What this site does with data
Privacy.
No accounts, no tracking, no third parties, no forms. There is genuinely very little to tell — so this notice is short, and it describes only what actually happens rather than what a template says usually happens.
Stackwell Solutions is the controller of the personal data described below. Everything on this page — a request, a question, or a complaint — goes to one address: sales@stackwell-solutions.com.
Three things, and only the first one reaches us.
- What you send us. Every contact route here is a plain
mailto:link — there is no form on this site and no backend to submit one to. If you write, we process your address and whatever you chose to put in the message, in order to answer it. - Your on-device choices. Switching between the light and dark theme stores a single key (
sw-theme) in your browser's local storage, and confirming your age on a demo page stores another (sw-age18) so you are not asked again for thirty days. Both stay on your device, are never sent to us, and clearing site data removes them. They are functional, not analytical. - What you do on a page. A few interactions are counted so we can tell whether the site works: opening a game demo and roughly how long it stayed open, using the catalog filter or search, confirming your age, and clicking a contact link or a call to action. This is measured by our own server — the page asks it to record an event, and the server answers with nothing at all. No cookie is set and nothing is stored on your device for it, no identifier is created, no third party is involved, and what you type in the search box is never sent — only the fact that a search happened. Each event is recorded in the same access log described below, under the same 30-day deletion.
- The request itself. Serving you a page necessarily means your IP address and your browser's request reach our server. The web server keeps an access log of those requests: the IP address, the user agent your browser announces (its browser and device family), the page asked for, the page that referred you, the time, and how the server answered. We use it to keep the service secure — spotting probes, scanners and abuse — and for aggregate traffic statistics. Entries are deleted automatically after 30 days at most; the retention is enforced by the server's own log rotation, not by someone remembering to clean up. The log lives on our own server in the EU and involves no cookies and no third party.
Playing a demo loads our player from play.stackwell-solutions.com. That is our own server rather than a third party, and the demo runs on play money with no account and no wallet.
This site sets no cookies, uses no third-party analytics, advertising or tracking service, and makes no third-party requests at all — its Content-Security-Policy forbids them outright, so there is nothing to quietly opt into. The measurement described above is entirely first-party: our own page telling our own server that something happened, recorded in our own log on our own machine in the EU. It cannot follow you to another site, because nothing about it leaves this one. The only things stored on your device are the two functional keys above.
That is why you are not reading this from behind a consent banner. We are not asking permission to build a profile of you, because we are not building one: there is no identifier, no cookie, no cross-site anything — just counts of what happened on a page, which we rely on to know whether the site is doing its job.
- Lawful basis. Correspondence rests on our legitimate interest in answering people who write to a supplier — and, where you are asking about working together, on the steps taken at your request before entering a contract. The access log and the interaction counts rest on our legitimate interest in keeping a public server secure and understanding, in aggregate, how the site is used — a narrow interest, served with the least data that can serve it: no cookies, no identifiers, no third parties.
- Retention. We keep correspondence for as long as it has a business purpose: the conversation it belongs to, and the relationship that follows from it. When it has none, we delete it. Access-log entries are deleted automatically after 30 days at most.
- Sharing. We do not sell personal data and we do not pass it to third parties for their own purposes. The site itself calls no external service, so there is no analytics vendor, ad network or CDN in the path.
Under the GDPR you can ask for a copy of what we hold about you, ask us to correct or erase it, ask us to restrict or stop using it, or ask for it in a portable form. Write to sales@stackwell-solutions.com and a person will answer. If you believe we have handled your data badly, you are entitled to complain to your local data-protection supervisory authority — you do not need our permission, and you do not have to come to us first.
The rest of the site is equally unexcited about your data: it just wants to show you some games.