Who is responsible?

The controller is Chatano AB, operating the Mood For Games studio. For privacy questions or rights requests, emailhello@moodforgames.com. We do not currently appoint a data protection officer.

What we process and why

• Messages you send by email: your email address, name/signature, message, attachments, and related correspondence, so we can reply to questions, press requests, partnerships, or business enquiries. The legal basis is our legitimate interest in responding to an enquiry and, where relevant, taking steps at your request before a contract.
• Technical delivery data: our hosting and server infrastructure may process an IP address, browser/device information, requested URL, timestamp, referrer, and status code in technical and security logs. This is used to deliver and protect the site, based on legitimate interest. Logs should be configured to be deleted or anonymised when they are no longer needed and no later than 30 days, except where a longer period is required for a security investigation or legal obligation.
• Optional anonymous analytics: after consent, we process the page path, the first page viewed in the browsing session, the referring website’s domain and a broad traffic channel (direct, search, social, or referral), the domain of outbound links you click, how far down the page you scroll (25/50/75/100%), a rough time-on-page range, a coarse device class (desktop, tablet, or mobile, worked out in your browser — the full user agent is not sent) and screen-size range, a random session identifier, browser locale, and event time to understand site usage. We do not use analytics cookies, persistent visitor identifiers, full referrer URLs, IP addresses as event properties, or cross-project identity matching. The legal basis is consent.

Cookies and browser storage

We do not use advertising or analytics cookies. The site uses one first-party browser-storage entry, mfg_consent_v1, to remember your optional-media and anonymous-analytics choices, plus session storage for a random analytics session identifier after consent. Neither value is used to identify or profile you, and the session identifier disappears when the browsing session ends.

YouTube trailers and Steam widgets are blocked until you choose “Allow optional media” or enable that category in Privacy settings. Once loaded, those providers may receive your IP address and device/browser data and may set their own cookies. They may process data outside the EEA under their own privacy policies. You can withdraw permission at any time using “Privacy settings” in the footer; withdrawing stops future loads, but does not erase data already processed by a provider.

Who receives data?

Email messages are handled by our email provider and may be accessed by the studio team. Technical delivery and optional analytics data are handled in our Azure-hosted infrastructure in the EU. Optional media is handled by YouTube or Steam only after your permission and when the media is loaded. We do not sell personal data or use it for targeted advertising.

How long do we keep it?

We keep correspondence only for as long as needed to manage the conversation and the studio’s legitimate business records, normally no longer than 24 months after the last substantive contact, unless a longer period is needed for a contract, legal claim, or legal obligation. Technical logs follow the shorter period described above. Raw anonymous analytics events are retained for no more than 90 days; aggregate counts may be retained longer. You can ask us to review or delete information at any time, subject to legal exceptions.

Your rights

Subject to the GDPR, you may request access, correction, deletion, restriction, portability, or object to processing. Where processing is based on consent, you may withdraw it at any time. Email a request to the address above; we may need information to verify your identity. You also have the right to complain to a data protection authority, especially in the EU country where you live, work, or believe an infringement occurred. The European Data Protection Board maintains a list of national authorities at edpb.europa.eu.

Changes to this notice

If the site starts using accounts, forms, newsletters, analytics, advertising, payments, or other services, this notice and the consent choices will be updated before those features are introduced.