Privacy policy

ContentaSoft AB runs Contenta Games and is responsible for your personal data (details above). Questions about your data: bruno@contenta-software.com. We have no data protection officer.

What we handle, why, and for how long

• Your account. Your email address, your language and, if you sign in with Google, your Google account ID, plus when the account was made and when you last signed in. We use it to give you an account and access to the games. Legal basis: the contract with you. We keep it until you delete your account.
• Signing in. When you ask for a sign-in link we store your email, the IP address of the request and the link (as a one-way code) for one day, to deliver the link and to prevent abuse. Legal basis: our legitimate interest in a secure service.
• Your subscription and payments. We store your plan, its status, currency, renewal date and your Stripe customer number. Stripe, as the seller, handles your name, card, billing address, tax details and email for the payment, and sends you the receipt. Card details go straight to Stripe; we never see them. Stripe tells us your email, plan, status, currency, renewal date and customer number. Legal basis: the contract, and our legal duty to keep accounting records. Our records of Stripe’s payouts and of your subscription are kept for seven years, as the Swedish Bookkeeping Act requires. The rest of the subscription data is deleted when you delete your account.
• Emails about your account. Sign-in links, the purchase confirmation with the terms, and notices about price or terms changes. Legal basis: the contract.
• The newsletter. If you sign up: your email, language, and the time and IP address of your sign-up and of your confirmation. Legal basis: your consent, which you can withdraw at any time by unsubscribing in any email. A sign-up that is not confirmed is deleted after 30 days. If you unsubscribe we keep your email address and the time, only so that you are never added again without a new confirmation from you.
• Usage statistics, without cookies. Which pages and steps are used (for example "pricing page viewed" or "checkout started"), error messages, your language, your country (worked out from your IP address) and the game concerned. The IP address is not stored; only a code derived from it that changes every day, so visits cannot be linked over time. We use it to find errors and improve the service. Legal basis: our legitimate interest. Kept for 13 months. You can object (see your rights below).
• Web server logs. Our web host records each request (IP address, time, page, browser) for security and operation, for the time the host keeps its logs.
• Game progress. Games store your progress only in your own browser. It is never sent to us, and clearing the browser's data removes it.

Cookies

We use only cookies that the service needs to work, and no advertising or tracking cookies.

• gs_session: keeps you signed in; up to 90 days, renewed when you use the site.
• gs_csrf: protects our forms against forgery; until you close the browser.
• gs_oauth: carries the security check while you sign in with Google; 10 minutes.
• language: remembers your language choice; 30 days.
• geo_cc: your country, to show the right currency; 1 day.

Who else is involved

• DreamHost (hosting, database and email sending) processes data on our behalf.
• Stripe (through Link) is the seller of your subscription and a controller in its own right for your payment, VAT and receipts, with its own privacy policy. It shares with us only what we need to give you access.
• Google handles the sign-in only if you choose to sign in with Google, under its own privacy policy.

We do not use advertising networks or analytics services, we do not sell your data, and the pages load their fonts from our own servers, so your browser contacts no other company unless you pay (Stripe) or sign in with Google. Some of these providers are in the USA. Where personal data is transferred outside the EU and EEA, it relies on the EU–US Data Privacy Framework or on the EU's standard contractual clauses.

Your rights

You can ask us for a copy of your data, have it corrected, restricted or deleted, receive it in a usable format, or object to how we use it. Where you have given consent you can withdraw it at any time. You can delete your account yourself under Delete account on your account page: that cancels your subscription, deletes your account and your newsletter sign-up, and removes the rest of the data above except what the law requires us to keep, such as payment records. For anything else, email us; we answer within one month. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).

Children

Subscribing requires that you are at least 18 or have a parent's or guardian's consent. We do not knowingly collect personal data from children without it. The free demos can be played without an account.

Automated decisions and changes

We make no decisions about you by automated means that have legal or similarly significant effects. If we change this policy in a way that matters to you we will tell you on the site.

Last updated 29 October 2026.