Privacy Policy
Last updated October 4, 2026
This policy explains what Felisia Games collects when you use the site, why, who else can see it and what you can ask us to do about it. It forms part of the Terms of Service.
1. Who we are
Felisia Games publishes the games on this site and decides what happens to the data described below. In data-protection terms, we are the controller of that data.
If you want to exercise any of the rights in section 7, or simply ask what we hold about you, write to the support address given in the Terms of Service.
2. What we collect
Account data: your email address, username, avatar, interface language and, if you signed in with Google, the identifier that service returns to us. Passwords are stored only as an irreversible hash — we cannot read yours.
Purchase data: what you bought, when, for how much, with which promo code, and the identifier of the transaction at the payment provider. Card numbers never reach us.
What you write: stories you publish, and messages you send us through the support form together with the email address you give there.
How you play: which parts of a game you have already been through and in which party, so that they do not repeat. This is tied to your account.
Your library: which free games you have added to “My games,” and when. You can remove a game from it in your profile, and the record goes with it.
Parties you set up: the name you give a party or a case, the names you type in for the people playing with you, the role each of them was given and how far the game has got. Those names are yours to choose — nicknames or invented ones work just as well, and nothing in a game needs anybody’s real name. We do not ask who these people are and we have no way of knowing.
Reviews: if you rate a game when you finish it and write a few words about it, we keep the rating and the text together with your account. We read reviews to see how the games are working, and we may quote them — on the site, on social networks and in advertising about the games — with your username or without a name, as section 11 of the Terms of Service describes. Your email address never appears with a quoted review.
A customer number: a short identifier we generate for your account and print at the foot of material you download or print from the site, so that a copy found published in the open can be traced to the account it came from. It is internal to us, opens nothing and gives access to nothing.
Technical data: the address your request comes from, the time of the request and basic information about your browser. We use it to keep the site working and to limit abuse — for example, to stop someone guessing passwords or flooding the support form.
Analytics data: aggregate statistics about visits, collected only if you agree to it in the cookie banner.
Advertising data: if you agree in the cookie banner, the Meta pixel (the advertising tool of Instagram and Facebook) records that your browser visited our pages, started a checkout, registered or bought a game, together with the price and the game. It lets us see which of our ads lead to purchases and show them to people likely to be interested. Without your agreement the pixel is not loaded at all.
Visit and speed measurements: the hosting platform counts page views and measures how fast pages load (Vercel Web Analytics and Speed Insights). This works without cookies and without identifiers that would let you be recognized: it records the page, the type of device and browser, the country and the load times, and gives us only totals and averages.
We also produce aggregated and anonymized statistics from all of the above — counts and averages that do not identify anyone and cannot be traced back to you. Once data is in that form it is no longer personal data, and we use and publish it freely, including in material about the site and its games.
3. Why we use it, and on what basis
To run your account and give you what you paid for — signing in, restoring access, keeping your purchase attached to you. Basis: performance of our agreement with you.
To send the emails that make an account possible at all: confirmation codes, password resets, and confirmation of a purchase. These go to everyone, because without them you can neither register nor recover access. Basis: performance of our agreement with you.
To publish and moderate stories, and to answer support requests. Basis: performance of our agreement with you, and our legitimate interest in keeping the site usable.
To quote reviews in material about the site and its games. Basis: our legitimate interest in showing what players think of the games. You can object at any time, and we will stop using your review in new material.
To keep the site safe: rate limits, blocking abuse, investigating attempts to break in or to extract content automatically. Basis: our legitimate interest.
To send news about new games and discounts. Basis: your consent, given at registration or in your profile, which you can withdraw at any time.
To measure traffic with an analytics service. Basis: your consent, given in the cookie banner.
To measure and target our advertising on Instagram and Facebook. Basis: your consent, given in the cookie banner.
To count visits and see how fast pages load, without cookies or identifiers, so that we can find and fix slow or broken pages. Basis: our legitimate interest in keeping the site working and fast.
To keep records we are required to keep, and to defend claims. Basis: our legal obligations and our legitimate interest.
4. Who else sees it
The payment provider, Paddle.com Market Ltd, acts as merchant of record: it takes the payment, holds the card details, issues the receipt and handles tax. It has its own privacy policy, and your card data belongs to that relationship, not ours.
Our infrastructure providers see the data only as part of running the service: the hosting platform that serves the site, the database service that stores it, and the email service that delivers our messages. We engage them under terms that require them to act on our instructions and not to use the data for their own purposes. We will tell you which providers these are if you ask.
The analytics service receives aggregate usage data, and only after you agree to it in the cookie banner. The hosting platform’s visit and speed measurements described in section 2 stay with that platform and reach us only as totals.
Meta Platforms Ireland Ltd receives the advertising data described in section 2, and only after you agree to it in the cookie banner. Meta processes it under its own terms and privacy policy and may combine it with what it already knows about you if you use its services. We do not send Meta your email address, your name or anything you write on the site.
Other users see what you publish yourself: stories that pass moderation, together with the name and avatar you chose, or as anonymous if you asked for that. We do not show your email address to other users.
Anyone who sees our material about the games — on the site, on social networks or in advertising — may see a review we quote, with your username or without a name.
Where a game gives each participant a personal link — to their role, their character file or the materials for a stage — that link opens without signing in, so anyone holding it sees what is behind it. You decide who to give each link to, and it shows only what that participant needs in order to play.
We do not sell your data, and we do not share it with anyone beyond the services above, without which the site would not work — except where the law requires us to disclose it.
Some of these providers operate outside the place where you live. Where that happens, we rely on the transfer safeguards available to us under the applicable law, including the data-protection terms of our agreements with them.
If the site or the games are transferred to someone else — for example on a sale of the business — the data described here may be transferred with them. This policy, or one at least as protective of you, then continues to apply, and we say so on the site.
5. How long we keep it
Account data is kept while the account exists. If you ask us to delete the account, we delete it and the data attached to it, apart from what we have to keep: records of payments, anything needed to deal with a legal claim or a report of abuse, and anything the law requires us to retain. Of those we keep only what the purpose needs, and only for as long as it needs it.
Purchase records are kept for as long as tax, accounting and consumer-protection law requires us and the payment provider to be able to show that a payment happened, and in any event no longer than ten years from the purchase.
Published stories may remain on the site after an account is deleted, without anything that identifies their author. Tell us if you want a story removed too, and we will remove it.
A party is kept while you keep it. You can delete one yourself at any time, on the page that lists them, and that deletes the names in it and the personal links that belonged to them. Parties you do not delete are kept while the account exists and go with it when the account is deleted.
Reviews are kept with the account and go with it when the account is deleted. Tell us if you want a review removed on its own and we will remove it. Once a review is deleted, or once you ask us not to quote it, we stop using it in new material; material in which it was already quoted is not withdrawn.
Support correspondence is kept for two years from the last message in the exchange, after which it is deleted.
Technical records used for rate limiting are kept for no more than 30 days and are then cleared automatically or overwritten as new records replace them.
7. Your rights
You can ask us to show you what data we hold about you.
You can correct your name, email, avatar and language yourself in your profile, or ask us to correct anything else.
You can ask us to delete your account and the data attached to it. Where a game has been paid for, deleting the account also ends access to it.
You can ask us to restrict what we do with your data while a question about it is being sorted out, or to object to processing we base on our legitimate interest.
You can ask for a copy of the data you gave us in a form that can be transferred elsewhere.
You can withdraw consent at any time: turn off news emails in your profile, or reopen the banner through “Cookie settings” at the bottom of any page. Withdrawing consent does not undo what was done while it was given.
We answer such requests without undue delay and as a rule within one month of receiving them. Where a request is complex, or where you have made several, we may extend that period by up to two further months and will tell you if we do. If our answer does not satisfy you, you can complain to the data-protection authority responsible for the place where you live.
We make no decisions about you by solely automated means that produce legal effects or similarly significant effects. We do use automated checks to protect the site — rate limits, spam filters and automatic limits on publishing where our rules are broken. If one of them has affected you, write to us and a person will look at it.
8. Children
The site is not meant for children, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will remove it.
9. Security
Passwords are stored as irreversible hashes, and the connection to the site is encrypted. Access to the data is limited to what running the service requires.
No service can rule out every incident. If a breach of personal data happens that is likely to result in a risk to you, we will notify you and the relevant authority as and to the extent the law requires.
10. Changes to this policy
When this policy changes, the new version appears on this page and the date at the top changes with it.