Last updated: June 2026
This policy explains what personal data Myrkur Games ehf. ("Myrkur", "we", "us") collects through this website, why, and the rights you have. We are the data controller. You can reach us at reception [at] myrkur.is or by post at Síðumúli 7–9, 108 Reykjavík, Iceland.
What we collect
- Contact form: your name, email address, the topic you choose and your message.
- Job applications: your name, email, phone (optional), location, portfolio and profile links, your CV/résumé file, and anything you write in the cover field.
- Security & technical: our host and our bot-protection provider process basic technical data (such as IP address and browser information) to deliver the site and to tell humans from automated abuse.
- Analytics (only if you accept): if you accept analytics cookies, Google Analytics collects anonymised usage data — pages visited, approximate location, device and referrer — to help us understand what's working. No analytics run until you opt in.
Why we use it, and our legal basis
- To reply to you (contact form) — on the basis of your consent and our legitimate interest in answering enquiries.
- To consider your application (careers) — on the basis of your consent and steps taken at your request prior to a possible employment relationship.
- To keep the site secure and working — on the basis of our legitimate interest in preventing abuse and spam.
- To measure and improve the site (analytics) — only on the basis of your consent, which you can withdraw at any time.
Cookies and similar technologies
We keep this minimal:
- Strictly necessary — used to run the site and protect it from bots, and to keep our team signed in to the admin area. These don't require consent.
- Analytics — Google Analytics, loaded only after you select "Accept". If you decline, it is never loaded. You can change your choice anytime via Cookie settings in the footer.
Who processes your data
We use a small number of trusted providers ("processors") who handle data on our behalf under data-processing agreements:
- Netlify — website hosting and form delivery.
- Supabase — database and file storage for messages, applications and CVs.
- Cloudflare — bot protection (Turnstile) on our forms.
- Google — analytics, only if you accept.
Some of these providers may process data outside the EEA. Where they do, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
- Contact messages — kept for as long as needed to handle your enquiry and our records, then deleted.
- Job applications and CVs — kept for the duration of the recruitment process and for up to 12 months afterwards, in case a suitable role opens, then deleted. Tell us sooner and we'll remove them.
- Analytics — retained according to Google Analytics' configured retention period.
Your rights
Under the GDPR and Icelandic data-protection law you can ask us to access, correct, delete, restrict or port your data, and you can object to certain processing or withdraw consent at any time. To exercise any of these, email reception [at] myrkur.is. If you believe we've mishandled your data, you can complain to the Icelandic Data Protection Authority (Persónuvernd, personuvernd.is).
Children
This site and our game are intended for adult audiences and are not directed at children. We do not knowingly collect data from children.
Changes
We may update this policy as the site evolves. We'll revise the "last updated" date above when we do.