Privacy Policy

Last updated: 3 November 2026

In short: For your player account we store your name, your email address and your game progress. We do not set cookies, do not use analytics or tracking services, do not load content from third-party servers and only show our own ads without evaluating personal data.

1. Controller

Andre Piede
Turevägen 16, 36154 Vissefjärda, Sweden
Email: info@piede.eu

No data protection officer has been appointed, as there is no obligation to do so (Art. 37 GDPR).

2. Visiting the website (server logs)

When you visit www.howardcarterscurse.com, our hosting provider processes technically necessary data: IP address, date and time, page requested, amount of data transferred, browser and operating system. This is needed to deliver the site and to protect it against attacks.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). The logs are kept only as long as necessary for these purposes and are then deleted automatically.

Hosting provider: STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, with data centres in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.

3. Player account

To play, you create an account. We store:

your player name and your email address,
whether and when you confirmed your email address (including the confirmation code),
your chosen language and your plan (free with ads or ad-free) and whether you have paid,
sign-in times and a session identifier so that you stay signed in.

Legal basis: Art. 6(1)(b) GDPR (contract for the use of the game). Without a name and email address we cannot create an account or store your progress.

Confirmation email

After signing up, we send you an email with a confirmation link. This lets us make sure the address belongs to you. It is sent via the email service of STRATO AG (address above), also under the data processing agreement. We do not send newsletters.

4. Save points and progress

We store your save points for each tomb (position, pack, points, lives, opened doors), solved puzzle tablets, whether and when you conquered all tombs, your best score and – if you unlock it – your personal discount code. Legal basis: Art. 6(1)(b) GDPR.

5. Multiplayer

When you play with others, your fellow players see your player name, your character and the quick messages you send (e.g. “Help!”). These messages are predefined and are not stored. Other players do not see your email address. Please choose a player name that does not reveal your full name.

6. Storage in your browser

We do not set cookies. We store the following in your browser's storage:

Session identifier (sessionStorage) – keeps you signed in while the tab is open.
Language (localStorage) – so the game starts in your language.
Device identifier (localStorage) – a random string that recognises this device. It is also stored on our server together with the time of your last sign-in. This way we only ask for a confirmation link by email on a new device or after 30 days without signing in – so nobody can sign in as you just by knowing your name and address.
Most recently used name and email address (localStorage) – so you don't have to type them again the next time you sign in.

This information is strictly necessary for the use of the game you have requested (chapter 9, section 28 of the Swedish Electronic Communications Act, lag (2022:482) om elektronisk kommunikation) and only leaves your browser when you sign in. You can remove it at any time in your browser settings (“clear site data”).

7. Advertising

In the free version, we show short notices about our own offers after saving (e.g. the ad-free version or new tombs) and a link to our “Expedition gear” page (section 9). No personal data is evaluated for this and no ad networks are used.

8. Buying the ad-free version via PayPal

If you buy the ad-free version, you pay via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For the payment you are redirected to PayPal's website and enter your payment details there; PayPal processes them under its own responsibility. PayPal privacy statement: paypal.com/uk/legalhub/privacy-full.

For each purchase we store: name and email address, the time of your consent to immediate performance (right of withdrawal), the PayPal order and transaction number, amount, VAT and PayPal fee, the country of your PayPal account and the IP address at the time of purchase. We need the country and the IP address as evidence of the EU country in which VAT is due (Art. 24b of Implementing Regulation (EU) No 282/2011).

Legal basis: Art. 6(1)(b) GDPR (purchase contract) and Art. 6(1)(c) GDPR (tax and accounting obligations). We keep this information for 10 years after the end of the year of purchase (Art. 63c of the Implementing Regulation, OSS records; 7 years under the Swedish Bookkeeping Act, bokföringslagen) – even if you have your account deleted earlier.

We send you the purchase confirmation with invoice by email (via STRATO, see above).

9. Expedition gear and affiliate links

On the “Expedition gear” page (also linked from the menu and the ad screen) we recommend books, games and films with links to Amazon (Amazon Europe Core S.à r.l., 38 Avenue John F. Kennedy, L-1855 Luxembourg). These are affiliate links: if you buy something there after clicking, we receive a small commission; the price does not change for you.

The page does not load any content, images or scripts from Amazon. Only when you click a link does Amazon open in a new tab, and Amazon receives the usual data from your browser together with our affiliate ID in order to attribute the commission; Amazon sets its own cookies when doing so. This is Amazon's responsibility: Amazon privacy notice. We only receive aggregated reports on clicks and purchases from Amazon, with no information about you personally. Legal basis for including the links: Art. 6(1)(f) GDPR (legitimate interest in financing the free game).

10. Recipients and transfers to third countries

Your data is only received by the service providers named above (hosting, email delivery), who process it on our behalf, and by PayPal when you make a purchase. We process your data within the EU and do not transfer it to countries outside the EU / EEA. Whether PayPal transfers data to third countries is explained in PayPal's privacy statement. We also pass purchase data to our accountant and – where required by law – to the tax authority (Skatteverket).

11. Retention period

We store account data, save points and progress until you have your account deleted. A short email to the address above is enough; we will then delete all data stored for your account, unless we are legally required to retain it (purchase data, see section 8).

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, contact the email address above.

You can also lodge a complaint with a data protection supervisory authority – the authority in your country of residence, or the Swedish authority responsible for us: the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, Sweden, www.imy.se.

13. Children and young people

Accounts may be created by persons aged 16 and over. Younger players need their parents' consent.

14. No automated decision-making

We do not make automated decisions or create profiles within the meaning of Art. 22 GDPR.