Silfurá privacy notice

Updated 14 September 2026.

Playing and analytics

The Óshylur trial uses no Google Analytics or Vercel Web Analytics. Full access also works without analytics. Neither provider starts until you select Allow. Playing, entering a password or requesting access does not give consent. Change your choice in Settings → Analytics.

With your consent (Article 6(1)(a) GDPR), Google Analytics receives page views and gameplay events such as casts, catches and time playing, cookie identifiers, and browser, device and connection information. Advertising personalization and Google Signals are disabled in the application. We exclude names, email addresses, screenshots, precise player coordinates and free text from app analytics events and remove query strings and fragments from app-supplied page URLs.

Vercel Web Analytics measures page views and device and approximate location information using its cookie-free visitor measurement. It is also optional and follows the same choice. See Vercel’s analytics privacy information.

Access, local storage and feedback

A secure HttpOnly silfura_access cookie remembers full access for 90 days; trial access uses a session cookie. These support access you request and are separate from analytics. silfura.angler.v1 and silfura.graphics.v1 remember your chosen character and graphics settings. silfura.analytics-consent.v2 stores your choice and when it was made. Consented Google cookies use silfura_ga and silfura_ga_….

Access requests send your name, email and confirmation that you want to test the preview. Feedback sends your comments, optional reply email and the game screenshot shown in the form. You can inspect or remove the screenshot before sending; it stays in browser memory until you send. Optional diagnostics are off by default and can include game state, browser version, viewport size, time, build and errors. Review those fields before deciding whether to include them. No game screenshot or feedback is sent simply by opening the form.

Who is responsible and how to contact us

Silfurá is operated by Helgi P. Helgason. For privacy questions or requests, email helgi.pall.helgason@gmail.com. The studio name is WTF Concoctions.

Hosting, messages and legal basis

Vercel delivers the website and processes connection information, including IP addresses and request logs, to operate it and prevent abuse. We rely on legitimate interests in providing and securing the game. When you send a request or feedback, we use the information you provide to review and answer it and improve the game, based on legitimate interests in responding to people who contact us. You may object to this processing. These messages are not a marketing subscription or consent to analytics.

Messages pass through Resend (Plus Five Five, Inc.) to the developer’s email mailbox. Email providers also process messages for delivery and storage. A reply address is needed when you request a reply or access; the feedback form indicates which fields are optional. Do not include sensitive personal information or other people’s details unless necessary for your request.

Retention

The browser remembers an analytics choice for 180 days and consented Google Analytics cookies for up to 90 days. Preferences remain on your device until you remove this site’s data in your browser. Cookie expiry and withdrawing consent do not delete previously collected reports.

We keep correspondence while reviewing and responding to it, and while follow-up on the same request remains necessary. A record needed for a dispute or legal obligation is kept for that purpose for the applicable period. Hosting logs and analytics records are subject to provider and account retention settings; analytics is used to understand trends and improve the game. Contact us for the applicable retention settings or to request deletion. The application’s abuse limit uses temporary keyed hashes of connection addresses in server memory; it does not send those hashes in email.

Providers and international transfers

Our providers include Vercel Inc., Resend / Plus Five Five, Inc., the email providers involved in correspondence, and, if you allow analytics, Google Ireland Limited / Google LLC. These providers may process data outside the EEA, including in the United States. Their data-processing terms describe contractual safeguards and any applicable adequacy framework. You can request information about the safeguards applicable to your data and a copy from us.

Provider information: Vercel data-processing terms, Resend data-processing terms, Resend retention and privacy information, and Google data-processing terms.

Your rights

Contact the email above to request access, correction, deletion, restriction, portability where applicable, or to object to processing based on legitimate interests. You can withdraw analytics consent at any time through the game’s privacy controls and keep playing. Withdrawal does not affect the lawfulness of earlier processing based on valid consent.

We respond without undue delay and normally within one month of receiving a request. If a permitted extension is needed because of its complexity or number of requests, we explain it within that first month. We request only the information reasonably needed to find your records and verify your identity. We may be unable to identify an analytics record without its cookie identifier; we do not collect extra identifying information just for that purpose.

You can complain to Persónuvernd in Iceland or the supervisory authority where you live or work. We do not use the game to make solely automated decisions with legal or similarly significant effects. The game does not ask for health, financial or other sensitive personal information.