Security Blueprints
Privacy notice for game updates
Effective August 11, 2026
This notice covers the development-update email list for the Security Blueprints game project currently known as Exploit Margin. The list is used for occasional messages about development, private playtests, release, and crowdfunding.
What we collect
When you subscribe, we collect:
- the email address you submit;
- subscription status and signup, confirmation, and unsubscribe timestamps;
- the source, consent-text version, and privacy-notice version for the signup; and
- keyed, non-public values used to prevent abuse and honor suppression.
The subscription record does not retain your raw IP address or browser user agent. Cloudflare Turnstile processes technical signals to distinguish people from automated abuse, and short-lived keyed values may be used for rate limiting.
How we use it
We use this information to:
- send the confirmation message you request;
- send updates only after you confirm your address;
- prevent fraudulent or automated subscriptions; and
- honor unsubscribes and maintain an auditable consent record.
Where consent is the applicable legal basis, you can withdraw it at any time. Not confirming, or later unsubscribing, has no effect on your ability to visit the site.
Service providers and sharing
Cloudflare provides the site, Worker, Turnstile abuse protection, database, and requested confirmation-email infrastructure. Those services may process information in the United States and other locations where they operate.
We do not sell email addresses or share them for another organization's marketing. If a campaign provider is later used to deliver development updates, it will receive only the information needed to send and suppress those messages under our instructions.
How long we keep it
- Unconfirmed subscription records are deleted after seven days without activity.
- Confirmation links expire after 24 hours.
- Confirmed addresses remain active until you unsubscribe, the list closes, or the data is no longer needed for the stated purpose.
- After unsubscribe, the plaintext address is removed from active sending and storage. We retain its keyed suppression value and the associated consent, unsubscribe, event, and delivery-audit metadata while the mailing program operates. This prevents an old import from accidentally subscribing the address again and preserves evidence that the request was honored.
Your choices
Every promotional update will include an unsubscribe link. Unsubscribe requests are applied immediately in normal operation. You may also ask to access, correct, or delete the information associated with your address. We may need to verify that you control the address before responding.
A deletion request may leave the keyed suppression value and limited consent and delivery audit described above. Those records are used only to respect your request, demonstrate how the subscription was handled, and investigate operational abuse or delivery failures.
Cookies and browser signals
This landing page does not use behavioral advertising trackers. Cloudflare Turnstile may use technical storage or signals necessary for abuse prevention. Confirmation and unsubscribe pages may use short-lived, secure cookies so automated link scanners cannot change subscription status.
Because this page does not use personal information for cross-site behavioral advertising, it does not provide a separate response to browser Do Not Track signals.
Questions and privacy requests
Security Blueprints operates this list. To make a privacy request or ask a question, contact Security Blueprints using the contact information published at securityblueprints.io/privacy and include the email address associated with your request.
Changes to this notice
The effective date above will change when this notice is revised. If a change materially expands how an active subscriber's address will be used, we will provide notice and seek fresh consent where required before applying the new use.