Privacy
Privacy policy
What we keep about you, why, for how long, and what you can do about it, in plain words.
1. Who we are
Faluf is a game studio in Denmark. Danny Møller, trading as Faluf, is the data controller for faluf.com, stilhed.faluf.com and our concept pages (stormwatch.faluf.com, deepwater.faluf.com and sendline.faluf.com), and for what you send us.
- Address
- In our legal notice
- info@faluf.com
- CVR number
- Not registered yet
This policy covers our websites and what you send us by email. STILHED is not out yet. It will come with its own privacy notice, in the game and on this site, before anyone outside the studio plays it, playtests included. If you email us files from the game, such as a log, a screenshot or a save, section 5 covers them.
We have no data protection officer, because none is required for what we do.
2. The short version
- No cookies, no tracking and no ads. We never sell your data or share it for marketing.
- We count visits to our sites without cookies and keep only each day’s totals.
- We keep only what you choose to send us: the messages you write to us.
- Mail you send us is kept in our mailbox at Simply.com in Denmark.
- No machine decides anything about you: a person reads every message and writes every answer.
- This policy is for our websites. STILHED will get its own privacy notice before anyone outside the studio plays it.
3. Visiting our sites
Our sites set no cookies, store nothing on your device and load nothing from other sites: the fonts, videos and scripts all come from our own server.
Like every web server, ours uses your IP address to send you the pages you ask for. It does not store it.
We count visits, so we know which pages people read. Before a visit is counted, our server shortens your IP address to the network it belongs to (for example 192.0.2.0 instead of 192.0.2.17) and removes everything else that could identify you. To tell visitors apart within one day, the counter mixes the shortened address and the name of your browser with a random key that exists only in its memory and is replaced every night, so nobody can be followed from one day to the next, or from one of our sites to another.
We keep only each day’s totals: the number of visitors, page views and trailer plays; which pages were read and which addresses were not found; which sites linked to us, and the campaign name of a link, if it had one; and the kinds of device, browser, system and language, as families, never exact versions. These totals say nothing about any one person. We keep the totals; the lists of linking sites, campaign names and missing addresses go after 90 days. Your visit is not counted at all if your browser asks not to be tracked (Global Privacy Control or Do Not Track).
Basis: our legitimate interest in running working, secure websites and knowing which pages are read (GDPR Art. 6(1)(f)).
When a request to our server fails, for example because part of a site does not answer, the server’s own error log notes it so we can fix it: the time, the page asked for and your address shortened to its network, as above, but nothing about your browser and no cookies. The log is overwritten once it reaches its size limit.
5. Messages to us
When you write to info@faluf.com:
What we keep: your email address, your name if you give it, your message and any attachments, and our replies.
Why: to answer you, and to fix the problems you tell us about.
Basis: our legitimate interest in answering questions and improving our games and sites (GDPR Art. 6(1)(f)). Where your message is about an agreement you have with us, the contract (Art. 6(1)(b)).
How long: only as long as we need it to help you. We delete a conversation, attachments included, 24 months after its last message, or sooner if you ask us to.
Health details: if you tell us about your health, for example to ask for a setting for flashing light, we use it only to answer you and remove it when we have helped you. We only ever need to know which setting you need, never why.
We never add you to a mailing list because you wrote to us, and our replies never advertise anything.
6. How we sort messages
No AI reads or sorts your messages. A person reads every message and writes every answer.
If we ever let a model help sort or search messages, it will run on our own computer and send nothing to an outside AI service. It may tag a message’s topic and how urgent it is, but it will never answer you or decide anything about you. We will update this policy before it reads any message.
7. When you use your privacy rights
When you ask to see, correct or delete your data, or object to how we use it, we keep a record of your request and of what we did about it for 3 years after we have finished handling it, because we must be able to show that we handled it (GDPR Art. 6(1)(c), with Arts. 5(2) and 12).
8. Who else handles your data
- Simply.com A/S, Denmark, hosts our mailbox and sends our emails, under a data processing agreement that keeps the data in the EU and EEA.
Nobody else gets your data, unless the law requires it (for example the police with a court order). We never sell your data.
9. Transfers outside the EU and EEA
None. If we ever use a service outside the EU and EEA, we will name it here, with the safeguard we rely on: an adequacy decision or the EU’s standard contractual clauses.
10. Your rights
You can:
- see the data we hold about you, and get a copy of it;
- have it corrected;
- have it deleted;
- limit how we use it;
- get the data you gave us on the basis of your consent or a contract in a common, machine-readable format;
- withdraw a consent at any time, which does not affect what we did before;
- not be subject to a decision made by a machine alone.
Write to info@faluf.com. We answer within one month, free of charge. If a request is complicated, we may need two more months; then we tell you so within the first month, and why. To protect you, we may ask you to write from the same email address. If we can’t do what you ask, we say why, and you can complain (section 12).
11. Your right to object
You can object at any time to how we use your messages, which we do on the basis of our legitimate interest. We then stop and delete them, unless we have compelling reasons to keep them, such as a legal dispute. Reply DELETE to any of our emails, or write to info@faluf.com.
12. Complaints
You can complain to Datatilsynet, the Danish Data Protection Agency: Carl Jacobsens Vej 35, 2500 Valby, Denmark; dt@datatilsynet.dk; www.datatilsynet.dk. We would like to hear from you first, so that we can put things right.
13. Children
Our sites are about horror games and are not made for children. Anyone can still write to us, whatever their age. If a child writes, we use the message only to answer it, and delete it as section 5 says. If you are a parent or guardian and want something your child sent us deleted, write to info@faluf.com and we delete it.
14. Security
All our sites use HTTPS. Only Faluf’s owner can read your messages.
Mail you send us stays in our mailbox at Simply.com. We copy nothing about you anywhere else: not to other services and not to code repositories.
If a breach puts you at risk, we tell you and Datatilsynet.
16. Do you have to give us data?
No: you never have to give us anything to use our sites. To get an answer from us, we need an email address; everything else is optional.
17. Changes and versions
Every version of this policy is dated, and we keep the earlier ones: write to us to see one.
This version: 1.0, 1 November 2026.