Skip to content
This website is still under construction. Sales have not started yet – orders are not possible at the moment.
Murdernight

Privacy policy

This is a translation provided for your convenience. Only the German version is legally binding.

Last updated: October 2026

1. Controller

The controller for data processing on this website is Murdernight, Hinterer Glockenberg 5b, 96450 Coburg, Germany, email: info@murdernight.de. Full provider details can be found in our legal notice. We have not appointed a data protection officer as we are not legally required to do so.

2. Hosting and server log data

This website is hosted by Netlify, Inc. (USA). Each time a page is accessed, the host processes technically necessary data: IP address, date and time, the page accessed, the referring page, browser and operating system. This is required to deliver the website and protect it against attacks (Art. 6 (1) (f) GDPR; our legitimate interest is secure and stable operation). We do not analyse this data ourselves. The data may also be processed in the USA (see section 11).

3. Orders and payment

For your order we process the data you provide during checkout: email address, name, billing address (where requested), the mysteries you buy and the payment method.

Payment is processed by Stripe Payments Europe, Ltd. (Ireland). You enter your payment details directly with Stripe; we do not receive them. Stripe also transfers data to Stripe, Inc. in the USA. Depending on the payment method you choose, the following are also involved: PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) for payments with PayPal, and Klarna Bank AB (publ) (Sweden) for payments with Klarna. Klarna may carry out an identity and credit check on its own responsibility to decide on the payment method; details can be found in Klarna's privacy notice, which is shown to you during checkout. If checkout offers further payment methods, the same applies to the respective provider.

Legal basis: Art. 6 (1) (b) GDPR (performance of the contract) and Art. 6 (1) (c) GDPR (statutory retention obligations).

4. Order confirmation and download

After your purchase we send you the order confirmation and a link to your files by email. The game files are stored with Cloudflare, Inc. (USA); when you download them, Cloudflare processes your IP address. If you request a new download link, we check the email address you enter against our orders at Stripe and send the link only to that address. Legal basis: Art. 6 (1) (b) GDPR.

For a statistic on which version (print or digital) is bought, we store only the mystery, version, price and a technical order ID per order, without name or email address (Art. 6 (1) (f) GDPR; our legitimate interest is improving our offer).

5. Sending emails (Resend)

We send all emails from this website (order confirmations, download links, newsletter confirmations, forwarding of contact requests) via Resend, a provider based in the USA. We use servers in the EU region; access from the USA is nevertheless possible. Your email address, the content of the email and technical delivery data are processed. Legal basis: depending on the purpose, Art. 6 (1) (b) or (a) GDPR.

6. Newsletter and free mini mystery

If you sign up for our newsletter, we send you an email with a confirmation link (double opt-in). You are only subscribed once you click it. We use your email address to inform you about new mysteries and offers. To prove your consent, we record the time of sign-up and confirmation. Legal basis: Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or by sending us a message.

You receive the free mini mystery in return for signing up for the newsletter, so signing up is the condition for the download. This is voluntary: you can buy our paid mysteries without a newsletter. If you unsubscribe later, you may keep the mini mystery.

7. Reviews

After a purchase you can review a mystery. For this we store the stars, your text, the name you provide, the language and a pseudonymous buyer ID derived from your email address. The ID ensures that only buyers can review and that each buyer can review each mystery only once. Name and text are displayed publicly with the mystery. You do not have to use your real name; a first name or nickname is enough.

Legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time by email; we will then delete the review. Reviews and the order statistic are stored in a database of Supabase, Inc. (USA).

8. Contact form and email

If you write to us via the contact form or by email, we process your name, email address and message to answer your enquiry. Messages from the form are forwarded to our mailbox via Resend. Legal basis: Art. 6 (1) (b) GDPR if your enquiry concerns an order, otherwise Art. 6 (1) (f) GDPR (our legitimate interest in answering enquiries).

9. Withdrawal via our website

If you declare a withdrawal via our website, we process your name, email address, order number and message to review the withdrawal and confirm receipt to you (Art. 6 (1) (c) GDPR).

10. Cookies and local storage

We do not use any statistics, analytics or marketing services and no cookies for advertising purposes. We only store what is necessary for the website to work on your device: the content of your cart, your choice in the cookie notice and the display mode (light/dark) in your browser's local storage, and your chosen language in a cookie if you switch languages. Legal basis: § 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR.

Fonts are embedded locally. No connection to Google is established when you visit the website.

11. Transfers to third countries

Netlify, Inc., Stripe, Resend, Cloudflare and Supabase are companies based in the USA or belong to such companies. Personal data may therefore be transferred to the USA. On 10 July 2023 the European Commission adopted an adequacy decision for the USA (EU-US Data Privacy Framework). Transfers to certified companies are based on it (Art. 45 GDPR). Where a provider is not certified, the transfer is based on the EU standard contractual clauses (Art. 46 (2) (c) GDPR).

12. Storage period

  • Order and payment data: for as long as statutory retention obligations apply; under German commercial and tax law generally up to 8 years.
  • Download links: valid for 7 days; we do not store them separately.
  • Contact enquiries and withdrawals: until they have been dealt with, unless statutory retention obligations apply.
  • Newsletter: until you unsubscribe; proof of your consent for up to 3 years thereafter.
  • Reviews: until you withdraw your consent or we remove the review.
  • Server log data: according to the host's specifications; we do not analyse it.
  • Local storage and cookies on your device: until you delete them in your browser.

13. Obligation to provide data and automated decisions

To make a purchase we need your email address and payment details; without them we cannot perform the contract. Any other information is voluntary. We do not use automated decision-making including profiling; regarding a possible credit check by Klarna, see section 3.

14. Your rights

You have the right to:

  • access (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw consent at any time with effect for the future (Art. 7 (3) GDPR),
  • lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), www.lda.bayern.de.

An informal message to info@murdernight.de is sufficient.

Right to object (Art. 21 GDPR): If we process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims. You can object to advertising by email at any time without giving reasons. An informal message to info@murdernight.de is sufficient.