Privacy Policy

Summary

• No accounts, forms, newsletters, ads, analytics or tracking pixels. The Site doesn’t ask you for personal information.
• No cookies are set by us. We store a few small preferences on your own device (see Cookie Notice).
• Our host keeps standard server logs (like your IP address) to deliver and protect the Site.
• Third-party players load only when you click them. If you load the Kick player, Kick collects data under its own policies.
• We don’t sell or share your personal information and don’t use it for targeted advertising.

1. Who we are

This Privacy Policy explains how GGCoco Studios (“we”) handles information about visitors to ggcocostudios.com (the “Site”). For visitors in the EU/EEA or UK, we are the “controller” of the personal data described here. Contact details are at the end.

2. Information we collect

a. Information collected automatically by our hosting provider

The Site is hosted by Vercel Inc. Like nearly every website, when your browser requests a page, Vercel’s servers receive and may log technical information such as your IP address, the approximate city and country derived from it, browser and device type, the page requested, the referring page, and the date and time. This is used to deliver the Site, keep it secure and fix problems. We do not combine it with other data to identify you. Vercel processes it as described in the Vercel Privacy Notice. Our domain’s DNS is provided by Cloudflare, which processes DNS lookups as described in the Cloudflare Privacy Policy.

b. Information stored on your device

The Site saves a few settings in your browser’s local storage or session storage — your button-sound setting, your cookie choice, and the position of the guide bear during your visit. These stay on your device and are not sent to us. Details are in our Cookie Notice.

c. Information you send us

If you email us (for example, with a question, a privacy request or a copyright notice), we receive your email address, name if you provide it, and whatever you choose to include. We use it only to respond and keep records of the request.

d. What we don’t collect

We don’t use analytics, advertising or social-media tracking tools, don’t run sign-ups or comment forms, and don’t collect payment information on the Site. All fonts, images, audio and video on the Site are served from our own domain, not from third-party font or media services.

3. Third-party players, links and services

Kick live player. The live player on our home page is a click-to-load placeholder. Nothing is loaded from Kick until you click “Load live player.” Once you do, the player is provided by Kick from player.kick.com, and Kick may collect information (such as your IP address and device data) and set its own cookies, including for analytics and advertising, under the Kick Privacy Policy and Kick Cookie Policy. We don’t receive that data.

Links to Kick, Spotify and TikTok. Our links to official channels open those sites in a new tab. They don’t load anything on our Site, but once you visit those services, their privacy policies apply.

Future store. Our merch store isn’t open yet. When it opens, orders are expected to be handled by a print-on-demand platform (such as Fourthwall or Printful) that will collect the information needed to process payments and ship orders. We will update this policy before the store launches.

4. How we use information

• to deliver, maintain and secure the Site and prevent abuse;
• to remember your on-site preferences;
• to respond to messages and handle legal, privacy and copyright requests;
• to comply with law and protect our rights.

We do not sell personal information, “share” it for cross-context behavioral advertising, or use it for targeted advertising or profiling.

5. When information is disclosed

We disclose personal information only to service providers that help us run the Site (such as Vercel and Cloudflare) under their terms, when required by law or valid legal process, to protect rights, safety and security, or as part of a business transfer (for example, if GGCoco Studios is sold or reorganized), in which case this policy will continue to apply.

6. How long we keep it

We do not keep our own copies of server logs; our providers keep them for limited periods under their own retention settings. Emails and request records are kept as long as needed to handle the request and for our legal and record-keeping needs, generally no longer than three years. Preferences stored on your device remain until you clear them.

7. Children’s privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If you believe a child has sent us personal information, contact us and we will delete it.

8. U.S. state privacy rights

Residents of California and other U.S. states with consumer privacy laws (for example Colorado, Connecticut, Oregon, Texas, Virginia and others) may have the right to: know what personal information we have about them and get a copy; correct it; delete it; and opt out of its sale, “sharing” for targeted advertising, and certain profiling. We don’t sell or share personal information or engage in targeted advertising or profiling, so there is nothing to opt out of — but we honor Global Privacy Control (GPC) and similar browser opt-out signals anyway.

California notice at collection. In the past 12 months the categories of personal information collected have been: identifiers and internet activity (IP address and request data in server logs), and the contents of any message you send us. Sources: you and your device. Purposes: those in section 4. We have not sold or shared personal information, and we do not collect sensitive personal information.

To make a request, email info@ggcocostudios.com with the subject “Privacy request.” Because we hold very little data, we may need some details to find it (for example, the email address you wrote from). An authorized agent may request on your behalf with your written permission. We won’t discriminate against you for using your rights. If we deny a request, you may appeal by replying to our decision; if you’re still unhappy, you can contact your state attorney general.

We apply these rights to everyone who asks, whether or not a particular state law applies to us.

9. Visitors in the EU/EEA, UK and elsewhere

Legal bases. We process server-log data based on our legitimate interests in running and securing the Site; preference storage because it is strictly necessary for features you request; and email correspondence to respond to you (legitimate interests or, where relevant, to take steps at your request). Loading a third-party player happens only on your action and choice.

Your rights. You may request access, correction, deletion, restriction, portability, and object to processing, and you may withdraw consent at any time (use “Cookie settings” in the footer). You also have the right to complain to your local data protection authority.

International transfers. We are based in the United States, and our providers may process data in the U.S. and other countries. Where required, transfers rely on safeguards such as the providers’ Standard Contractual Clauses or the EU–U.S. Data Privacy Framework where they participate.

10. Security

The Site is served only over HTTPS with modern security headers, a strict Content Security Policy, and no third-party scripts on our pages. No method of transmission or storage is 100% secure, but we work to protect the little information we handle.

11. Changes

We will update this policy when our practices change (for example, before the store opens). The “Last updated” date shows the latest version. If a change is significant, we will note it on the Site and may ask for your cookie choice again.

12. Contact

Privacy questions or requests: