Privacy Policy

1. Who we are

MartialArtsRobots.com (the "Site") is a parody website run by [operator's name or company: add before publishing] ("we", "us"). We are responsible for the personal data described in this policy. You can contact us at contact@martialartsrobots.com.

We have not appointed a representative in the European Union or the United Kingdom under Article 27 of the GDPR or the UK GDPR. Whether one is required is still being assessed. If one is, their details will be published here. Until then, people in the EU and the UK can send any request straight to the address above.

2. The short version

We built the Site to collect as little as possible. We don't want to know who you are, and the Site works without knowing. The only personal data involved is the technical information your browser sends whenever it loads any web page, and anything you choose to put in an email to us. The technical information appears in the web server's logs, which section 5 explains. Emails are covered in section 6.

3. What we don't collect

• No accounts, logins, profiles, newsletters, contact forms, comments or payments.
• No cookies of any kind. See the Cookie Policy.
• No analytics, advertising, social media widgets, tracking pixels, session recording or fingerprinting.
• No third-party fonts, scripts, images or other files. Your browser only contacts our server.
• No access to your camera, microphone, location, contacts or files.

4. What is stored on your device

If you use the Dark mode switch, the Site saves your choice in your browser's local storage, under the name theme with the value light or dark. That way the other pages open in the same mode. The choice stays in your browser and is never sent to us. It remains until you clear your browser's site data. The Cookie Policy explains how to remove it.

Nothing else is stored. Your sound and speed settings, the kick you chose and anything that happens in Play mode are forgotten when you leave the page. The Site registers no service worker and keeps no offline copy of itself. Like any website, your browser may keep the Site's public files (its pages, styles, scripts and images) in its ordinary cache so that pages load faster. Those files are the same for everyone and hold nothing about you.

5. Server logs and our hosting provider

When your browser requests a page or file from the Site, the web server automatically records standard technical information. That can include your IP address, the date and time, the page or file requested, whether the request succeeded, the amount of data sent, the address of the page that linked to the Site, your browser's user-agent string, which names the browser and operating system, and related security information. An IP address can be personal data.

These logs are used only to deliver the Site, to keep it and its server secure (for example, to spot and block attacks or abuse), and to find and fix problems. We don't use them for marketing or to build profiles, and we don't combine them with other information to identify you. We only look at an individual record when we need to, for example to investigate abuse or because the law requires it.

Our hosting provider. The Site is served from a hosting account branded hosting.com, and hosting.com stores and processes the server logs on our behalf. hosting.com's Service Terms and Company Details pages, checked on 3 September 2026, name A2 Hosting, LLC, a Delaware limited liability company, as the company that trades as hosting.com and that we contract with. Its privacy policy names Hosting Holding Germany BidCo GmbH, Kennedy-Ufer 11, 50679 Cologne, Germany, as its representative for residents of the EU and the EEA. hosting.com does not publish a data-processing agreement. Its help pages say it supplies one on request through a support ticket, and we have not obtained it yet. You can read hosting.com's privacy policy on its own website.

How long logs are kept. Never more than three months. No log entry, and no IP address in it, is kept on the hosting server for longer than three months from the request. In our hosting account, as checked on 3 September 2026, the raw access log is processed and archived every 24 hours, and each archived copy is deleted after one day. An entry therefore normally exists there for no more than about two days, and we keep no other copy. If we have to keep a copy to investigate an incident, we delete it when the investigation and any related legal hold end. Three months is the upper limit we state for hosting.com's own server-level copies. We have not separately verified its exact routine period within that limit.

Legal basis. Where the EU or UK General Data Protection Regulation applies, the legal basis for this processing is our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR). You can object to it under Article 21 GDPR at the address in section 1.

6. Emails you send us

If you write to contact@martialartsrobots.com, we receive your email address, any name or signature you include, what you write and ordinary email metadata. We use them only to answer you, to handle a privacy, accessibility or other request, to look into a report about the Site's content, to meet a legal obligation, or to establish, exercise or defend legal claims.

The legal basis is our legitimate interest in answering and handling messages (Article 6(1)(f) GDPR), a legal obligation where one applies (Article 6(1)(c)), or steps you have asked us to take (Article 6(1)(b)). We delete ordinary correspondence within 24 months after the matter is closed. Anything reasonably needed for an unresolved legal obligation or claim is kept only for as long as that requires.

Email for the Site's domain is handled through the same hosting.com account, whose email service processes messages in order to deliver and store them. If we forward messages to another mailbox, that mailbox's provider processes them too.

7. The 3D dojo and its sounds

The robots, the animation and every sound effect are generated on your own device by your browser, using WebGL and the Web Audio API. Nothing you do in the dojo is sent to us or anyone else. That includes turning the camera, choosing a kick, changing the speed and playing a match in Play mode. Your score, the rounds and the belt levels are worked out in your browser. Sound effects are synthesized, not recorded, and the Site never uses your microphone.

To draw the dojo, the page reads a few settings from your browser: whether your device is set to reduce motion or to use forced colors (high contrast), and your screen's pixel density. In Play mode it can also read the buttons and sticks of a game controller you connect. All of this is read inside your browser, used only on that page, never stored and never sent to us.

8. Sharing

We don't sell or rent personal data, and we don't share or disclose it for advertising, including cross-context behavioral advertising. Our hosting provider (section 5) stores and processes the server logs and the domain's email on our behalf, as part of running the server. We may disclose information if the law requires it, or where it is necessary to protect the Site, its users or the public from harm or abuse.

9. Where the data is processed

hosting.com and the domain's email service may process information in the United States or in another country. Public network records for our hosting account, checked on 20 August 2026, place its web and mail servers in a hosting environment in the United States. That describes where those servers are. Logs, backups, support systems or hosting.com's own subcontractors may be handled elsewhere under hosting.com's terms.

The official US Data Privacy Framework list, checked on 3 September 2026, carries a record whose legal name is A2 Hosting, LLC and whose public name is hosting.com. That record is active for non-HR data under the EU–U.S. Data Privacy Framework, its UK Extension and the Swiss–U.S. Data Privacy Framework, from 27 April 2026 to 27 April 2027. An older record for A2 Hosting, Inc. is shown as under re-certification review. The framework covers only the processing that the certification covers. Any other transfer relies on the safeguard set out in hosting.com's data-processing terms or other provider terms. We don't claim a particular safeguard, such as Standard Contractual Clauses or the Data Privacy Framework, for a transfer until we have checked the terms that apply to our account.

10. Legal bases

• Server logs: our legitimate interests (Article 6(1)(f) GDPR), as section 5 explains.
• Emails: our legitimate interests, a legal obligation, or steps you asked for (Article 6(1)(f), (c) or (b)), as section 6 explains.
• A legal request: if the law requires us to process or disclose information, the basis is that legal obligation (Article 6(1)(c)).
• The theme choice: it stays on your device and never reaches us. The Cookie Policy explains why storing it needs no consent.

Two things the law asks us to state, even though the answer is "none":

• No automated decisions or profiling. Nothing on the Site evaluates, scores or classifies you for us or anyone else within the meaning of Article 22 GDPR. The Play mode score, rounds and belt levels, and the robot telemetry, are worked out in your browser, are not sent to us and are gone when you leave the page.
• You don't have to give us anything. There is nothing to sign up for and no field to fill in. The only personal data we receive is the technical information any browser sends when it asks a server for a page, and anything you decide to email us.

11. Your rights

Depending on where you live, you may have rights over your personal data. Those can include the right to ask for access, correction or deletion, to restrict or object to processing, and to data portability. Under Article 21 GDPR you can object at any time to processing based on our legitimate interests.

To exercise a right, contact us at the address in section 1. The server logs don't contain your name, so to find any records about you we may need details such as your IP address and the approximate time of your visit. Because logs are normally deleted after about two days, there may be nothing left to find. We will reply as soon as we can, and in any case within the time the law that applies to your request allows: one month under Article 12(3) GDPR, which that Article lets us extend in some cases. Contacting us is free.

If you live in California or another US state with a consumer privacy law: we do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information. We will not treat you differently for exercising your privacy rights. We don't make automated decisions about you, and we don't profile you.

Complaints. If you think we handle your data unlawfully, you have the right to complain to a data protection authority. You don't have to contact us first.

• In the European Union: the supervisory authority in the country where you live or work, or where the alleged infringement took place (Article 77 GDPR). The European Data Protection Board publishes a list of these authorities.
• In the United Kingdom: the Information Commissioner's Office (ico.org.uk).
• Elsewhere: the data protection authority of your country, where there is one.

We'd be glad if you told us first so that we can try to put it right, but that is up to you.

12. Children

The Site is a general-audience entertainment site. It asks nobody for a name, email address, age or any other detail, and it has no accounts, forms or comments. We do not knowingly collect personal information from children under 13, or under the higher age that applies where a child lives. For every visitor, the only data involved is the technical information in the server logs, used only to deliver and secure the Site (section 5), and an email if someone chooses to write to us (section 6).

A parent or guardian who has a question, or who wants us to look for and delete a log entry or an email about their child, can write to the address in section 1. On its own, a log line holds too little to identify a particular child. To find it we would need details such as the IP address and the time of the visit.

Whether a website is directed to children is judged from the site as a whole, including its content, presentation, audience and promotion. If any of that changes, we will reassess our position under the US Children's Online Privacy Protection Act (COPPA).

13. Security

The Site is meant to be served only over HTTPS. With every response, the server sends a restrictive Content Security Policy. It allows scripts, styles, images, fonts and connections only from the Site itself, forbids form submission, and stops other websites from showing the Site inside a frame. The server also switches off browser features the Site has no use for, among them the camera, the microphone, location, payments and USB devices.

We take reasonable steps to protect the Site and its server logs. No website or server can be guaranteed to be completely secure, though. Keeping your browser and operating system up to date also helps.

14. Changes to this policy

If what we collect or how we use it changes, we will update this policy and the date at the top. A significant change will be announced on the Site in a reasonably prominent notice before it applies, where practicable, and it will not be applied backwards to information we already hold. The version that applies is always the one published at martialartsrobots.com. A copy kept by your browser, such as a tab left open, may be older.

15. Contact

Questions or requests about privacy can be sent to contact@martialartsrobots.com. This is the Site's address for every matter.