What this site actually does with data
The honest, complete list — written to match what the code on this site really does, with no boilerplate for things we don't do.
Who is responsible
The data controller for this website (marvinadvergames.com) is Claudio Cimini, Via Molise 106, 62012 Civitanova Marche (MC), Italy — VAT IT01689820437, tax code CMNCLD87A20H211L. For anything in this policy — including any of the rights listed below — write to [email protected].
Cookies and analytics
This site uses Google Analytics 4 to see which pages people actually read. It sets cookies and sends technical data — IP address (truncated), browser, device and pages viewed — to Google.
Nothing analytics-related loads until you accept it. On your first visit you get a banner with two equally weighted choices. If you decline, or simply ignore it, no Google script is loaded and no analytics cookie is set. Your choice is remembered in your browser under marvin-consent and you can change it at any time below.
Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time using the button above; withdrawing doesn't affect processing that already happened.
Transfers outside the EU: Google LLC is based in the United States and processes this data there. Google states it relies on the EU–US Data Privacy Framework and Standard Contractual Clauses. See Google's Privacy Policy.
We use no advertising pixels, no remarketing tags and no cross-site tracking of any kind.
When you contact us
The contact form and the Advergame Estimator both send what you type to Formspree (Formspree Inc., United States), which forwards it to our inbox and keeps a copy in our account. That's how the message reaches us — no separate email client needed.
What we receive: your name, email address, and — depending on which form you used — your company, your message, your budget range, and the campaign goal, game genre, timeline and integrations you selected.
Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)), and our legitimate interest in answering business enquiries (Art. 6(1)(f)).
How long we keep it: enquiries that don't lead to a project are deleted within 12 months. If we do work together, we keep what we need for the contract and for as long as tax and accounting law requires.
Transfers outside the EU: Formspree processes data in the United States under Standard Contractual Clauses. See Formspree's Privacy Policy.
We never sell your data, never add you to a mailing list without asking, and never share it with anyone beyond the processors named on this page.
Hosting logs
Our hosting provider automatically logs basic technical information for every request — IP address, browser type, and the page requested — to keep the site running and secure. Legal basis: our legitimate interest in operating a secure website (GDPR Art. 6(1)(f)). We don't analyse these logs beyond troubleshooting, and they're retained only for our provider's standard technical log period.
Browser storage
The site stores a few small values in your own browser. None of them is sent to us, none identifies you, and none is an advertising cookie:
marvin-theme— localStorage. Remembers whether you chose light or dark mode. Persists until you clear your browser data.marvin-consent— localStorage. Remembers your cookie choice so we don't ask again. Persists until you clear it or use the button above.marvinBreakout— localStorage. Your best score at the game on the boot screen, so next time you know what to beat. A number and nothing else. Persists until you clear your browser data.marvinWelcomed,marvinCloneFight— sessionStorage. Stop Marvin's welcome message and a scripted animation replaying as you browse. Cleared when you close the tab.marvinWidgetHidden,marvinWidgetEscape— sessionStorage. Remember that you switched Marvin off, and that a scripted scene has already played, so neither comes back during the same visit. Cleared when you close the tab.marvinSaid,marvinDuelOffended— sessionStorage. Remember which of Marvin's lines you've already heard, and that the insult duel has already played out, so nothing repeats during the same visit. Cleared when you close the tab.marvinVisitorNo— sessionStorage. Holds the ticket number the boot screen gave you, so reloading doesn't draw a new one. Cleared when you close the tab.
These are strictly necessary for the site to work as you've asked it to, so they don't require consent.
The room
The room you can walk into on this site records where you walked and replays it to whoever arrives next. The figures you see moving around in there are not simulated: they are recordings of real visits.
What gets stored is a list of positions, whether you were standing, walking or in the air, and whichever of the sixty fixed symbols you chose to say. There is no free text anywhere in it — not because we filter it, but because there is nothing to type. Nothing else about you is recorded.
Your name in there is the ticket number the boot screen tore off for you: a place in a queue and nothing more. It is not tied to an account, an address or a device, it does not survive the session, and nobody can be found through it. No IP address is stored alongside it and no cookie is set.
The recordings sit in a file on our own server that cannot be reached from the web. The room keeps twenty-four of them at a time, and forty messages on the board; when new ones arrive the old ones drop off. Because none of it identifies anyone, we could not find your recording in order to delete it even if you asked us to — the only thing we can do is empty the whole store, and if that matters to you, ask and we will.
The visit counter and the high scores
The number on the boot screen is a running total of tickets handed out, and nothing more. It is deliberately not a unique-visitor count: there is no IP address behind it, no cookie and no fingerprint, so it cannot tell whether you have been here before. It counts tickets, and that is the only thing it is able to do.
The game hidden in the same screen's static keeps a score table, and it speaks the same language. At the end of a game we send our server two things: the ticket number and the score. Nothing else — no IP address, no cookie, nothing that identifies you. Each ticket holds one row, and a new game only updates it if it went better.
The scores live in a file on our server, unreachable from the web, like the room's recordings. Next to each row the server also notes the moment, and it does one job only: breaking ties, because on an equal score whoever got there first comes first. The table keeps forty of them: when new ones arrive, the lowest drop out. On our own we cannot tell which row is yours — but if you tell us your number we'll remove it; and emptying the whole table, as with the room, is always possible.
Content loaded from other services
Some things on this site are served by third parties, which means your browser contacts them directly and they can see your IP address:
- itch.io (
img.itch.zone) — game cover images on the Portfolio and case-study pages load from itch.io's image servers. - Netlify — the playable game demos run in an embedded frame hosted by Netlify, either on
netlify.appor on one of our own domains pointed at it. Nothing loads until you press Play. Once you start a game it may use its own storage to save your progress or score.
Our pixel fonts, by contrast, are hosted on our own server — visiting this site never contacts Google Fonts or any other font provider.
Games we build for clients
This policy covers marvinadvergames.com only. The advergames we make for clients usually live on the client's own domain, and the client is the data controller for anything collected there — including leaderboard entries and any contest sign-ups. Their privacy policy applies, not this one.
External links
We link out to itch.io, Instagram, Facebook, TikTok, YouTube, LinkedIn and X. Once you click through you're on their site, governed by their privacy policy — not this one.
Your rights
Under the GDPR you have the right to access your data, correct it, have it deleted, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. To exercise any of these, email [email protected] — we'll respond within one month.
If you think we've handled your data badly, you can lodge a complaint with your national data protection authority. In Italy that's the Garante per la protezione dei dati personali.
We don't use automated decision-making or profiling, and this site isn't directed at children under 16.
Changes
We update this page whenever the way the site handles data changes. Last updated: 10 August 2026.


IT
FR
ES