Privacy

About us

This website, mbkstudio.games, is run by MBK Studio. MBK Studio is the controller of the personal data processed when you visit it. This means that we decide for what purposes and by what means your data is processed, and that we carry the responsibility for everything described on this page. You can reach us on any privacy matter at privacy@mbkstudio.games. This address is set aside so that your questions, requests and feedback go straight to the people who deal with these matters.

This page explains how your personal data is processed when you visit this website. Our aim is to tell you, in plain language and without tiring you with a long and hard-to-follow legal text, what happens to your data, why we do it and what rights you have. We respect your privacy, and we believe that the data of everyone who visits us deserves careful handling. That is why we review this page regularly and keep it one click away from every page of the website.

This page applies only to this website. Each of our games has its own privacy notice, shown in the game, and the services this website links to have their own; this page does not replace them. It does not remove or limit any right that the law gives you. If there is a difference between a statement on this page and a right that the law gives you, the one in your favour always applies.

Principles

When we process your data, we follow the basic principles of the GDPR, the European Union's General Data Protection Regulation. These principles are not only a legal requirement but also a summary of how we want to treat the people who visit us.

We process your data only when we have a valid legal basis, and we do not use it in ways that are unexpected, misleading or harmful to you. We collect data for specified, explicit and legitimate purposes, we do not ask for data that is not truly necessary for a purpose, and we keep data only as long as its purpose requires. We protect data against unauthorised access, loss and damage with appropriate measures, and we take responsibility for complying with these principles.

We believe that the best way to put these principles into practice is to treat privacy as part of the design from the start. This website was built to work without cookies and without storing anything in your browser, and you can read all of it without telling us who you are.

Your visit

This website has no accounts, no sign-in and no forms. It does not use cookies and stores nothing in your browser, so it does not ask for your consent to them.

When your browser asks for a page, it sends us the technical information that every visit to a website involves. We process this information only to deliver the pages you ask for and to keep the website working and secure. This relies on our legitimate interest in running and protecting the website (GDPR, Article 6, paragraph 1, point f). We weigh this interest carefully against your interests, rights and reasonable expectations, and we keep what we do proportionate. You can always object to a use that is based on our legitimate interest; we explain how in "Your rights".

Counting visits

To understand how the website is used, for example which pages people read, which links bring them here and roughly how long a visit lasts, the website counts its visits. When a page opens and when you leave it, your browser sends us a short note: the page, the website you came from if your browser tells us, and how long the page was in view. We work out the country from your IP address and do not keep the address itself. We also note whether the page was opened on a computer, a phone or a tablet.

So that one person's visits on the same day are counted once, your IP address and your browser's description are turned into a code with a key that changes every day. Each day's key is deleted when the day ends; after that, the code can no longer be linked to you or to your visits on other days. We use these counts only as statistics about the website as a whole: we do not build profiles of visitors and do not follow you on other websites. The counting uses no cookies and stores nothing in your browser. It relies on our legitimate interest in understanding and improving the website (GDPR, Article 6, paragraph 1, point f), and you can object to it as described in "Your rights".

Purposes

We use the technical information of a visit to show you the pages you ask for, to keep the website running reliably, to find and fix technical problems and to protect the website and its visitors against abuse and attacks. We count visits, as described in "Counting visits", to understand how the website is used and to improve it. If we want to use your data for a new purpose that is not compatible with what is described here, we will update this page before doing so.

We also process data to reply to you when you write to us, to carry out your requests and to comply with our legal obligations. In such cases too, we process only the data that the purpose requires, and only to the extent required.

When you write to us

When you write to one of the addresses on our contact page, we use your email address and the content of your message only to reply to you, to carry out your request and, where necessary, to be able to show that we did so. This relies on our legitimate interest in answering the people who contact us. We recommend that you do not share more personal information in your message than necessary; just enough for us to understand your request is usually enough.

We keep our correspondence until your request is concluded and afterwards only for a reasonable period, for example so that we can help you if you have a new question about the same matter. When this period ends, we delete it. We do not contact you by email on our own initiative; we only reply to a correspondence that you started. Do not trust messages that claim to come from us and ask you for a password or other sensitive information.

Other services

This website links to our channels on YouTube, TikTok, Instagram and Bluesky, and later to the stores where our games are sold. When you follow such a link, you leave this website; the other service's own terms and privacy notice apply there, and we are not responsible for them.

Security

We take appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, alteration and disclosure. They include limiting access to data to what is needed, keeping our software up to date, testing changes before releasing them and watching for unusual activity. We also see keeping little data as a security measure: data that is never collected cannot be lost or misused.

No system is completely secure, but we work to keep your data safe. If a security incident that could affect your data takes place, we assess it quickly, take the steps needed to limit its effect and make the notifications that the law requires. If you think you have found a security vulnerability in this website, please write to security@mbkstudio.games before sharing it publicly.

Keeping data

We keep the technical information of a visit only for as long as is needed to deliver and protect the website, and then we delete it. The counts of visits no longer relate to anyone once the day's key is deleted; we keep them for up to 13 months. Correspondence is kept as described in "When you write to us". Where the law requires us to keep certain information for a certain period, or where it is necessary for the establishment, exercise or defence of a right, we keep only the information that is needed and only for as long as it is needed.

Your rights

You can ask us whether we process your data and, if we do, for a copy of it and for information about why we process it, how long we keep it and your rights. You can ask for wrong data about you to be corrected, for your data to be deleted, and for its use to be restricted, for example while we check an objection. You can object, on grounds relating to your particular situation, to a use that is based on our legitimate interest; when you object, we stop that use unless we have compelling legitimate grounds that override your interests.

Using your rights is free of charge. We do not make decisions about you that are based only on automated processing. The technical information of a visit does not include your name, so we may not be able to tell which of it relates to you; if so, we tell you, and you can help us by giving details of your visit. Once a day has ended, its counts of visits cannot be linked to anyone.

Requests

To use a right, write to privacy@mbkstudio.games from any email address and tell us what you would like us to do; one request can cover more than one right. Before carrying out a request, we may ask for the information needed to make sure that nobody else can see or change your data.

We reply to requests within one month. If a request is complex, or if there are many requests at the same time, we may need to extend this time; in that case, we tell you within the first month and explain the reason. If we cannot do what you ask, we explain the reason. We keep a record of requests and our replies, only so that we can show that we respect your rights, and only for as long as needed.

Changes

We may update this page from time to time, for example when the website changes. The version above shows the date of the latest change; please check it now and then.

Contact

If you have questions, suggestions or feedback about this page, your data or privacy in general, write to privacy@mbkstudio.games. For anything else, our contact page has the right address. Thank you for visiting us and for taking the time to read this page.