Legal Privacy notice
Website privacy notice
How this website handles information about your visit. The Choke Point app has its own privacy policy.
The short version
- No accounts, forms, cookies or ads. This site never asks who you are, sets no cookies, shows no ads and doesn’t track you across other websites.
- Anonymous, aggregate analytics. Cloudflare Web Analytics counts page views and measures page speed without cookies. Opt out any time; Global Privacy Control and Do Not Track are honored automatically.
- Ordinary server logs. Our web host records each request (IP address, browser, time, page) to deliver and protect the site.
- We don’t sell your information or use it for advertising. Questions or requests go to legal@scarletaurora.com.
Who we are
chokepointtd.com is the official website for Choke Point: Tower Defense, a game for iPhone and iPad. It is run by Scarlet Aurora Interactive LLC, an independent game studio in Las Vegas, Nevada, USA (“Scarlet Aurora”, “we”, “us”).
Under data-protection laws such as the EU and UK General Data Protection Regulation (GDPR), Scarlet Aurora is the controller of the personal information this notice describes. You can reach us about privacy at legal@scarletaurora.com.
What this notice covers
This notice covers the pages at chokepointtd.com. It does not cover:
- The Choke Point: Tower Defense app. How the game handles purchases, the Intel wallet, optional gameplay analytics and Game Center is set out in the Choke Point privacy policy.
- Other websites we link to, including our studio site, scarletaurora.com (where the support pages live), Instagram, X and Apple’s App Store. Their own notices apply there (see section 7).
What we collect
We built this site to collect as little as possible. It has no accounts, sign-ups, contact forms, comments, cookies or advertising, and it uses nothing that follows you from site to site. Two things do happen when you visit.
Server logs
Every website runs on a server that records the requests it receives. Our web host, VeeroTech Systems, LLC, logs each request to this site with:
- your IP address;
- the date and time;
- the page or file requested, and whether it was delivered;
- the page that linked you here (the referrer), if your browser sends it;
- your browser’s user-agent string, which names your browser and operating system.
The host’s control panel also turns these logs into aggregate traffic reports (AWStats, Webalizer and Analog), which can include the most frequent visiting IP addresses. They are produced by the host for every site it serves; we don’t use them to identify or track anyone.
Cookieless analytics
To see how many people visit and whether pages load quickly, we use Cloudflare Web Analytics, unless you opt out (see section 4). When a page loads, a small script from Cloudflare (static.cloudflareinsights.com) measures it and sends a report to cloudflareinsights.com with:
- the address of the page, and of the page that referred you;
- how long the page took to load and settle (page-load timing and Core Web Vitals);
- how the page was opened, for example by a link, a reload or the back button.
As with any request on the web, Cloudflare also receives your IP address and user-agent string, from which it reports your country, browser, operating system and type of device in aggregate.
Cloudflare Web Analytics doesn’t use cookies or local storage to recognize you. Cloudflare states that it doesn’t fingerprint visitors or track them across websites, and that Web Analytics doesn’t collect or use visitors’ personal data. What we see is totals and trends, such as page views per day or visits by country, never a record of an individual visit.
Email you send us
If you write to us, we receive your email address, your message and anything you attach, and we use them to reply.
What we don’t collect
- No cookies. This site doesn’t set any.
- No local storage, except one entry saved in your browser if you press “Opt out of analytics”. It stays on your device; we never receive it.
- No forms, accounts or mailing list. The site never asks for your name or email address.
- No advertising or social trackers. There are no ad networks, retargeting pixels or social-media widgets. Instagram and X links are plain links; nothing from either loads until you follow one.
- No third-party fonts, video or embeds. Fonts, images and gameplay video come from chokepointtd.com itself. The analytics script is the only thing a page loads from another company.
Your analytics choices
Analytics is optional, and any one of these turns it off:
- The control below. It saves your choice in this browser, and the analytics script won’t load on any page of this site from then on.
- Global Privacy Control or Do Not Track. If your browser sends either signal, we treat it as an opt-out automatically, on every page.
- Turning off JavaScript or using a content blocker. The analytics script can’t run without JavaScript.
Analytics in this browser
Off. JavaScript is turned off, so the analytics script can’t run and nothing is measured. There’s nothing to opt out of.
Checking this browser…
Your choice is stored only in this browser, as one local-storage entry that is never sent to us. It applies to this site on this device; clearing your browsing data resets it. A Global Privacy Control or Do Not Track signal from your browser turns analytics off automatically.
Opting out changes nothing else: every page works the same. Server logs are still created, because a website can’t be delivered without them.
How we use it, and why
We use information only for the purposes below. If you are in the European Economic Area (EEA) or the UK, the last column is the legal basis the GDPR asks us to state.
| Information | What we use it for | Legal basis (EEA and UK) |
|---|---|---|
| Server logs | Delivering pages, keeping the site secure, fixing errors and stopping abuse | Our legitimate interest in running a secure, working website (Art. 6(1)(f)) |
| Analytics measurements | Counting visits and page views in aggregate, seeing which pages help people, finding slow pages | Our legitimate interest in understanding, in aggregate, how the site is used so we can improve it (Art. 6(1)(f)). You can object at any time by opting out. |
| Email you send us | Answering you and keeping a record of the conversation | Our legitimate interest in answering messages (Art. 6(1)(f)), or steps you ask us to take (Art. 6(1)(b)) |
| Your opt-out choice | Remembering not to load analytics | Stored only on your device, at your request; we never receive it |
Where we rely on legitimate interests, we have weighed them against your rights: the information is minimal, it is what you would expect any website to process, and you can object. You don’t have to give us any information, but a website can’t be delivered without the server logs.
We don’t use any of this information for advertising or profiling, we don’t make automated decisions about you, and we don’t combine it with other data to work out who you are.
Who we share it with
We don’t sell personal information, and we don’t share it with anyone for their own marketing or advertising. We disclose it only to service providers that process it for us under contract, and only as they need:
| Provider | What it does for us | Based in |
|---|---|---|
| VeeroTech Systems, LLC | Hosts this website and its server logs | United States |
| Cloudflare, Inc. | Provides Cloudflare Web Analytics | United States |
| Apple Inc. | Hosts our email (iCloud Mail), if you write to us | United States |
We may also disclose information when the law requires it (for example, a valid court order), to protect the rights, property or safety of our players, the public or Scarlet Aurora, or to a successor if our business is ever sold or reorganized, in which case this notice keeps applying to the information it receives.
Links to other sites
This site links to our studio site (scarletaurora.com: support and the game’s privacy policy), to Instagram and X (@chokepointtd), and to Apple’s App Store and TestFlight. These are ordinary links: nothing from those services loads on our pages. When you follow one, that site receives what your browser normally sends, such as your IP address and the fact that you came from chokepointtd.com, and its own terms and privacy notice apply from there.
How long we keep it
- Server logs. Our host rotates its access logs automatically. Any copies we keep ourselves are deleted within 35 days, unless we need a specific log to investigate a security incident or abuse; then we keep it only until that is resolved. The host may keep its own operational and security logs, and the aggregate traffic reports described above, under its privacy policy.
- Analytics. Cloudflare keeps full-detail measurements for 7 days, then only a sample of about 10% to power longer-term reports. The reports we see are aggregate.
- Email. As long as we need it to deal with your message and any follow-up, and to keep a reasonable record of the conversation.
- Your opt-out choice. In your browser until you clear its site data or turn analytics back on.
Where it is processed
Scarlet Aurora and our service providers are in the United States, so information about your visit is processed in the United States, where data-protection law may differ from the law where you live. If you visit from the EEA, the UK or Switzerland, your browser sends it to us there directly. Cloudflare is certified under the EU-U.S. Data Privacy Framework and uses standard contractual clauses where needed; see its privacy policy.
Your rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you, and get a copy;
- have it corrected or deleted;
- restrict how we use it, or object to it, including to analytics, which you can do at once with the opt-out;
- receive it in a portable format, where that right applies;
- not be treated differently for using any of these rights.
To make a request, email legal@scarletaurora.com with the subject “Website privacy request”. It’s free. We answer within one month, or sooner where your law requires, and we’ll tell you if a complex request needs longer. Because this site never learns who you are, we may ask for details that let us find your information, such as your IP address and when you visited; aggregate analytics can’t be traced to anyone. Where your law allows, an authorized agent can make a request for you.
You also have the right to complain to a data-protection authority: in the EEA, the authority in your country (list of EEA authorities); in the UK, the Information Commissioner’s Office. We’d be glad of the chance to put things right first.
California and Nevada
California
Under the California Online Privacy Protection Act: section 3 lists the categories of personally identifiable information this site collects, and section 6 the categories of third parties we share it with. To review or ask us to correct your information, see section 10.
Do Not Track. We honor Do Not Track and Global Privacy Control: when your browser sends either signal, the analytics script doesn’t load. No third party collects personally identifiable information about your online activities over time and across different websites through this site, and we don’t disclose personal information to third parties for their direct-marketing purposes.
Nevada
We do not sell covered information as defined in Nevada Revised Statutes chapter 603A. Nevada consumers may still direct us not to sell covered information we have collected or may collect: send a request to our designated request address, legal@scarletaurora.com, with the subject “Nevada do-not-sell request”. We respond to verified requests within 60 days. The categories of information and third parties, the review process and the change process in this notice apply to Nevada consumers too.
Children
This site is for a general audience. It is not directed to children under 13, and we don’t knowingly collect personal information from children under 13. If you believe a child under 13 has sent us personal information, for example by email, contact legal@scarletaurora.com and we will delete it promptly.
Security
The site is served over encrypted HTTPS. It is a static site: there are no accounts, visitor databases or forms to break into. We limit access to our hosting and analytics accounts to the people at Scarlet Aurora who need it. No way of sending or storing information is completely secure; if a breach ever affects your personal information, we will notify you and the authorities as the law requires.
Changes to this notice
When we change this notice, we will post the new version on this page and update the effective date at the top. If a change is material, such as a new kind of information or a new service provider, we will also say so prominently at the top of this page when it takes effect. We have no mailing list, so we can’t notify you directly. Earlier versions are available on request.
This version took effect on September 23, 2026.
Contact us
- Company
- Scarlet Aurora Interactive LLC
- Location
- Las Vegas, Nevada, USA
- Privacy
- legal@scarletaurora.com
- Game support
- support@scarletaurora.com
For privacy questions about the game itself, see the Choke Point privacy policy.