privacy notice
last updated 6 september 2026
1 · who we are
mirkwood.com is operated by Mirkwood ("we", "us", the "operator"). we are the controller of the personal data described here under the EU General Data Protection Regulation (GDPR) and the UK GDPR. contact: privacy@mirkwood.com. our postal address is available on request.
2 · what we collect, why, and for how long
the contact form. when you write to us we receive your message, your email address, your name if you give it, and the time it was sent. we use these only to read and answer you. legal basis: art. 6(1)(b) GDPR (steps taken at your request) and art. 6(1)(f) GDPR (our legitimate interest in answering people who write to us). we keep the exchange for up to twelve months after our last reply, then delete it.
technical data. when you load the site, our hosting provider processes your IP address, browser type, the pages requested and timestamps in server logs, for security and to deliver the site. legal basis: art. 6(1)(f) GDPR. logs are kept for no longer than thirty days.
preferences on your device. the site remembers whether sound is on and which scene you last visited. this is stored in your browser's local storage, stays on your device, and is never sent to us.
we do not use analytics, advertising, tracking or profiling, and we never sell personal data.
3 · who receives your data
our hosting provider (Replit, Inc., United States) and our email delivery provider (Resend, Inc., United States) process data on our behalf under data-processing agreements. images and sound may be delivered by a content delivery network. where data leaves the EU/EEA or the UK, transfers rely on the European Commission's Standard Contractual Clauses and, where the recipient is certified, the EU–U.S. Data Privacy Framework and its UK extension.
4 · your rights
you may ask for access to, correction or deletion of your data, ask us to restrict processing, object to processing based on legitimate interest, receive a copy of data you gave us in a portable format, and withdraw any consent at any time without affecting earlier processing. write to privacy@mirkwood.com. you may also complain to your national data-protection authority (in the UK, the Information Commissioner's Office).
5 · children
the site is not directed at children under sixteen and we do not knowingly collect their data. if you believe a child has written to us, contact us and we will delete the message.
6 · security and changes
the site is served over encrypted connections and access to messages is limited to the people who answer them. if this notice changes, the new version and its date will be published here.