Legal notice & privacy

Last updated: 14 October 2026

Legal notice

Chaos Crib
Avenida Irarrázaval
7750000 Ñuñoa, Santiago
Chile

Contact

Email: hello@chaoscrib.com

Privacy policy

1. Who is responsible

The controller responsible for processing your data on this website is Chaos Crib, Avenida Irarrázaval, 7750000 Ñuñoa, Santiago, Chile. You can reach us at hello@chaoscrib.com.

2. The short version

3. Hosting and delivery (Cloudflare)

This website is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). On every visit, Cloudflare processes technically necessary data such as your IP address, the time, the address requested, the referrer and your browser type, to deliver the page and protect it from attacks; for this it may set a strictly necessary cookie (“__cf_bm”, 30 minutes). The legal basis is our legitimate interest in a secure, fast website (Art. 6(1)(f) GDPR). Cloudflare processes this data on our behalf (Art. 28 GDPR). For transfers to the USA, Cloudflare is certified under the EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses apply in addition.

4. Waiting room and closed beta (Klaviyo)

When you sign up, we store your email address and, if you give them, your first name and the language you play in. For the closed beta, we also store your group size, your group’s languages and, if you give it, your country. We also record when and through which form you signed up, so we can prove your consent.

We use this data only to tell you when Chaos Crib launches or to invite you to the closed beta. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, using the unsubscribe link in every email or by writing to hello@chaoscrib.com.

After you sign up, you’ll get an email with a confirmation link (double opt-in). You’re only on the list once you click it.

For the forms and for sending emails we use Klaviyo (Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA) as our processor (Art. 28 GDPR). Klaviyo is certified under the EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses apply in addition. Klaviyo can record whether you open an email and which links you click. We only use this to improve delivery and our emails (Art. 6(1)(f) GDPR); you can object at any time by unsubscribing or writing to us.

We keep your data until you unsubscribe or until its purpose is fulfilled (the game’s launch or the end of the closed beta). After that we delete it, unless you have agreed to receive further emails.

You must be at least 16 to sign up.

5. Storage in your browser

The site remembers the language you chose and your progress in the letter game in your browser’s local storage (localStorage, entries “cc-lang” and “cc-found”). This data stays on your device and is never sent to us. It is needed for features you use yourself (in Germany, § 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

6. WhatsApp and Instagram

“Invite on WhatsApp” and the Instagram link are plain links. Meta’s service opens only when you tap them, and from then on Meta’s privacy policy applies. No data is sent to Meta before that.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)). A short message to hello@chaoscrib.com is enough. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.