The short version: this site has no accounts, no analytics, no advertising, and no tracking cookies. It stores nothing about you in its own database, because it does not have one. The only personal information involved is an email address, if you choose to give one, and the payment details you enter on Stripe’s own page if you choose to donate.
1. Who this policy is from
This policy covers the website at shambroomapps.com (“the site”), operated by Jonathan Shambroom, trading as Shambroom Apps, an individual based in Larkspur, California, United States (“we”, “us”, “I”).
Contact about privacy is by email only, at jshambroom@gmail.com. No postal address is published; if you need one for a formal request, ask by email and it will be provided.
The apps listed on this site are separate products on their own domains. This policy covers this website only — see section 11.
2. Information you give us voluntarily
- Email address — if you submit the “New apps, by email” form. It is used to send occasional notes about new apps and nothing else.
- Anything you write to us — if you use the “Request an app” link or email us directly, we receive whatever you send, including your email address.
You are not required to provide any of this. The site is fully usable without it.
3. Donations and payment information
Donations are processed by Stripe, an independent payment processor. When you donate, you are redirected to a payment page hosted by Stripe on Stripe’s own systems.
Your card number, expiry date, and security code are entered on Stripe’s page and are never sent to, seen by, or stored on this site or its servers. We do not have access to your full card details at any point.
What this site does receive from Stripe:
- a Stripe checkout session reference;
- whether the payment succeeded; and
- the donation amount.
That information is read once, at the moment you return to the thank-you page, purely so the page can show you the right amount. This site has no database and does not write it anywhere.
Stripe separately collects and retains the information it needs to process the payment and meet its own legal and anti-fraud obligations, which may include your name, email address, billing address, card details, IP address, and device information. Stripe acts as an independent data controller for that processing. See Stripe’s Privacy Policy.
We can see a record of donations in our Stripe dashboard, which typically shows the donor name and email address supplied to Stripe, the amount, and the last four digits of the card. We use that only to recognise payments, answer questions, and issue refunds.
4. Server logs and technical information
The site is hosted by Vercel. Like any web host, Vercel automatically records technical details of requests to the site, which typically include your IP address, the page requested, the time of the request, your browser user-agent string, and referring page. These logs are generated and retained by Vercel as part of operating and securing the service. See Vercel’s Privacy Policy.
We do not maintain our own separate access logs, and we do not use this technical data to build a profile of you.
5. Cookies
This site does not set any cookies and does not use local storage or similar tracking technologies. There is no cookie banner because there is nothing to consent to.
If you proceed to donate, Stripe’s payment page — a different website — will set its own cookies, including ones necessary for fraud prevention. That is governed by Stripe’s policy, not this one.
6. Analytics
This site currently uses no analytics or tracking of any kind. No Google Analytics, no pixels, no third-party tags. If that ever changes, this section will be updated and the “last updated” date above will change with it.
7. Fonts and third-party requests
The Archivo typeface is served directly from this site’s own domain, not from Google Fonts. Loading a page here does not cause your browser to contact Google or any other third party.
8. Third-party services we rely on
- Vercel — website hosting and request logging.
- Stripe — donation processing.
- Resend — used to deliver email-signup notifications, where that feature is enabled. If you submit the signup form, your email address passes through Resend in order to reach us.
9. How we use information, and how we do not
We use the limited information described above only to:
- send you occasional emails about new apps, if you asked for them;
- reply to messages and app requests you send us;
- process, confirm, and if necessary refund donations;
- keep the site running, secure, and free of abuse; and
- meet legal, tax, and accounting obligations.
We do not sell, rent, or trade your personal information, and we do not share it for advertising purposes. Information is disclosed only to the service providers listed in section 8, so far as they need it to do their job, or where we are legally required to disclose it, or to protect our legal rights.
10. Data retention
- Email signups and messages — kept until you ask us to delete them, or until they are no longer useful.
- Donation records — retained by Stripe under Stripe’s own retention schedule. We keep access to the Stripe record for as long as required for accounting and tax purposes.
- Server logs — retained by Vercel under Vercel’s retention schedule; we do not control it.
11. Data security
The site is served exclusively over HTTPS. Payment card data never touches our infrastructure. Secret credentials are held as environment variables on the hosting platform and are not present in the site’s source code or in anything sent to your browser.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Your privacy rights
Depending on where you live, you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, to object to or restrict how it is used, to receive a copy in a portable format, and to withdraw consent you previously gave. You also have the right to unsubscribe from our emails at any time, by replying and asking.
To exercise any of these, email jshambroom@gmail.com. We will respond as promptly as we reasonably can. Because this site holds very little information, in many cases the answer will be that we hold nothing about you at all.
Requests about payment data held by Stripe may need to be directed to Stripe, and we will tell you if that is the case. We will not charge you for making a request or treat you differently for doing so.
13. International visitors
The site is operated from Larkspur, California, United States, is accessible worldwide, and is served from Vercel’s global hosting infrastructure. Stripe and Vercel are both United States companies and may process and store information in the United States and other countries. If you are outside those countries, using this site or donating involves your information being transferred to them.
14. Children’s privacy
This website is not directed to children, and we do not knowingly collect personal information from anyone under 13. Do not use the donation form unless you are legally an adult where you live.
One of the apps listed here, Kidoku, is designed to be played by children, but it is a separate product on its own domain with its own terms and privacy practices. Nothing on this website collects information from children.
If you believe a child has given us personal information, email jshambroom@gmail.com and it will be deleted.
15. Links to other websites
This site links out to the apps it lists and to third-party services such as Stripe. Once you follow a link you are on someone else’s site, governed by their privacy policy, not this one. We are not responsible for the content or privacy practices of sites we link to.
16. Changes to this policy
This policy may be updated from time to time. The current version is always at shambroomapps.com/privacy, and the “last updated” date at the top will change when it does. Material changes will be reflected there before they take effect.
17. Contact
Questions about privacy, or a request about your information: jshambroom@gmail.com.
See also the Terms of Service.