CHOCOKALE

hiiiiiiiiiiiii

the fine print

Terms, privacy, cookies and copyright, in one place and in plain words. Nothing here is a surprise: the site sets no cookies to read it, counts you without knowing who you are, and keeps only what you type in yourself.

Last updated 1 September 2026

terms of use

This page covers chocokale.cc and everything on it: the front door at chocokale.cc itself, this site, the hosted sites on the other subdomains, and the game. All of it is personal and non-commercial, and all of it runs on one person's software over one database, which is why there is one set of terms rather than one per address.

The domain, the software and the database are run by freind. The words and pictures on each site belong to whoever made that site, and each person edits their own. By visiting any of it, signing a guestbook, playing the game or making an account, you agree to what is on this page. If you do not agree with it, please close the tab — that is the whole enforcement mechanism.

what you may not do

  • Break the law with it, or use it to help somebody else break the law.
  • Probe, scan, overload or otherwise attack the site or the machines it runs on.
  • Scrape it at a rate that costs me money, or harvest it to train a model. Reading it with your eyes is the intended use.
  • Post anything unlawful, hateful, threatening, obscene, defamatory, or that is not yours to post.
  • Impersonate somebody else, in the guestbook or in a game account name.
  • Advertise, spam, or post links to malware.

what I may do

Remove anything, block anyone, delete any account, and change or close the site — at any time, without notice and without explanation. A personal site is somebody's front room, not a public square, so there is no appeals process. If something of yours disappeared and you think it should not have, write to me and I will probably put it back.

how old you have to be

Nothing here is aimed at children. Do not post in the guestbook or make a game account if you are under 13, or under 16 if you are in a country whose law sets it there. If I find out an account belongs to somebody younger, I will delete it and its saved progress.

what you post here

Both guestbooks — the one on this site and the one on any of the hosted sites — publish immediately. There is no moderation queue, so anything you type is public the moment you press the button — visible to every visitor and to search engines. Do not put an address, a phone number or anything else private into it.

What you write stays yours. By posting it you give me permission to show it on this site and keep it in backups, free of charge, for as long as the site runs — nothing more than that. You are confirming it is yours to post in the first place.

Want a post taken down? Ask, say which one, and it goes. No reason needed.

game accounts

The game keeps an account for you: the name you chose, a password, your saved progress, and when you last signed in. Passwords are stored hashed (PBKDF2-SHA256) and never in readable form, and a session is stored as a hash of the cookie rather than the cookie itself.

That said: this is a hobby project written by one person, not a bank. Use a password you do not use anywhere else. The leaderboard shows your chosen name and your score, and you can take yourself off it in the game at any time.

Saved progress is not a guarantee. The game may change, break or be retired, and saves may go with it. Ask me and I will delete your account and its save.

privacy

There is no analytics on this site, no advertising, no trackers, no profiling, and nothing is ever sold or handed to anybody for marketing. What follows is the complete list of what is collected, which is short on purpose. The person responsible for it is freind, at hello@chocokale.cc.

what is kept

  • Guestbook posts — the name, optional website and message you typed, plus the time. Published on the page and kept until you or I remove it; only the most recent few hundred entries are kept.
  • The visitor counter and the spam cooldown — a salted SHA-256 hash of your IP address and browser string, recomputed daily. The address itself is never written down and the hash cannot be turned back into one. It exists to count you once a day and to stop one person flooding a guestbook. The day's hashes are deleted when the day turns over.
  • Notes left on a hosted site — the same thing again for the guestbooks on the other subdomains: the name and message you typed, and the time, published on the page. A salted daily hash stands in for your address there too, to space out posts.
  • Game accounts — the name you chose, your password hash, your save, your scores, and sign-in times. Kept until you ask for them to go.
  • Editor accounts — if you are one of the handful of people who edits a site here: a username, a password hash, sign-in times, the pages and pictures you upload, and a hashed record of failed sign-in attempts so a password cannot be guessed at leisure. Sessions are stored as a hash of the cookie, never the cookie.
  • Server logs — the site is hosted on Cloudflare, which handles every request and keeps its own short-lived logs, including IP addresses, to deliver pages and block attacks. That is Cloudflare's processing, under their terms, on servers around the world.

why, legally

Publishing what you deliberately typed into a form is done on the basis of your request; keeping the site up, counting visits and fending off spam is done on the basis of a legitimate interest in running it at all. There is no processing here that needs a consent banner, which is why you have not been shown one.

your rights

The person responsible for all of this is in Andorra, so Andorra's data protection law is what governs it, and the Agència Andorrana de Protecció de Dades is the regulator to complain to if I get it wrong. The European Commission considers Andorra to protect personal data adequately, so nothing about where I am sitting weakens what follows.

Whoever you are and wherever you are: you may ask for a copy of what is held about you, ask for it corrected, ask for it deleted, ask for it in a form you can take elsewhere, or object to it being kept at all. If you are in the UK or the EEA you also keep every right your own law gives you, and may complain to your own national authority rather than to Andorra's. One email is enough, and there is nothing to prove — if you name the guestbook post or the account, it goes.

other people's servers

A few pictures on this site are loaded from elsewhere, which means those companies see the request your browser makes for them:

  • Cloudflare — hosts the site; sees every request.
  • Google / YouTube (i.ytimg.com) — the thumbnails in the watching panel. Images only; there is no embedded player on these pages.
  • Valve / Steam (steamstatic.com) — the avatar and item pictures in the Counter-Strike and inventory panels.
  • Roblox (rbxcdn.com) — the two avatars in the Roblox panel.
  • AniList (anilist.co) — the cover pictures in the series panel and on the series page.

Follow a link out of here and you are on somebody else's site under somebody else's rules.

cookies

Reading this site sets no cookies at all. The visitor counter works without one, which is why there is no banner asking you to accept anything.

Cookies appear in exactly three situations, all of them strictly necessary:

  • Signing into the game — one session cookie, so the game knows the save is yours. It expires, cannot be read by JavaScript, and is not sent to other sites.
  • Signing the guestbook — a short-lived session cookie while the form is in use, to keep the form honest.
  • Signing into the editor — one session cookie for whoever edits a hosted site, so the page they save is saved to theirs.
  • The admin panel — only ever set for me.

None of them are advertising cookies, none of them are third-party cookies, and none of them follow you anywhere.

no warranty, and the limits of my liability

The site is provided as it is, for free, with no promise that it will be up, correct, complete or intact tomorrow. Opinions on it are opinions. Nothing on it is professional advice of any kind.

To the fullest extent the law allows, I am not liable for any loss or damage arising out of using this site, or out of being unable to — including lost data, lost saved progress, or anything you relied on that turned out to be wrong. Nothing here limits liability that cannot lawfully be limited, such as for death or personal injury caused by negligence, or for fraud, and nothing here takes away statutory rights you have as a consumer.

Nothing on this site is paid for or sponsored, and the friends' buttons are friends, not an arrangement. Were that ever to change, it would be labelled on the spot.

changes, law, and where to write

This page changes when the site does; the date at the top says when it last did. Carrying on using the site after that is how you accept the new version — there is no other mechanism, and no notification, so the date is worth glancing at.

These terms are read under the law of Andorra, and its courts have jurisdiction — except that if you are a consumer somewhere else, you keep the protection of your own country's mandatory law and can still go to your own local courts.

Anything at all, including everything above: hello@chocokale.cc.