Privacy Policy
Last updated: 20 October 2026
The short version
- Our games don't collect anything about you. There are no accounts, analytics, ads or trackers, and nothing is sent to us.
- Steam features (achievements, friends, co-op) are run by Valve under the Steam Privacy Policy.
- Our website has no cookies, analytics or ads.
- If you write to us, we use your name and email only to reply. We never sell or share it.
- You can ask us to show, correct or delete what we have about you at any time.
1. Who we are
Black Ribbon Studios ("we", "us") is an independent game studio. This policy covers our games, including Find the Four Leaf Clover, and our website, blackribbonstudios.com. Where data protection law uses the term, we are the "controller" of the personal data described here.
You can reach us about privacy through the contact form or at [email protected].
2. Our games
Our games are sold and run through Steam. They have no accounts or sign-in of their own, and they include no analytics, advertising, tracking or crash-reporting tools. They don't send any data about you or how you play to us.
Saves and settings stay on your computer
Your progress and settings are saved in the game's folder on your own computer. For Find the Four Leaf Clover that's %APPDATA%\Find the Four Leaf Clover on Windows and ~/Library/Application Support/Find the Four Leaf Clover/ on a Mac. This includes the player name used in co-op, if you type one. We never receive these files. You can delete them at any time, which resets the game.
Steam features
When Steam is running, the game uses Valve's Steamworks tools for Steam features. To do this, the game reads some of your Steam information on your own computer:
- Your Steam ID and Steam name, to show your name to friends you play with.
- Your Steam friends list and their online status, to show which friends are online or hosting a game you can join. This stays on your computer.
- Achievements and stats, which are saved to your Steam account by Valve.
- Rich presence: your Steam friends can see a line such as "Clover hunting with friends (2/4)" next to your name while you play.
- Lobbies, invites and connections for co-op (see the next section).
Valve processes this data under the Steam Privacy Policy. As the developer, Valve gives us reports in Steamworks, such as sales, wishlists, refunds, playtime and the share of players who unlocked each achievement. We use these only to understand how our games are doing and to improve them. We don't combine them with other data to identify you.
Purchases, payments and refunds are handled entirely by Steam. We never see your payment details.
3. Playing with friends (co-op)
Co-op connects your game directly to your friends' games. No server of ours is involved.
Over Steam
Hosting creates a friends-only Steam lobby, and the connection goes through Valve's relay network. Your IP address is not shown to the other players. The players in your game see your Steam name (or the name you typed) and what you do in the game.
Without Steam (join codes and local network)
- Direct connections share IP addresses. The host's computer and the joining computers can see each other's IP addresses, as with any direct connection over the internet. A join code contains the host's IP address, so only give yours to people you trust.
- Your router (UPnP). While you host, the game asks your router to open UDP port 47810 so friends can connect. It closes the port again when you stop hosting.
- Your local network. To find games on the same network, the game sends a small announcement that other computers on your network can see.
- Finding your public address. If your router won't open the port, the game asks ipify.org for your internet address so it can make a join code. Like any website you visit, ipify sees your IP address when the game asks.
4. Our website
No cookies, analytics or ads
This website doesn't set cookies, run analytics or show ads. It doesn't track you across sites.
Things saved in your own browser
The clover hunt at the top of the homepage saves your best time in your browser's local storage, so it's there next time you visit. The site also remembers small display choices, such as which games you filtered. It stays on your device and is never sent to us. Clearing your browser's site data removes it.
Hosting (Cloudflare)
The site runs on Cloudflare. To deliver pages and protect the site against attacks, Cloudflare processes technical data such as your IP address, browser type and the page you asked for, under the Cloudflare Privacy Policy. We don't use this data to identify visitors.
Fonts (Google Fonts)
The site's fonts load from Google Fonts. When a page loads, your browser connects to Google's servers, so Google receives your IP address. Google says it doesn't use Google Fonts requests to build profiles or target ads (see the Google Fonts privacy FAQ).
Links to other sites
Links to Steam, YouTube, itch.io and other sites take you to services with their own privacy policies.
5. When you contact us
If you use the contact form or email us, we receive the following:
| What | Why |
|---|---|
| Your name and email address | So we know who wrote and can reply to you. |
| Your message and the topic you picked | So we can answer it. |
| The page you sent it from, the time, and your country (from your IP address, worked out by Cloudflare) | To understand your message in context and to spot spam. Your IP address itself isn't included in the message. |
Your message is passed through Cloudflare and delivered to our studio inbox at Google (Gmail). We use it only to answer you and to deal with what you wrote about, for example to fix a bug you reported. We don't add you to a mailing list or send you marketing.
We rely on our legitimate interest in answering messages people send us, or on taking the steps you asked for. We keep messages as long as we need them for the conversation and any follow-up. We delete them within two years of our last contact, sooner if you ask, unless the law requires us to keep them.
The form includes simple spam checks, a hidden field and a timer. These don't save anything about you.
6. Who else is involved
We don't sell, rent or trade personal data, and we don't share it for advertising. The only other companies that handle data for the purposes above are:
- Valve Corporation (Steam): store, purchases, Steam features and co-op connections over Steam.
- Cloudflare, Inc.: website hosting and security, and delivery of contact-form messages and email to [email protected].
- Google LLC: website fonts, and our email inbox (Gmail).
- ipify.org: only when you host co-op without Steam and your router won't open the port (see section 3).
We may also disclose information if the law requires it, for example in response to a valid court order.
7. International transfers
These companies may process data in countries other than yours, including the United States. Where the law requires it, these transfers are covered by safeguards such as the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
8. Your rights
Depending on where you live (for example under the GDPR in the EU, EEA and UK, or under privacy laws in US states like California), you have the right to:
- find out what personal data we have about you and get a copy of it,
- have it corrected or deleted,
- object to how we use it, or ask us to limit it,
- get it in a format you can take elsewhere,
- complain to a data protection authority. In the EU and EEA, that's the authority in the country where you live or work.
To use any of these rights, contact us. We'll answer within one month and won't treat you differently for asking. Our games keep your data on your computer and Steam, so the only data we usually hold about you is any message you've sent us. For data held by Steam, see your Steam account settings and the Steam Privacy Policy.
9. Children
Our games don't collect personal data from anyone, including children. Our website isn't aimed at children, and we don't knowingly collect personal data from children under 16 through it. If you think a child has sent us their details, let us know and we'll delete them.
10. Security
We keep what we hold to a minimum. It's protected by encrypted connections (HTTPS) and by the security of the services above, and only we can get into our accounts. No system is completely secure. If something goes wrong that affects your data, we'll tell you and the authorities where the law requires it.
11. Changes to this policy
If our games or website start handling data differently, for example a new game with online features, we'll update this page and change the date at the top. If a change is significant, we'll also say so on the website or in the game's Steam news.
12. Contact
Questions about this policy or your data? Get in touch: