Privacy Policy

1. Data Controller (The Agency Responsible)

Sebastian Sünkler
Gartenholz 130
22926 Ahrensburg
Germany
Contact via secure dispatch: sebastian.suenkler@gmx.de
Emergency telegraph: +49151 58 56 35 76

2. Scope of Data Processing (Information Gathered)

We collect and process the following types of data:

A. Technical Access Data (Server Logs)

During your consultation of our digital apparatus (website), certain technical access data is automatically recorded in the server's logbook solely for the purpose of ensuring security and functionality. This intelligence includes:

• Anonymized IP address (final octet obscured, e.g., 192.168.1.0)
• Date and time of access
• Consulted pages and requested resources (URLs)
• HTTP status code (indicating success or failure of request)
• Volume of data transmitted
• Browser type and version (User-Agent string)
• Referrer URL (the originating web address, if provided)

This technical data is not combined with other data sources and is typically deleted or anonymized within 7 days. We employ no tracking cookies, analytical contraptions, nor other surreptitious techniques to monitor your general browsing activities.

B. User Account Data (Registration & Login)

To utilize the interactive features of Sherlock Interactive, registration is required. During this process, we collect and store the following personal data directly linked to your account in our secure PostgreSQL database:

• Email Address: Used as your unique identifier for login, account verification, password resets, and essential service communications.
• Hashed Password: Your chosen password is cryptographically hashed before storage; we never store your plain text password.

We do not collect or request any other personal identification data such as your name, address (beyond technical logs), or date of birth for account creation.

C. Game State Data

While you play, information related to your specific game sessions is stored, linked to your user account. This includes:

• Saved game files (containing conversation history, discovered clues, locations, suspects, items, case title, genre, timestamps).
• Notes you manually enter into the in-game notebook.

This game state data is necessary to allow you to save and resume your investigations and is not analyzed or used for any purpose other than providing the core game functionality.

3. Legal Basis (Justification Under Law)

The processing of technical access data is predicated upon our legitimate interest as per Art. 6(1)(f) GDPR. This interest lies in ensuring the proper function and security of our digital presence and optimizing the services rendered.

The processing of your account information (email, password) and game state is based on Art. 6(1)(b) GDPR (performance of a contract) as it is necessary to provide the requested interactive game service.

4. Storage Duration (Retention Period)

Data within the server log files is automatically expunged or rendered anonymous after a period not exceeding 7 days. This technical data is not cross-referenced with other data sources.

Your account information and associated saved game data are retained as long as your account remains active or until you request deletion.

5. Rights of Data Subjects (Your Entitlements)

You possess the right to:

• Request enlightenment regarding the personal data we process concerning you (Art. 15 GDPR)
• Demand rectification of inaccurate data or completion of incomplete records (Art. 16 GDPR)
• Petition for the erasure of your data held by us (Art. 17 GDPR)
• Seek restriction of data processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Lodge a formal complaint with a supervisory authority

To exercise these rights, pray contact us using the details furnished in Section 1.

6. Right to Lodge a Complaint (Seeking Redress)

Should you perceive violations of data protection statutes, you retain the right to lodge a complaint with the appropriate supervisory authority. This authority is typically the State Data Protection Officer for the German federal state wherein our establishment resides. A register of Data Protection Officers and their contact particulars may be consulted at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

7. Validity and Amendment (Policy Status)

This privacy policy is currently in effect, last revised April 21, 2025.

Owing to the ongoing refinement of our apparatus or alterations in legal or regulatory mandates, modifications to this policy may become necessary. The prevailing policy can always be examined and procured from this digital location.

8. Utilisation of Artificial Intelligence Services (The Engine's Mind)

Our application employs artificial intelligence services to generate narrative content and process your commands during the game.

Nebius AI Studio API (incorporating models like phi-4 by Microsoft)

Nature of data processed: When you interact with the game (start a case, send commands), your input, along with relevant context from your current game state (conversation history, clues, etc.), is transmitted to Nebius servers for processing by the selected AI model (e.g., phi-4).

Purpose of processing: This data is processed solely to generate the narrative response, understand your commands within the game's context, and advance the story according to the established rules and your actions.

Legal basis: Processing is founded upon Art. 6(1)(b) GDPR (performance of a contract – providing the interactive game service) and our legitimate interest per Art. 6(1)(f) GDPR in utilizing AI to deliver this unique narrative experience.

Storage duration: Data transmitted to Nebius is subject to their privacy policy. Nebius may utilize content to enhance their AI models. For precise details, consult the Nebius Privacy Policy.

Your rights regarding AI processing: Objecting to this processing means you cannot participate in the interactive narrative, as the AI is fundamental to the service. However, your general data subject rights (as outlined in Section 5) remain applicable to the account data we hold directly.