// PRIVACY POLICY

What this site actually does with data

The honest, complete list — written to match what the code on this site really does, with no boilerplate for things we don't do.

Cookies and analytics

This site uses Google Analytics 4 to see which pages people actually read. It sets cookies and sends technical data — IP address (truncated), browser, device and pages viewed — to Google.

Nothing analytics-related loads until you accept it. On your first visit you get a banner with two equally weighted choices. If you decline, or simply ignore it, no Google script is loaded and no analytics cookie is set. Your choice is remembered in your browser under marvin-consent and you can change it at any time below.

Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time using the button above; withdrawing doesn't affect processing that already happened.

Transfers outside the EU: Google LLC is based in the United States and processes this data there. Google states it relies on the EU–US Data Privacy Framework and Standard Contractual Clauses. See Google's Privacy Policy.

We use no advertising pixels, no remarketing tags and no cross-site tracking of any kind.

When you contact us

The contact form and the Advergame Estimator both send what you type to Formspree (Formspree Inc., United States), which forwards it to our inbox and keeps a copy in our account. That's how the message reaches us — no separate email client needed.

What we receive: your name, email address, and — depending on which form you used — your company, your message, your budget range, and the campaign goal, game genre, timeline and integrations you selected.

Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)), and our legitimate interest in answering business enquiries (Art. 6(1)(f)).

How long we keep it: enquiries that don't lead to a project are deleted within 12 months. If we do work together, we keep what we need for the contract and for as long as tax and accounting law requires.

Transfers outside the EU: Formspree processes data in the United States under Standard Contractual Clauses. See Formspree's Privacy Policy.

We never sell your data, never add you to a mailing list without asking, and never share it with anyone beyond the processors named on this page.

Hosting logs

Our hosting provider automatically logs basic technical information for every request — IP address, browser type, and the page requested — to keep the site running and secure. Legal basis: our legitimate interest in operating a secure website (GDPR Art. 6(1)(f)). We don't analyse these logs beyond troubleshooting, and they're retained only for our provider's standard technical log period.

Browser storage

The site stores a few small values in your own browser. None of them is sent to us, none identifies you, and none is an advertising cookie:

  • marvin-themelocalStorage. Remembers whether you chose light or dark mode. Persists until you clear your browser data.
  • marvin-consentlocalStorage. Remembers your cookie choice so we don't ask again. Persists until you clear it or use the button above.
  • marvinWelcomed, marvinCloneFightsessionStorage. Stop Marvin's welcome message and a scripted animation replaying as you browse. Cleared when you close the tab.

These are strictly necessary for the site to work as you've asked it to, so they don't require consent.

Content loaded from other services

Some things on this site are served by third parties, which means your browser contacts them directly and they can see your IP address:

  • itch.io (img.itch.zone) — game cover images on the Portfolio and case-study pages load from itch.io's image servers.
  • Netlify — the playable game demos run in an embedded frame served from netlify.app. Nothing loads until you press Play. Once you start a game it may use its own storage to save your progress or score.

Our pixel fonts, by contrast, are hosted on our own server — visiting this site never contacts Google Fonts or any other font provider.

Games we build for clients

This policy covers marvinadvergames.com only. The advergames we make for clients usually live on the client's own domain, and the client is the data controller for anything collected there — including leaderboard entries and any contest sign-ups. Their privacy policy applies, not this one.

External links

We link out to itch.io, Instagram, Facebook, TikTok, YouTube, LinkedIn and X. Once you click through you're on their site, governed by their privacy policy — not this one.

Your rights

Under the GDPR you have the right to access your data, correct it, have it deleted, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. To exercise any of these, email [email protected] — we'll respond within one month.

If you think we've handled your data badly, you can lodge a complaint with your national data protection authority. In Italy that's the Garante per la protezione dei dati personali.

We don't use automated decision-making or profiling, and this site isn't directed at children under 16.

Changes

We update this page whenever the way the site handles data changes. Last updated: 6 August 2026.