01Who is responsible?
MERCANWORKS OÜ, Paavli tn 5a/1, Põhja-Tallinna linnaosa, Tallinn, Harju maakond, 10412, Estonia, registry code 17413775, is the controller for personal data described in this notice. Contact us at info@mercanworks.com. This notice covers our studio website and enquiries. Each game also has its own privacy notice linked from its game page.
02Data processed when you visit
Our hosting and delivery provider, Cloudflare, processes connection and request information such as IP address, browser information, requested URL, time and security events to deliver and protect the website. We do not add advertising pixels, behavioural analytics, session recording, social embeds or third-party video players. Fonts and game images are hosted with the site.
03When you contact us
If you choose to email us, we process your email address, the name you provide, your message and attachments to answer you. For support, this may include a game version, device type and diagnostic information you voluntarily send. Please omit passwords, full card numbers and unnecessary sensitive information. Clicking an email link opens your own email application; no message is submitted through this website.
04Purposes and legal bases
We rely on our legitimate interests in delivering a secure website and responding to general correspondence, after considering your rights (Article 6(1)(f), GDPR (EU) 2016/679). Where an enquiry concerns a contract or steps you request before a contract, Article 6(1)(b) applies. Legal duties may require processing under Article 6(1)(c). If a future optional feature requires consent, we will explain it and request consent before enabling that processing. Browsing this website is not consent to unrelated processing.
05Browser preferences
The language is selected through the page URL. If you use the motion control, a sessionStorage preference named mw-motion remembers that choice for the browser tab. It is not sent to us and disappears when the browsing session ends. Your operating system’s reduced-motion setting is also respected. See the cookies and storage notice for details.
06Recipients and international transfers
Access is limited to people who need it to handle your enquiry, our hosting and email service providers, and authorities or professional advisers where legally required. Cloudflare operates internationally; processing may take place outside the EEA. Where GDPR requires safeguards, transfers must rely on an applicable adequacy decision or standard contractual clauses and any necessary supplementary measures. You can request information about relevant safeguards at info@mercanworks.com. See Cloudflare’s privacy policy and data processing addendum. We do not sell your personal data.
07How long data is kept
We keep correspondence for as long as needed to deal with the request and any related follow-up, dispute or legal obligation. Retention depends on the nature of the enquiry and applicable limitation and record-keeping periods. Hosting and security data are subject to the provider’s service retention arrangements; we do not maintain a separate visitor analytics database. Browser preferences remain only for the session. You may ask us which retention criteria apply to your data.
08Your rights
Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You may withdraw any consent at any time without affecting earlier lawful processing. Write to info@mercanworks.com; we may request proportionate information to verify your identity. We normally respond within one month. If complexity or the number of requests requires up to two additional months, we will explain this within the first month. We do not use website data to make solely automated decisions with legal or similarly significant effects.
09Children
The website does not create player accounts or request dates of birth. A parent or guardian can contact us about a child’s information. Game age ratings, advertising and age-related controls are product-specific and are explained in the relevant game notice. We do not treat a store age rating as permission to process a child’s personal data.
10Complaints and updates
You can complain to Andmekaitse Inspektsioon (AKI), Estonia’s data protection supervisory authority, or to the competent authority in the EEA country where you live or work or where an alleged infringement occurred. You do not have to contact us first to exercise your GDPR complaint rights. This notice will be updated when our actual processing changes; the date above identifies the current version.