Privacy Policy
This policy explains what personal data KDMT, LLC (“we”, “us”) collects through ko-ko.dev, why we collect it, how long we keep it and what rights you have. We are the data controller for that processing.
Contents
1. Who we are
KDMT, LLC is a limited liability company formed in the State of Delaware, United States. Registered office: 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Contact: hello@ko-ko.dev.
We do not have an establishment in the European Union or the United Kingdom. Where the GDPR or UK GDPR applies to our processing because we offer services to people located there, we comply with it as set out in this policy.
2. What we collect
Information you give us. When you submit a form on this site we receive the name, email address, company name, messaging handle, budget range, timeline and project description you type in, plus the fact that you ticked the consent box. Only the name, email and project description are required; the rest is optional.
Information collected automatically. Our hosting provider records standard server logs: IP address, date and time, requested URL, HTTP status, referring page and browser user-agent string. We use the same data, briefly, to rate-limit form submissions and block abuse.
What we do not collect. We do not ask for payment card numbers, government identifiers or any special category data on this website. Please do not send them through the contact form.
3. Why we use it, and our legal basis
- To answer your enquiry and prepare a quote — because it is necessary to take steps at your request before entering into a contract (GDPR Art. 6(1)(b)).
- To keep the site secure and prevent spam and abuse — our legitimate interest in protecting the service (Art. 6(1)(f)).
- To keep records of enquiries and contracts — our legitimate interest in running the business and defending legal claims, and compliance with accounting obligations (Art. 6(1)(f) and (c)).
- Non-essential cookies or analytics, if and when we enable them — your consent (Art. 6(1)(a)), which you may withdraw at any time.
We do not sell personal data, we do not share it with advertising networks, and we do not use it for automated decision-making or profiling.
4. Who can see it
Form submissions are delivered to our own mailbox and stored on our own hosting account. We use a small number of service providers who process data on our behalf:
- Hostinger — website hosting, server logs and outbound email for form notifications.
- Cloudflare — DNS, CDN, TLS termination and email routing. Cloudflare sees traffic metadata including your IP address.
- thum.io — a screenshot service used as a fallback to display previews of our own portfolio sites. If the fallback is used, your browser requests an image from that provider and your IP address is visible to it. No information about you is sent.
We may also disclose data where we are legally required to, or to establish or defend legal claims. Our providers operate in the United States and other countries. Where data is transferred out of the EEA or the UK, we rely on the providers' Standard Contractual Clauses or an equivalent safeguard.
5. How long we keep it
- Enquiries that do not become projects — up to 24 months, then deleted.
- Enquiries that become projects — for the life of the contract and up to 7 years afterwards, to meet accounting and tax record-keeping obligations.
- Server logs — typically 14 to 30 days, depending on the provider's retention settings.
- Rate-limiting records — a few hours at most.
6. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time without affecting processing already carried out.
To exercise any of these, write to hello@ko-ko.dev. We will respond within 30 days. We may need to confirm your identity first. If you are in the EEA or the UK you may also complain to your local data protection authority.
California residents. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding twelve months. You may request disclosure or deletion using the same address, and we will not discriminate against you for asking.
7. Security
The site is served only over HTTPS. Form submissions are validated and rate-limited on the server, and stored with access restricted to the people who need it. We keep software patched and use separate credentials per service.
No system is perfectly secure. If a breach affects your personal data and is likely to create a risk to your rights, we will notify you and the relevant authority as required by law.
8. Children
This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it. This applies regardless of the fact that some of the games we build are played by young audiences — those games are operated by our clients under their own policies, not by us.
9. Changes
If we change this policy we will update the effective date at the top and, for material changes, say so on the site. Earlier versions are available on request.
Contact
Questions about this document go to hello@ko-ko.dev, or by post to KDMT, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States.