Privacy & Cookies
Last updated: 31 October 2026
In short: this website has no accounts, no advertising and no tracking cookies. We keep anonymous, cookieless visit statistics (which pages and buttons are used, from which country) without storing your IP address, and we process the minimum technical data needed to deliver the site securely, and the emails you choose to send us.
Who we are
This website is run by FableWorlds. For any question about this notice or your personal data, write to [email protected].
What we process and why
- Technical connection data. When you visit, your browser sends data such as your IP address, browser type, the page requested and the time. This is needed to deliver the page and to protect the site against abuse. Our hosting and security provider, Cloudflare, processes this data on our behalf, and our web server may keep short technical logs for security and troubleshooting. Legal basis: our legitimate interest in running a secure website.
- Anonymous visit statistics. When JavaScript is on, each page sends us: the page address, the website that linked to it, campaign tags in the link (such as
utm_source), your browser language, which buttons, links and videos you used (for example "played the trailer", "watched 75 %", "clicked Discord") and how long the page was visible. From the request we derive your country (provided by Cloudflare) and your device type, operating system and browser. We do not store your IP address. To tell one visit from another, we combine your IP address and browser with a random key that changes every day and is deleted after a day, so a visit can never be traced back to you or linked to your visits on other days. No cookies or local storage are used for this. We use these statistics only to understand which content interests visitors. If your browser sends Global Privacy Control or Do Not Track, no statistics are sent at all. Legal basis: our legitimate interest in improving the site. - Admin login security. Attempts to sign in to our admin area are logged with the time, country and a shortened IP address (for example 85.105.x.x) to protect it against break-in attempts.
- Emails you send us. If you write to [email protected] or [email protected], we receive your email address and your message. We use them only to read and answer you. Messages are forwarded by Cloudflare Email Routing to our mailbox, which is hosted by Google (Gmail). Legal basis: our legitimate interest in replying to you, or steps you request before a contract.
We do not sell your data, use it for advertising or build profiles of identifiable people. Our statistics only describe anonymous visits.
Cookies and local storage
Our public pages do not set any cookies of their own.
- Private download cookie. On private download pages shared by invitation, entering the password sets a cookie (
fwdl) that holds a scrambled form of that password, never the password itself. It is only sent with the download request, is needed to give you the file, and expires after 10 minutes. - Strictly necessary security cookies. Cloudflare may set cookies such as
__cf_bmorcf_clearanceto tell people from bots and to keep the site secure. They are essential for the service, are not used to track you across websites, and expire quickly (typically within 30 minutes to a day). - Local storage. When you close the cookie notice, your browser stores a small note (
fw-cookie-notice-2) so the notice does not appear again. It never leaves your device. - Admin login cookie. Only the site owner, after signing in to the admin area, gets a login cookie (
__Host-fwadmin) that keeps them signed in for up to 12 hours. Visitors never receive it.
Because we only use strictly necessary cookies, we do not ask for consent. You can delete or block cookies in your browser settings at any time; the site will still work, although security checks may appear more often.
How long we keep data
Technical logs are kept only briefly, for security and troubleshooting. Anonymous visit statistics are kept for up to 13 months and then deleted automatically. Emails are kept as long as needed to handle your request and our correspondence with you, then deleted.
Where your data goes
Our providers, Cloudflare and Google, may process data on servers outside your country, including in the United States. They use safeguards required by law for such transfers, such as Standard Contractual Clauses.
Your rights
Depending on where you live (for example under the EU/UK GDPR or Türkiye’s KVKK), you have the right to ask us for access to your personal data, to correct or delete it, to restrict or object to its processing, and to receive a copy of it. To use these rights, email [email protected]. You also have the right to complain to your local data protection authority.
Changes to this notice
If we add new features, such as a newsletter, or change how we keep statistics, we will update this page and the date at the top before they go live.