1. Who we are
This policy covers the website robrun.space (“the Site”, “we”, “us”). For any privacy question or request, email support@robrun.space.
robrun.space is an unofficial fan site and is not affiliated with KEFIR. This policy covers only robrun.space, not the ROB RUN game, Steam or KEFIR's services, which have their own policies.
2. What we process and why
| Data | When | Why | Legal basis | Kept for |
|---|---|---|---|---|
| Technical request data: IP address, browser user agent, page requested, time, referrer | Every visit, handled by our hosting provider | Deliver the Site, keep it secure, stop abuse and attacks | Legitimate interests (running a secure website) | Short-term security logs |
| Usage analytics (Google Analytics 4): pages viewed, events such as searches, FAQ opens and tool use; device, browser and screen size; approximate location (country/region/city, derived from IP, which Google Analytics does not store); referrer; a random ID in a cookie | Only if you consent | See which pages and tools help players and what to improve | Consent | 14 months |
| Session insights (Microsoft Clarity): clicks, scrolls, mouse movement and page layout used for heatmaps and session replays; device and browser data; a random ID in a cookie. Typed text is masked. | Only if you consent | Find broken layouts, confusing pages and bugs | Consent | Replays about 30 days; aggregated heatmaps up to about 13 months |
| Emails you send us: address, name if given, message, attachments | When you contact support@robrun.space | Answer you and fix errors you report | Legitimate interests | Up to 24 months after the conversation ends |
| On-device preferences: cookie choice, theme, recent searches, compare list | Stored in your own browser | Make the Site work the way you set it | Strictly necessary | Until you clear it (consent cookie: 12 months) |
We do not sell personal data, use it for advertising, build advertising profiles, enable Google Signals or ad personalisation, or link analytics to your identity.
3. Cookies
Analytics cookies are set only after you choose “Accept all” or switch them on in “Customize”. You can change your choice at any time in .
| Name | Set by | Purpose | Type | Duration |
|---|---|---|---|---|
rrs_consent | robrun.space | Remembers your cookie choice | Strictly necessary | 12 months |
rrs_* | robrun.space (localStorage) | Theme, recent searches, compare list | Strictly necessary, stays on your device | Until cleared |
_ga | Google Analytics | Tells visitors apart with a random ID | Analytics (consent) | 2 years |
_ga_<id> | Google Analytics | Keeps session state | Analytics (consent) | 2 years |
_clck | Microsoft Clarity | Keeps the Clarity user ID and preferences | Analytics (consent) | 1 year |
_clsk | Microsoft Clarity | Joins page views into one session | Analytics (consent) | 1 day |
CLID, MUID, ANONCHK, SM, MR | Microsoft | Recognise the same browser across Clarity sessions | Analytics (consent) | Session to 1 year |
Providers set these names and durations and can change them. See Google's and Microsoft's documentation for the current list.
Global Privacy Control: if your browser sends a GPC signal, we treat it as “Reject all” and don't load analytics.
4. Who receives data
- Hosting and CDN provider: serves the Site and protects it from attacks.
- Google (Google Ireland Ltd / Google LLC), for Google Analytics 4, only with your consent.
- Microsoft Corporation, for Microsoft Clarity, only with your consent.
- Our email provider, which hosts the support@robrun.space mailbox.
Some providers process data in the United States. Where required, transfers rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) and/or the European Commission's Standard Contractual Clauses. We may also disclose data if the law requires it, or to protect the Site and its visitors from fraud or abuse.
5. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or Swiss law), you can:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, as easily as you gave it, in . Withdrawing doesn't affect processing that already happened.
- complain to your local data protection authority.
California and other US states: we do not sell or “share” personal information for cross-context behavioural advertising and do not use sensitive personal information. You can still ask what we hold and ask us to delete it.
To use any right, email support@robrun.space. Analytics data is tied to a random cookie ID, not your name, so the quickest option is often to clear your cookies and reject analytics. We reply within one month.
6. Children
The Site is not aimed at children under 13 (or under 16 where local law sets a higher age for consenting to online services), and we don't knowingly collect their data. ROB RUN itself contains mature content. If you think a child has sent us personal data, contact us and we'll delete it.
7. Security
The Site is served only over HTTPS with modern security headers. Access to analytics and email accounts is limited and protected with two-factor authentication. No system is perfectly secure, but we take reasonable steps to protect data.
8. Changes
We'll update this policy if our practices change, for example if we add a contact form, accounts or comments. The date and version at the top will change. For material changes we'll show a notice and ask for consent again where needed.
9. Contact
support@robrun.space. See also our Terms of Service.