Privacy Policy
This privacy policy applies to the FutureKeyword websites, including memory-game.futurekeyword.xyz, and any related tools or mini-sites referred to on these pages (the “Sites”). It explains what we collect, why, how we use it, and your choices. This is a plain-English policy — no legalese. If anything here conflicts with applicable law, the law wins.
Who we are (Data Controller)
FutureKeyword (Yeh Yeh / Y2Y)
Contact: you@example.com
Primary site: futurekeyword.xyz
What we collect
- Essential data: basic technical data needed to load the site (IP address, HTTP headers, basic security logs). No choice is needed for this.
- Analytics (optional): if you consent, we use Google Analytics 4 to understand what pages are used and for how long. We do not use GA4 to identify you personally.
- Ads-related signals (optional): if you consent, we may enable limited ads-related signals in Google tags (ad storage/user data/personalization). We do not run invasive cross-site tracking.
- Newsletter / downloads: if you submit your email (e.g., to receive the Audio Memory Game), we store your email and basic subscription metadata in our email service provider (MailerLite).
Legal bases
- GDPR (EEA/UK): we rely on consent (Art. 6(1)(a)) for analytics and ads-related signals. Essential processing is based on legitimate interests (Art. 6(1)(f)) to operate the site securely.
- Jamaica DPA 2020: we follow the Act’s data protection standards (see below) and process personal data fairly, lawfully, and securely.
- US (CCPA/CPRA): we do not “sell” personal information. If we ever engage in activities that qualify as “share” under CPRA (e.g., cross-context behavioral advertising), we will provide a “Do Not Sell or Share My Personal Information” link and honour Global Privacy Control signals.
Your choices
- Consent banner: enable/disable Analytics and ads-related signals anytime.
- Emails: unsubscribe any time using the link in our emails or by contacting us.
- Do Not Sell/Share (California): if applicable, use the opt-out link or contact us.
Your rights
Under GDPR (EEA/UK)
You may request access, rectification, deletion, restriction, portability, and object to processing; and you can withdraw consent at any time. You also have the right to lodge a complaint with your data protection authority.
Under Jamaica’s Data Protection Act, 2020
Jamaica’s DPA grants rights similar in spirit to GDPR and requires compliance with eight data protection standards (fair/lawful processing, purpose limitation, data minimization, accuracy, storage limitation, security/integrity, and accountability). You can request access/correction, object to processing, and complain to the Office of the Information Commissioner (OIC).
Under CCPA/CPRA (California)
California residents have rights to know, access, delete, correct, and to opt out of the sale or sharing of personal information. We honour Global Privacy Control where applicable.
Processors / recipients
- Google Analytics 4 — measurement/analytics.
- MailerLite — email subscriptions and campaign delivery.
- Hosting and CDN providers necessary to run the Sites.
International transfers
Data may be processed in countries outside your own. When required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) or your explicit consent.
Retention
Analytics data is retained per our GA settings. Mailing list data is kept until you unsubscribe or your request is processed. Server logs are kept for security and troubleshooting with limited retention.
Security
We use HTTPS and industry-standard controls to protect data. No system is perfect — if we detect a breach that risks your rights, we will notify you as required by law.
Contact
For any privacy requests: carveyderrick@gmail.com. For Jamaica, you may also contact the OIC.
Changes
We will update this policy as our services or laws change. Material changes will be signposted on our Sites.