◈   Privacy

Privacy Policy

Last updated: August 2026

The Anomaly Archive is a small, independently run project. This page explains what information is collected and why, along with what you can do about it. It's written in plain language on purpose. If anything here is unclear, you can just ask.

The Anomaly Archive is operated by Marian Dumitrache, based in Romania. For anything relating to this policy or your data, reach out at stashoverflow@gmail.com.

Creating an account collects a username and a password. Passwords are never stored as plain text. They're hashed before being saved, so even the site itself can't read them back.

If you play a game, your progress (chapter, choices, inventory) is saved so you can pick up where you left off. This is tied to your account, not to you personally beyond that.

This site does not collect payment information. It does collect an email address if you choose to sign up for release alerts (see Newsletter & Subscriber Data below). Passwords cannot be recovered, so please keep yours safe. Any optional tips are handled entirely on the Ko-fi platform (details in the Tips section below).

If you sign up for release alerts through The Archive Register on the Library page, your email address is sent directly to Buttondown, a third-party newsletter provider that stores it and dispatches emails on behalf of The Anomaly Archive. Email addresses are neither stored nor accessed outside of the Buttondown dashboard.

This email address is used solely to notify you when a new game publishes. It is not used for any other purpose and is not shared with any third party other than Buttondown as the data processor.

Buttondown's own privacy policy governs how they process and secure this data:

Buttondown Privacy Policy ↗︎

You can unsubscribe at any time using the link included in every email, or by writing to stashoverflow@gmail.com to request removal.

Tips are entirely optional. If you choose to donate, that happens through Ko-fi, external to this site. Ko-fi lets supporters pay by card or Apple Pay / Google Wallet on mobile, processed through Stripe.

This site does not see or store any payment information. Depending on Ko-fi's own settings, Ko-fi may share your name or a message you leave with the person running this site, as part of letting them see and thank supporters. That sharing is governed by Ko-fi's own privacy policy, not this one.

Ko-fi Privacy Policy ↗︎
Stripe Privacy Policy ↗︎

The Anomaly Archive runs on three outside services: Supabase (database, accounts, file storage), Netlify (hosting) and Cloudflare (domain and network security). As part of normal operation, these services automatically log technical details (most commonly IP address, browser type and access times), the way almost every website's hosting stack does.

This site doesn't request or read that data itself; it exists in each provider's own infrastructure logs, governed by their own privacy policies:

Supabase Privacy Policy ↗︎
Netlify Privacy Policy ↗︎
Cloudflare Privacy Policy ↗︎

Account and save data exist for one reason: so the site works the way it's supposed to, letting you sign in and continue a story where you left off. Technical logs exist to keep the site running and secure. Nothing here is used for advertising or profiling and nothing is sold to anyone.

Data is shared only with the services named above, strictly to run the site. It is never sold, rented, or handed to advertisers. Supabase, Netlify and Cloudflare each act as data processors on the site's behalf, as does Buttondown for anyone signed up to release alerts. Tips are handled separately, entirely on Ko-fi, as described in the Tips section above.

These services are based outside Romania and the EU and may process data in other countries, including the United States. Each maintains its own safeguards for this, such as standard contractual clauses or equivalent, with details in the policies linked above.

Account and save data are kept for as long as your account exists. To have your account and its data removed, email stashoverflow@gmail.com. Infrastructure logs are retained according to each provider's own schedule, typically short operational periods, not indefinitely.

This site doesn't use tracking or advertising cookies. The only thing stored in your browser is a login token, kept in local storage, so you don't have to sign in again every visit. It's used only to keep you logged in.

If data protection law applies to you (for example, if you're in the EU/EEA or UK), you generally have the right to ask what data is held about you, correct anything inaccurate, request deletion, restrict or object to certain processing and ask for a copy of your data in a portable format.

To exercise any of these, email stashoverflow@gmail.com. As the site is operated from Romania, you can also contact Romania's data protection authority (ANSPDCP), or the data protection authority in your own country of residence.

This site is not directed at children and accounts are not knowingly created by anyone under 16.

This policy may be updated occasionally as the site changes. Any significant change will be noted here with a new date at the top.

Marian Dumitrache, stashoverflow@gmail.com