Privacy Policy
Our Privacy Promise
This policy explains, in plain English, what Mystery Hunch collects, why we use it, and which service providers process it.
What You Should Know
- You can play without signing up. We do not know who you are.
- We measure anonymously how the game is played (for example, which rooms are visited and whether a case is solved) to make the cases better.
- Your settings and progress stay in your own browser.
- Feedback and your email address are only collected if you open the feedback form and choose to fill it in.
Controller
Ruslan Sayfutdinov, Altenbacher Weg 18, 42799 Leichlingen, Germany
ruslan.sayfutdinov@gmail.com
Data We Process
Server logs
When you open the website, our hosting provider Hetzner Online GmbH (Gunzenhausen, Germany; servers in Germany) processes technically necessary data: IP address, time of the request, requested file, and browser identifier. We need this to deliver the website and protect it from abuse. Logs are deleted after 14 days.
Anonymous gameplay statistics
We use Umami Cloud (Umami Software, Inc.) with data stored in the EU. Umami sets no cookies and builds no profiles. It records page views and game events such as “case started”, “room entered”, “hint used”, “accusation made”, play time, number of clues found, and your answers to the two quick questions after a case. Your IP address is only used briefly to recognize a visit and is not stored. This data cannot be traced back to you as a person.
Storage in your browser
Your settings (style, sound) and whether you have seen the short tutorial are saved in your browser's local storage. This data never leaves your device. It is necessary for the function you requested (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.
Feedback form
If you tap the feedback button after a case, a form hosted by Tally (Tally BV, Belgium, data stored in the EU) opens. Your result (solved, stars, time, clues found, hint used, style) is passed to the form along with anything you choose to write. If you enter your email address and agree, we use it only to tell you about new cases.
Fonts
All fonts are loaded from our own server. No connection to Google or other font services is made.
Why We Process Data
Our legal bases under the GDPR depend on the purpose:
- Legitimate interests (Art. 6(1)(f)): delivering and securing the website, and anonymous statistics to improve the game. We balance these interests against your rights.
- Consent (Art. 6(1)(a)): the feedback form and emails about new cases. You may withdraw consent at any time by email.
Service Providers
- Hetzner Online GmbH: hosting of the website (servers in Germany).
- Umami Software, Inc.: anonymous gameplay statistics (EU data storage).
- Tally BV: feedback form (EU data storage).
We may update this list when our providers change. Material changes will be reflected on this page.
Retention
Server logs are deleted after 14 days. Anonymous statistics are kept as long as they are useful for improving the game. Feedback and email addresses are kept until you ask us to delete them or withdraw your consent, or until Mystery Hunch is discontinued.
How We Protect Data
All connections use HTTPS/TLS. We collect as little as possible. No system can guarantee absolute security, but we use technical and organizational measures appropriate to the risk.
Your Rights
Subject to the GDPR's conditions and exceptions, you may:
- Access your personal data and receive a copy
- Correct inaccurate or incomplete data
- Request erasure of your data
- Restrict processing or object to certain processing
- Receive data you provided in a portable format
- Withdraw consent without affecting earlier lawful processing
- Complain to a competent data-protection authority
Contact
For privacy questions or to exercise your rights, contact ruslan.sayfutdinov@gmail.com.
Last updated: October 16, 2026