HOME DETECTIVE CLUB
Privacy & cookies
Last updated: 13 October 2026. This notice covers homedetectiveclub.com and the game at app.homedetectiveclub.com.
Who is responsible?
Stemlerné Csöme Anikó e.v. operates Home Detective Club and is the controller for the processing described here. Registered office: 6723 Szeged, Tarján széle 6. B. lph. 2. em. 8. a., Hungary. Contact: info@homedetectiveclub.com. Operator details.
Website, downloads and hosting
ININET Internet Kft., 1063 Budapest, Szinyei Merse utca 10., Hungary, hosts the main website and downloadable files. Cloudflare provides the game application and its database. Requests can involve IP addresses, browser information, requested URLs and request times needed to deliver and protect these services. Our legal basis for technical delivery and security is legitimate interests (Article 6(1)(f) GDPR). Provider logs are subject to their service settings and retention arrangements; they are separate from our optional Google Analytics measurement. ININET privacy information; Cloudflare privacy information.
Subscription and free-case access
Brevo (Sendinblue SAS, France) processes newsletter subscriptions and email delivery. We use your email address, subscription preferences and confirmation records to send the news you requested. Newsletter consent is confirmed by email and can be withdrawn using the unsubscribe link or by contacting us. General newsletter subscriptions do not automatically request a free-case invitation: the dedicated free-case form identifies that request.
After confirmation through the free-case form, we use your email address to deliver a personal access link. The invitation is connected to your saved game data so the requested case can be provided and supported (Article 6(1)(b) GDPR). We store an invitation identifier, email address, token hash, creation time, disabled status and delivery status. A raw access token is held in the private email outbox until successful delivery or suppression; failed or uncertain deliveries may require manual resolution. Do not share your personal access link.
Newsletter records are retained while you remain subscribed, with limited suppression or consent records retained where needed to honour opt-outs or establish consent. Brevo also processes delivery, bounce and interaction records under the account's settings. Brevo privacy information.
Embedded subscription forms
Some pages embed Brevo forms directly, including the free-case page and the game ending. When a form loads, your browser contacts Brevo and its Google reCAPTCHA service. They can receive technical information, including your IP address, browser information and interactions, and may use storage according to their own notices. These form requests are separate from our optional Analytics and Marketing choices; rejecting those choices does not prevent the embedded form from loading. We use the forms to process your requested subscription and protect submissions against abuse. You can choose not to submit the form. Google privacy information; Google terms.
Saved investigation and playing time
The game stores your progress, remaining time and pause state, examined clues, hints, wrong attempts, answers needed for progress, and any notes you save. A browser session identifier links the browser to this state; a personal invitation also links it to your email address. We record start and completion times and the measured running time. Time measurement is based on game actions and the timer state and is not proof that you were actively looking at the page. These records support saved play and help us understand and improve the case. Do not put sensitive personal information in your investigation notes.
Providing and saving the game uses Article 6(1)(b) GDPR. Limited case-performance review and feedback follow-up use our legitimate interest in improving the game (Article 6(1)(f)); you can object by emailing us. Optional Google Analytics download measurement is separate and requires consent.
Feedback and one reminder
Opening the in-game feedback button records the time the button was clicked, then redirects to a Google Form. We do not receive an automatic confirmation that you submitted that form, and we do not automatically join the form answers to your invitation. Please avoid including personal or sensitive information in free-text feedback unless you want us to receive it. Google processes form access under its privacy terms.
If you finish the case without opening that feedback link, we may send one feedback reminder after 24 hours through Brevo. We record whether it was sent, suppressed or failed. This is a one-time case follow-up, not a new newsletter subscription. You may object or ask us to stop by replying or contacting info@homedetectiveclub.com. If you submitted the form by another route, the system may still send the reminder.
Game-data retention
Saved investigation state, notes and identifiable play records are deleted after 365 days without activity. A daily maintenance job first adds expired play records to non-identifying totals (numbers of starts, completions and feedback clicks, and summed playing time), then deletes the individual records. These totals contain no email address, invitation or browser identifier, notes, or individual event timestamps and may be kept for long-term statistics. Existing records with no usable timestamp receive a 365-day period from this policy rollout. Invitation and delivery records are retained separately while needed to provide your personal access and prevent duplicate access emails; you can request deletion or withdrawal of that access. Newsletter, provider logs and Google Analytics have the separate retention arrangements described in their sections.
Optional Google Analytics
Google Analytics 4 (G-8ZVHCPGXZS), provided by Google Ireland Limited, loads only after the relevant site's Analytics choice is allowed. Main-site analytics measures website visits. In the game, optional measurement counts clicks on known PDF and 3D-bundle download links separately, using the events case_pdf_download and case_3d_download. A click does not confirm that a download completed. People who reject analytics, use blockers or download the file directly may not be counted.
Download events include the file name, file type and the case identifier. We do not send your email, personal invitation link, saved notes, answers or linked game record to Google Analytics. Google still receives technical and pseudonymous analytics data, including browser/device and network information. Game measurement is isolated from the investigation interface. Advertising storage, advertising personalisation and Google Signals are disabled by our configuration. The legal basis is your consent (Article 6(1)(a) GDPR).
Analytics cookies are configured for up to 180 days without automatic renewal. The Google Analytics property's server-side event retention is controlled separately in that account and is not set by this website; these cookie settings do not promise deletion of Google's stored reports after 180 days. You can ask us for the applicable account retention setting. Google Analytics retention; Google privacy information.
Optional Meta marketing measurement
On the main website, Meta Pixel (1851487246042470) loads only after a separate Marketing choice. It measures page views for advertising and can involve the page address, referring page, IP address, browser information and identifiers. Meta can associate these with its users. We do not configure sending form fields or contact details to the Pixel. The game does not load the Meta Pixel. The legal basis is consent. Meta cookies typically last up to 90 days; Meta controls its own retention. Meta privacy information; Meta cookie information.
Browser storage and changing your choice
The main site's cookie preference is saved in local storage under hdc-cookie-consent-v2. The game's analytics choice uses tg-analytics-consent-v1. Each choice lasts up to 180 days. These are separate choices on separate origins. Use Cookie settings on the main website or Cookies in the game header to change them. Closing an unanswered choice does not grant permission. Withdrawal stops future optional measurement; it does not automatically erase reports already sent.
The game uses the secure, HttpOnly tg_browser cookie to recognise a browser session, with a browser lifetime of up to one year; server access authorisation expires separately. The tg-music-enabled local-storage setting remembers whether background music is enabled until you change it or clear browser storage. These functional settings are not advertising identifiers. Clearing browser data may prevent you from returning to the same saved progress.
Contact, recipients and international processing
If you contact us, we use your message and contact details to respond and resolve your request. The basis is legitimate interests, or steps needed to provide a requested service. We retain correspondence while needed to deal with the matter and any applicable legal obligation or specific dispute. An enquiry does not subscribe you to marketing.
Access is limited to the operator and service providers needed for hosting, delivery, forms and the optional measurements described above. We do not sell personal data or use it for automated decisions producing legal or similarly significant effects. Providers may process data outside the EEA under their applicable transfer arrangements, such as adequacy decisions and standard contractual clauses. Contact us for information about the arrangements relevant to your data. Provider notices describe their own processing and transfers; an external website you visit has its own policy.
Your rights
Subject to the applicable conditions, you can request access, correction, deletion, restriction or portability, withdraw consent and object to processing based on legitimate interests. Contact info@homedetectiveclub.com. We normally respond within one month. You can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or your competent supervisory authority. NAIH contact information.