Privacy Policy

Who runs this site

GummyPrism is an independent editorial project published at gummyprism.com and operated from Australia. We decide what personal information is collected here and why, which makes us the entity responsible for it under the Privacy Act 1988 (Cth).

Questions about this notice, or about information we hold on you, can go to hq@gummyprism.com. We answer privacy requests within 30 days.

What this notice covers

It covers the pages of gummyprism.com: the home page, this notice, the Terms of Use and the Cookie Notice. It does not cover Google Play, the games we write about or any other site you reach by following a link from here. Those services publish their own privacy notices, and we have no control over them.

Information we collect

• Details you type into the subscription form. An email address, which is required, and a first name, which is optional. We do not ask for a phone number, a postal address or payment details, and the form has no field for them.
• Notification identifiers. If you accept notifications, OneSignal issues a random subscriber identifier for your browser and stores technical values such as browser type, language and time zone so it can deliver a message.
• Technical records kept by our host. Ordinary web server logs: IP address, user agent, requested address, referring page and a timestamp. These are produced by the act of loading a page and are used for security and troubleshooting.
• Your consent choice. One value in your browser’s local storage recording whether you accepted or declined. It stays on your device and is not sent to us.

We do not run an advertising network, a data broker pixel or a behavioural profiling tool on this site, so no advertising identifier is created here.

Why we collect it, and on what footing

• To send the monthly editorial note and notifications. On your consent, given by ticking the box on the form or by pressing Accept on the notice at the foot of the page. Commercial electronic messages we send carry sender identification and a working unsubscribe function, as the Spam Act 2003 (Cth) requires.
• To keep the site available and secure. Our legitimate operational need to run a website, using the server logs described above.
• To respect the choice you made about notifications. Storing that one value is what stops the notice reappearing on every visit.

Giving us any of this is entirely voluntary. Declining costs you nothing: the whole site can be read without a subscription and without notifications.

Who else handles the information

We keep the list of recipients deliberately short:

• Our hosting and content delivery provider, which serves the pages and produces the server logs.
• OneSignal, which manages browser notification subscriptions and the delivery of email updates on our instruction.

We do not sell personal information, do not rent mailing lists and do not pass your address to the studios whose games we review.

Information sent overseas

OneSignal processes subscriber data on servers in the United States, so accepting notifications or joining the list means your email address and subscriber identifier are disclosed to an overseas recipient. We take reasonable steps under Australian Privacy Principle 8 to satisfy ourselves that the provider handles the information consistently with the Australian Privacy Principles, but overseas legal systems differ from ours, and you should factor that in before you subscribe.

How long we keep it

• Subscription details are kept until you unsubscribe or ask us to erase them, and are removed within 30 days of that request.
• Notification identifiers disappear when you revoke permission in your browser or clear the site’s storage.
• Server logs are rotated by our host on a short cycle, ordinarily within a few weeks.
• The local consent value stays until you clear your browser storage.

Your rights, and how to complain

Under the Australian Privacy Principles you may ask us for access to the personal information we hold about you, ask us to correct it if it is wrong or out of date, unsubscribe from every message we send, and revoke your consent for notifications at any time.

Write to hq@gummyprism.com and we will act on the request. If our answer does not satisfy you, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, which oversees privacy in Australia.

Keeping it safe

The site is served over HTTPS, the subscription list is held in our provider’s account behind a strong password and two-factor authentication, and access is limited to the people who write and send the note. No transmission over the internet can be guaranteed absolutely, but we will tell affected people and the Commissioner if an eligible data breach ever occurs.

Age

This site is written for adults and is not intended for anyone under 15 years of age. We do not knowingly collect information from a person under 15. If you believe a child has subscribed, write to us and we will remove the record.

Changes to this notice

If our practices change, we will publish the revised notice on this page and change the date at the top. Where the change materially affects how we use information already given to us, we will ask again rather than assume.