Privacy
LAST UPDATED 30 AUGUST 2026
This page describes how personal data is handled on reallyblackgames.com. It is written to be accurate rather than defensive: almost nothing happens here, and this page says so plainly.
Who is responsible
The controller is Milan Černý, a sole trader registered in the Czech Trade Licensing Register, IČO 08080461, registered office Č. p. 86, 751 15 Čechy, Czech Republic. Contact: [email protected]. There is no data protection officer; for a one-person business none is required.
What this website collects
Nothing that identifies you, and nothing you have to consent to. This site is static HTML. It runs no JavaScript, sets no cookies, uses no analytics, embeds no social widgets, and loads no fonts, scripts or images from anyone else — every file it serves comes from this domain. There are no forms and no accounts.
One honest qualification. The site itself stores nothing in your browser, but Cloudflare — which serves it — may set a short-lived security cookie such as __cf_bm if it needs to tell a human visitor from a bot. That cookie is strictly necessary to deliver and protect the site, carries no advertising or profiling function, and is therefore exempt from consent under § 89(3) of Czech Act No. 127/2005 Coll., which implements the ePrivacy Directive. No consent banner is required, and there is nothing here for you to opt out of.
What the server unavoidably sees
The site is hosted on Cloudflare Pages. Like any web server, it processes technical request data — your IP address, the time of the request, the page requested, your browser's user agent and referrer — in order to deliver the page and to protect the site against attack and abuse. This is a legitimate interest under Article 6(1)(f) GDPR: the site cannot be delivered or defended without it.
Cloudflare, Inc. acts as a processor for this purpose under Article 28 GDPR. Cloudflare is certified under the EU–U.S. Data Privacy Framework, and transfers outside the EEA are additionally covered by Standard Contractual Clauses. Cloudflare's own privacy documentation is published at cloudflare.com/privacypolicy.
To be precise about what I can see: I do not run analytics, and I do not build any profile of you. But I am the account holder, so Cloudflare's own dashboard does show me traffic data, and for requests its security systems flag it can show individual IP addresses and user agents. I look at that only to diagnose a problem or an attack. Cloudflare retains this data for a limited period under its own retention rules — on the order of days for the event log, not years — and it is deleted on their schedule, not kept by me.
If you write to me
If you send an e-mail to an address on this domain, I process what you send — your address, your message and anything you choose to include — for the sole purpose of replying to you. The legal basis is legitimate interest under Article 6(1)(f) GDPR, or Article 6(1)(b) where your message concerns a possible agreement. Two recipients are involved in getting your message to me, both acting as processors under Article 28 GDPR: Cloudflare, Inc., which routes mail addressed to this domain, and Google, which operates the mailbox it lands in. Both are US-headquartered and both are certified under the EU–U.S. Data Privacy Framework, which is the transfer mechanism relied on here; Standard Contractual Clauses apply in addition. I delete correspondence once the matter it concerns is closed, and in any case within three years, unless I am required to keep it longer — for example because it turns into an invoice, which Czech tax law makes me retain.
Apps
This policy covers the apps published by reallyblack games as well as this website. No app has been released yet. When one is, it gets its own section on this page — naming what it collects, why, who it is shared with, how long it is kept, and how to ask for deletion — and that section is what its store listing links to. Until a section appears here for a given app, that app is not in distribution.
Your rights
Under the GDPR you have the right to request access to your personal data, its correction or erasure, restriction of processing, portability, and to object to processing carried out on the basis of legitimate interest. To exercise any of these, write to [email protected].
In practice, requests about this website are usually answered with a short explanation, because the site holds no record that could be linked back to you.
You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.
Changes
If this page changes in a way that matters, the date at the top changes with it. Previous versions are not archived; the date is the version.