Privacy policy
Last updated: 13 November 2026
This policy is about this website, https://kindred-spirit-pip.web.app. The short version: the site works without collecting anything about you beyond what any web server needs to send you a page. We count visits with Google Analytics only if you say yes, and you can change your mind at any time.
The Kindred Spirit mod and Pip's brain are a different matter: they run on players' own computers and send nothing to this project. What they send to the AI provider a player chooses is explained in the README's privacy section.
Who is responsible
This website is run by PetitPotam, the maintainer of Kindred Spirit (github.com/PetitPotam), who is the controller of the personal data described here. See Contact for how to reach us.
What we collect, and why
1. Delivering the site (every visit)
The site is hosted on Firebase Hosting, a Google service. To send you a page, Google's servers receive what every web request contains: your IP address, the page asked for, the time, your browser and operating system (the user agent) and the page that linked here (the referrer). This is needed to deliver the site and to protect it from abuse.
- Legal basis: our legitimate interest in delivering a working, secure website (Article 6(1)(f) GDPR).
- We haven't turned on request logging for this site, and we don't use this data to find out who you are. Google keeps service logs for a short time for operations and security, under its terms as our processor.
2. Counting visits: Google Analytics, only with your consent
If you click Accept analytics, the site loads Google Analytics 4, connected to the project's Firebase project. It tells us how many people visit, which pages and guides they read, and roughly where visitors come from, so we can improve the guides. Until you accept, nothing from Google Analytics is loaded and no analytics cookie is set.
When it's on, Google Analytics collects:
- the pages you view and when, and the page or site that brought you here;
- your approximate location (country and region), worked out from your IP address. Google Analytics 4 does not log or store IP addresses;
- your device type, browser, operating system, screen size and language;
- a random identifier kept in a cookie, so that two visits from the same browser count as one visitor.
We have switched off Google signals, advertising features and ad personalisation, we don't send Google any identifier of our own, and we keep event-level data for 2 months, the shortest period Google Analytics offers. Counts that no longer relate to any visitor (such as "120 visits in March") may be kept longer.
- Legal basis: your consent (Article 6(1)(a) GDPR, and the rules on cookies of the ePrivacy Directive, Article 5(3), as applied in your country).
- Changing your mind: use Cookie settings at the bottom of any page. Withdrawing stops Analytics and deletes its cookies from your browser. It doesn't affect what was collected before.
- If your browser sends a Global Privacy Control signal, we treat it as "No thanks" and don't ask.
3. The showcase video
The video on the home page is loaded only when you press play. It's then streamed from Cloud Storage for Firebase, a Google service, which receives your IP address and browser details like any web request, to send you the video. It sets no cookies. Legal basis: our legitimate interest in showing you the video you asked for (Article 6(1)(f) GDPR).
4. Remembering your choice
Your answer to the cookie question is stored in your own browser (its local storage), for 6 months, so we don't ask on every page. It never leaves your device. This is strictly necessary to respect your choice, so it needs no consent.
5. Links to other sites
Many links lead to GitHub (the project's code, issues and documents) and other sites. They have their own privacy policies, which apply once you're there.
What we don't do
- No accounts, forms, comments or newsletters on this site.
- No advertising, no ad profiles, no selling or sharing of data for marketing.
- No fonts, scripts or embeds from other sites before you ask for them. The site uses your device's own fonts.
- No decisions about you made by automated means.
Who processes the data
Google (Google Ireland Limited, and Google LLC in the United States) provides Firebase Hosting, Cloud Storage for Firebase and Google Analytics, as our processor under Google's data processing terms. Google may process data outside the European Economic Area, including in the United States. Those transfers rely on the EU-US Data Privacy Framework, under which Google LLC is certified, and on the European Commission's Standard Contractual Clauses.
How long data is kept
| Data | Kept for |
|---|---|
| Analytics events (with consent) | 2 months; anonymous totals may be kept longer |
| Analytics cookies in your browser (with consent) | up to 6 months, or until you withdraw consent or clear them |
| Your cookie choice in your browser | 6 months, then we ask again |
| Hosting and video request data | a short time, for operations and security, under Google's terms |
Your rights
Under the GDPR you have the right to:
- ask for a copy of personal data about you (access) and to have it corrected (rectification);
- have it deleted (erasure) or its use limited (restriction);
- object to uses based on our legitimate interests;
- receive data you gave with your consent in a portable format (portability);
- withdraw your consent at any time, as easily as you gave it (Cookie settings);
- complain to a data protection authority, in particular where you live or work. We'd be grateful for the chance to help first.
We don't know who our visitors are. To find analytics data about you, we may need the identifier in your
_ga cookie; without it we may not be able to tell which data is yours.
Children
Pip is for players of all ages, and this site collects nothing from anyone without consent. If you're younger than the age at which you can give consent online where you live (between 13 and 16 in the European Union), please choose No thanks unless a parent or guardian agrees.
Security
The site is served only over HTTPS, with strict security headers that stop it from loading anything we haven't listed. It has no logins and stores nothing about you on our side.
Changes to this policy
If we change how the site handles data, we update this page and its date. If a change needs your consent, we ask again.
Contact
Reach PetitPotam through GitHub: github.com/PetitPotam. For a privacy request, please don't put personal details in a public issue: open an issue titled "Privacy: please contact me" with no details in it on the project's issue tracker, and we'll get in touch privately.