activity. They are used to deliver the site and to count visits, as described above, and handled only by our service providers, Microsoft and Google.

• We don't sell or share personal information.
• We don't collect sensitive personal information.
• We don't use anything to profile you.
• We don't give personal information to anyone for their own direct marketing (California's "Shine the Light" law).

Opt-out preference signals. We treat Global Privacy Control as a request to opt out of sale and sharing. On this site it goes further: with Global Privacy Control or Do Not Track switched on, nothing is sent at all. That is also how we respond to Do Not Track under California's Online Privacy Protection Act (CalOPPA).

To use any of these rights, write to . You can also make a request through an authorised agent. We'll reply within 45 days. We honour these rights for everyone, wherever you live.

Other US states

Virginia, Colorado, Connecticut, Utah, Texas, Oregon and a growing list of other states have similar laws. They give you the right to access, correct, delete and take a copy of your data, and to opt out of targeted advertising, sale and profiling. We don't do any of those three. Several of these states require sites to honour Global Privacy Control, and we honour it everywhere.

Elsewhere

Wherever you are, including Australia, Japan, India and elsewhere, the rights in section 06 apply to you, and you can complain to your local privacy regulator.

Children

This site isn't aimed at children under 13, and we don't knowingly collect personal information from them, as the US Children's Online Privacy Protection Act (COPPA) requires. We don't collect identifying data from anyone, so there's nothing about children to hold.

08 Changes

If we change how the site handles data, we'll update this page and the date at the top.