Privacy Policy

We collect an email address to deliver the access code, order data and visit statistics. Analytics runs only with your consent and switches off in one click.

1. Who processes your data

The controller is Individual entrepreneur [Family name Given name], taxpayer number (INN) [ИНН], state registration number (OGRNIP) [ОГРНИП], registered at [registered address]. Questions about processing and deletion requests: [[email protected]].

This is a translation. The binding text is the Russian Политика конфиденциальности.

2. What is collected

Email address	Given at checkout. Used to send the access code and to answer support requests.
Account data	If you sign in with Google, GitHub, Microsoft or Telegram — the identifier and email address that service returns. We never receive or store passwords.
Order data	Date, amount, which case, payment status. Card details never reach us; the payment provider handles them.
Investigation progress	Which locations are open and which puzzles are solved, so you can stop and resume.
Technical data	IP address, device and browser type, pages visited, referring source. Collected automatically.

We do not collect, request or use special categories of data — health, beliefs, origin.

3. Why, and on what legal basis

To perform the contract: issue the access code, save progress, process refunds.
Support: answer your email and restore access. Legitimate interest.
Accounting: keep sales records. Legal obligation.
Analytics and stability: understand where visitors come from and which pages break. Your consent — and the only purpose you can switch off without losing access to the games.

4. Cookies and analytics

Strictly necessary	The investigation session and account sign-in. The site does not work without them, so they need no consent and cannot be switched off.
Analytics	Google Analytics and Yandex Metrica. They are not loaded at all until you agree.

Consent can be withdrawn at any time through the “Cookie settings” link in the footer of every page. The counters stop and their cookies are deleted.

There are no advertising or targeting cookies: we run no ads and pass nothing to ad networks.

5. Who receives data

We do not sell data and do not pass it to third parties for their own purposes. Only the services needed to fulfil an order receive anything:

Payment providers	Taking payment and issuing refunds. For international payments the provider acts as merchant of record in its own jurisdiction.
Mail service	Delivering the access code email.
Telegram	When the game runs inside Telegram or payment is made with Stars.
Google Analytics, Yandex Metrica	Traffic analytics. Only with your consent.
Cloudflare	Serving the site and images, attack protection. Processes IP addresses as part of delivering traffic.
Error monitoring	Receives technical crash reports. No investigation content is included.

The controller is established in Russia, so that is where data is processed. If you are in the European Economic Area or the United Kingdom, your data leaves that area when you use the service; placing an order is a request to perform a contract that cannot be performed otherwise.

6. How long we keep it

Orders and payment data — for the periods accounting and tax law require.
Account and progress — while the account exists. Deleted on request.
Support correspondence — up to a year after the matter is closed.
Analytics — the retention period of the service in question, and no longer than 26 months.

7. Your rights

You may ask what data we hold, correct it, request deletion, restrict processing, receive a machine-readable copy and withdraw consent. Write to [[email protected]] from the address the order was placed with; we answer within 30 days. In the EEA or the UK you may also complain to your national data protection authority.

Deleting an account does not cancel the duty to retain records of completed sales: that period is set by law and is not ours to waive.

8. Age

The service is intended for users aged 16 and over. We do not knowingly collect children's data. If such data has reached us, write and we will delete it.

9. Security

The site is served over HTTPS only. Card details and payment credentials never reach us. Database access is limited to those who need it to run the service.

10. Changes

A new version takes effect when published on this page; the date of the last change is shown at the foot. Where changes are significant we will say so before they take effect.

Version of 2026-09-06