Privacy policy

Controller

The operator of shikishi.wiki is the data controller for this website. Contact details will appear here once a public contact email is configured.

What we process

• Essential site operation — security logs held by the hosting provider, and an admin session cookie when you log into the private admin area.
• Consent preference — a first-party cookie that stores whether you accepted or refused analytics (necessary to remember your choice).
• Optional analytics — only after you accept analytics: anonymous page views and interaction events (path, coarse device class, referrer host, country code from the CDN when available, and a random session id). We do not store raw IP addresses for analytics.
• Community submissions — images and text you send, optional email if you provide one, and a hashed anti-abuse fingerprint (not shown publicly).
• Guesser scores — arcade display name and score you choose to publish on the public scoreboard.

Legal bases (GDPR)

• Consent (Art. 6(1)(a)) — optional analytics and non-essential cookies.
• Legitimate interests (Art. 6(1)(f)) — securing the site, preventing abuse of submissions, and operating the educational archive.
• Contract / steps at your request (Art. 6(1)(b)) — when you voluntarily submit material or a scoreboard nickname.

Cookies

See the separate cookie notice for a full list. You can change analytics consent anytime via Cookie settings in the footer.

Retention

• Analytics events are kept for up to 90 days, then deleted.
• Consent preference cookie lasts about one year (or until you clear cookies).
• Admin session cookie lasts up to 14 days while authenticated.
• Submissions and published educational examples are kept while needed for the archive; you may request deletion of personal contact data you provided.
• Guesser scoreboard entries remain until removed by moderation or a valid erasure request that identifies your nickname entry.

Sharing

We do not sell personal data. We do not use third-party advertising trackers on the wiki. Hosting/CDN providers may process connection data as processors under their terms in order to deliver the site.

International transfers

If the site or CDN is hosted outside the EEA/UK, transfers rely on appropriate safeguards offered by the provider (for example Standard Contractual Clauses). Ask us for details for the current hosting setup.

Your rights

Depending on applicable law, you may have the right to access, rectify, erase, restrict, or object to processing, and to withdraw consent (without affecting prior lawful processing). You may also lodge a complaint with your local supervisory authority.

Children

The archive is not directed at children under 16. Do not submit personal data for minors.

Changes

We may update this policy as the site evolves. The date below reflects the latest substantive revision.

Last updated: 15 August 2026