Privacy Policy

Last updated 31 July 2026

Who we are

Garbanzo Games is an independent game development studio. This policy covers garbanzogames.com and the client portal hosted on it.

What we collect

For the public pages of this website, nothing. We do not use analytics, advertising or third-party tracking scripts, and we set no cookies for visitors who are not signing in.

For the client portal we store the account details we were given when the account was created — an email address, an optional name, the organisation the account belongs to, and a hashed password. We never store passwords in readable form. We also record the time of the last successful sign-in, and the time of each sign-in attempt, which is used only to rate-limit repeated failures.

Cookies

The sign-in page sets a cookie to protect the form against cross-site request forgery, and to remember where to send you after signing in. Signing in successfully sets a session cookie so the portal knows who you are. All three are strictly necessary for the service to work, are not used for tracking or advertising, and the session cookie is cleared when you sign out.

How accounts are created

Portal accounts are created by us at a client's request. There is no public sign-up, no marketing email and no automated password reset — we have no outbound email channel, so credentials are delivered directly and must be changed on first sign-in.

Who we share it with

We do not sell or share personal data. Data is processed by the infrastructure providers that run this site — a hosting provider and a managed database provider — acting on our instructions and only to deliver the service.

How long we keep it

Account details are kept while the account is active and removed on request, or when a client engagement ends and the account is no longer needed.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email hello@garbanzogames.com and we will respond.