Privacy notice

Mailing list and website · Effective 11 October 2026

Who is responsible

The AttackPathMan mailing list is operated by Kay Daskalakis, the data controller for the information described here. Postal address: 27 Old Gloucester Street, Holborn, London WC1N 3AX, United Kingdom. Contact: privacy@attackpathman.com.

What we collect and why

When you join the list we collect your email address only. We use it for one purpose: to send AttackPathMan emails — launch news, occasional development updates and new blog articles, and, if AttackPathMan is released as a commercial game, news of its release and availability. We do not use it for any other marketing, we do not add it to any other list, and we do not sell or share it.

To show that you asked to join, our email provider keeps a record of the sign-up request and of your confirmation (such as the date and time). You are added to the list only after you click the link in the confirmation email. You must be 16 or over to join.

Our legal basis is your consent (Article 6(1)(a) UK GDPR and EU GDPR), given by submitting the form and confirming by email.

Withdrawing consent

Every email we send contains an unsubscribe link. You can also email privacy@attackpathman.com. After you unsubscribe, our provider keeps your address on a suppression list solely so that you are not emailed again.

Email provider

We use Brevo (Sendinblue SAS, 9–17 rue Salneuve, 75017 Paris, France) to store the list and send emails, under Brevo's data processing agreement. Brevo states that its hosting providers keep data in France (OVH) and Belgium (Google Cloud Platform). Some of Brevo's sub-processors and group companies — for example in the United States and India — may process data outside the UK and EU, protected by Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. See Brevo's terms and data processing agreement, which list its sub-processors.

Email measurement

Link clicks: links in our emails pass through Brevo so we can see which links each subscriber clicks. We use this only to understand which updates are useful. This is part of the emails you ask for when you join.

Opens (optional): we only measure whether and when you open our emails (using a small image in the email) if you tick the optional box when you join. If you don't tick it, you get exactly the same emails without open measurement. You can withdraw this consent at any time by emailing privacy@attackpathman.com; our provider records your choice and when it was given.

Website hosting and the sign-up form

This website is hosted on Microsoft Azure Static Web Apps. Pages are delivered through Microsoft's global network, so the server that answers your browser may be outside the UK and EU. Microsoft necessarily processes connection data such as your IP address to deliver the page.

The sign-up form sends your address to a small function hosted by Microsoft Azure in the West Europe region, which passes it straight to Brevo. We do not store your email address in our own hosting or logs. To stop the form being abused, we keep short-lived counters identified only by keyed one-way hashes of your IP address and email address; these are deleted within about two days.

Cookies and tracking

This website sets no cookies and uses no analytics, advertising, session recording or social media widgets. If you use the animation pause button, your browser remembers that choice locally; it is not sent to us.

How long we keep your data

• Confirmed subscribers: until you unsubscribe or we close the list.
• Sign-ups that are never confirmed: you are not added to the list and we will not send you anything else. We delete unconfirmed records within 30 days.
• Rate-limit counters: about two days.

Your rights

You can ask for access to, correction or deletion of your data, ask us to restrict or stop processing it, or withdraw consent at any time, by contacting privacy@attackpathman.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority where you live.

Change of operator

If responsibility for AttackPathMan or this mailing list passes to someone else, we will tell subscribers before it happens and update this notice. You can unsubscribe at any time.

Changes

If this notice changes, we will update the date above. We will not use your address for a new purpose without asking you first.