This Privacy & Cookie Policy explains how Mystic Forge Entertainment B.V., located at Europlaan 40, 3526 KS Utrecht, The Netherlands (“Mystic Forge,” “we,” “our,” or “us”), collects, uses, and protects your personal data when you play our games or interact with our website. If you have any questions or concerns about your data, contact us at: info@mysticforge.com

1. What This Policy Covers
This notice outlines:

  • What personal data we collect
  • How and why we use it
  • What rights you have
  • How to exercise them

We are committed to processing your data lawfully, fairly, and transparently in accordance with privacy regulations including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

2. Data We Collect
We collect personal data in the following ways:

a. From Game Platforms

  • Epic Games Store: We may receive your email address—only if you give consent to share it.
  • Consoles & Mobile Stores (Xbox, PlayStation®, Nintendo Switch™, Apple Arcade®, App Store®, Google Play/Play Pass):
    ➤ We do not receive any personal data.

b. From Gameplay Analytics
When you play a Mystic Forge game on PC:

  • We may collect analytics data via tools like Google Analytics and Unity Analytics (aggregated, non-identifying).
  • We or our development partners track non-personal game metrics (e.g., playtime, achievements, items used) to support gameplay features. This data is not personally identifiable.

c. From Our Website
When you visit our website, we collect:

  • Website usage analytics (e.g., traffic source, page views)
  • A/B testing data to improve content and usability

3. How We Use Your Data

Purpose

  • Send newsletters about Mystic Forge games
  • Analyze gameplay and usage patterns
  • Optimize website performance and layout

Data Used

  • Email address
  • In-game analytics
  • Web analytics and A/B test data

Legal Basis

  • Consent (You can withdraw anytime)
  • Legitimate interest
  • Legitimate interest

We do not use personal data for ad targeting.

4. Who We Share Data With
We only share data with trusted partners who process data on our behalf, under strict contractual agreements:

  • Campaign Monitor – Email newsletters Privacy Policy
  • Google Inc. – Website analytics (Google Analytics) Privacy Policy
  • Wingify Software Pvt Ltd – A/B testing via VWO Privacy Policy
  • Unity Technologies – In-game analytics Privacy Policy (Unity is an independent data controller under GDPR.)

We may also disclose data if required by law, in the context of a merger or acquisition, or to enforce legal rights—always under conditions that respect your privacy.

5. Data Storage & Retention

  • Newsletter subscriber data is stored until you unsubscribe.
  • Analytics and A/B testing data is retained for up to 5 years.
  • Data is stored securely in compliance with applicable regulations.

6. Data Security Measures
We implement appropriate technical and organizational safeguards:

  • Access to data is limited to authorized personnel only
  • Password-protected systems and Two-Factor Authentication (2FA)
  • Our processors are required to notify us of any security breaches

7. International Data Transfers
Your data may be transferred outside your country. If you are in the EU/EEA or UK, this may include transfers to jurisdictions without equivalent data protection. In such cases, we ensure:

  • Use of Standard Contractual Clauses (SCCs) or other approved safeguards
  • Only transferring data when necessary You can request a copy of these safeguards via info@mysticforge.com.

8. California Residents (CCPA)

  • We do not sell your personal data.
  • Our website does not currently respond to Do Not Track (DNT) signals.

9. Your Rights
Where applicable, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Restrict or object to processing
  • Receive a copy of your data (portability)
  • Withdraw consent (for newsletter/email) at any time

To exercise any of the above rights, contact us at: info@mysticforge.com We will respond within 4 weeks.
EU residents may also lodge a complaint with their national data protection authority.

10. Children’s Privacy
We do not knowingly collect personal data from players under 16 years old. Some of our games are rated for ages 16+ (PEGI, ESRB, etc.). If you believe we’ve collected data from a minor, please contact us so we can delete it.

11. Cookies & Tracking Technologies
We use cookies and similar technologies for functionality and performance:

Cookie: _ga, _gid, _ gat – Duration: 1 min – 2 years – Provider: Google Website trafficanalysis
Cookie: _vwo_uuid_ v2- Duration: 7 months – Provider: WingifyA/B testing tool

You can manage or disable cookies via your browser settings. EU visitors are presented with a cookie consent banner to opt in/out of non-essential cookies.

12. Updates to This Policy
We may update this notice from time to time. The most current version
will always be available at: www.mysticforge.com/privacy-policy