1. Introduction
This Privacy Policy explains how VORVA Studios (“we”, “us” or “our”) processes personal information when you visit https://vorvastudios.com (the “Website”) or use the contact form.
VORVA Studios is an independent online slot-game development brand based in Denmark. We develop original games using Stake Engine. This Website presents our studio and games; it does not operate a casino, accept deposits or provide real-money gambling.
For privacy requests, contact us at info@vorvastudios.com.
2. Personal information from the contact form
When you submit the contact form, we collect the information you provide:
- Name
- Business email address
- Company name (optional)
- Inquiry type (for example partnership, operator, press, careers or other)
- Your message
A hidden honeypot field may also be present to help reduce automated spam. Legitimate visitors should leave it empty; we do not use it as a data source for people.
3. Technical data from website visits
When you visit the Website, standard technical information is processed so the site can be delivered and secured. Depending on your connection and our hosting setup, this may include:
- IP address
- Approximate location derived from IP (city/region level, where provided by our hosts)
- Browser type and version, device type and operating system
- Pages requested, referrer URL, timestamps and response status
- Other request metadata commonly recorded in web server or edge logs
We do not use this technical data to build marketing profiles of individual visitors, and we do not sell personal information.
4. Vercel hosting and Web Analytics
The Website is built with Next.js and is intended to be hosted on Vercel. When the site runs on Vercel, Vercel may process technical request data (including IP addresses and request logs) to host, secure and operate the deployment.
Where Vercel Web Analytics is enabled for the project, we receive aggregated, privacy-oriented usage statistics (for example page views and referrers). Vercel documents Web Analytics as not relying on cookies for that product. Analytics help us understand how the Website is used so we can improve content and reliability.
5. Cloudflare DNS and security services
Domain name services for vorvastudios.com are managed through Cloudflare. Cloudflare may process DNS queries and related technical data as part of resolving and protecting the domain. Depending on how DNS and security features are configured, Cloudflare may also see traffic metadata associated with those services.
6. Cloudflare Turnstile
The contact form is protected by Cloudflare Turnstile, a bot-detection challenge. When you use the form, Turnstile processes technical browser and device signals and may process your IP address to help distinguish human visitors from automated traffic. We verify Turnstile tokens on our server before accepting a submission. We do not use Turnstile for advertising.
7. Business email (Apple iCloud Mail)
Business correspondence sent to info@vorvastudios.com is received through Apple iCloud+ Custom Email Domain (iCloud Mail). Messages you send to that address—and contact-form messages delivered to that inbox—are stored and processed according to Apple’s terms and privacy practices for iCloud Mail, in addition to this Policy.
8. Contact-form email delivery (Resend)
When contact-form email delivery is configured for a deployment, submissions are sent to our business inbox (info@vorvastudios.com) using Resend’s email API. Resend processes the content of your submission (name, email, optional company, inquiry type and message) and related delivery metadata for the purpose of delivering that email. Outbound messages may be sent from an authenticated sending address on a studio subdomain used only for transactional website mail. If delivery is not configured, the Website will not claim that your message was sent.
Optionally, and only when we have enabled visitor confirmations for that deployment, we may also send you a short transactional acknowledgement that we received your inquiry. That is not a marketing subscription.
9. Purposes and lawful bases (GDPR)
We process personal information for the following purposes. Where the EU General Data Protection Regulation (GDPR) applies, we rely on the lawful bases indicated:
- Responding to inquiries and managing related business discussions — legitimate interests (Art. 6(1)(f)), namely operating our studio’s public inquiry channel and following up on partnership, press or other business contact. Where a discussion leads toward a contract, processing may also be necessary for steps at your request prior to entering a contract (Art. 6(1)(b)).
- Operating, securing and improving the Website (hosting, logs, bot protection, aggregated analytics) — legitimate interests (Art. 6(1)(f)) in keeping the site available, secure and useful.
- Complying with legal obligations that may apply to us — Art. 6(1)(c), where such obligations exist.
You may object to processing based on legitimate interests where applicable; see “Your rights” below.
10. Processors and international transfers
We use carefully selected service providers that process data on our behalf or as independent controllers of their own services, including:
- Vercel, Inc. — hosting, related infrastructure logs and, where enabled, Web Analytics
- Cloudflare, Inc. — DNS, related security services and Turnstile
- Resend, Inc. — transactional email delivery for the contact form (when configured)
- Apple Inc. — iCloud Mail for receiving business email at info@vorvastudios.com
Several of these providers are based in, or may process data in, the United States or other countries outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on appropriate safeguards made available by the provider—typically the European Commission’s Standard Contractual Clauses and any supplementary measures they describe—together with their published privacy documentation. You can review each provider’s current privacy and transfer information on their websites.
11. Retention
We keep contact-form and business email correspondence for as long as needed to handle your inquiry and any related business relationship, and thereafter for a limited period for continuity and legitimate record-keeping—generally up to 24 months after the last meaningful exchange, unless a longer period is required for an ongoing matter or by applicable law. We then delete or anonymise messages we control, subject to ordinary backup cycles.
Hosting, CDN, security and email providers may retain their own operational logs and system records according to their product settings and policies. We do not control those provider retention periods in full; they are separate from how long we keep inquiry content in our mailbox.
12. Cookies and necessary security technologies
The Website is designed to work without advertising or tracking cookies. Essential technologies required for security and delivery—such as Cloudflare Turnstile’s challenge mechanisms and any strictly necessary cookies or local storage used by our hosts or security providers—may be used to operate the contact form and protect the site. Vercel Web Analytics, where enabled, is documented by Vercel as not depending on cookies for that product.
If we introduce non-essential cookies in the future, we will update this Policy and obtain any consent required by law.
13. Your rights
If GDPR or other applicable data-protection law gives you rights in relation to your personal data, those rights may include:
- Access to personal data we hold about you
- Rectification of inaccurate data
- Erasure (“right to be forgotten”) in certain circumstances
- Restriction of processing in certain circumstances
- Data portability, where applicable
- Objection to processing based on legitimate interests
- Withdrawal of consent, where processing is based on consent
- Lodge a complaint with a supervisory authority
In Denmark, the supervisory authority is the Danish Data Protection Agency (Datatilsynet). To exercise your rights with us, email info@vorvastudios.com. We may need to verify your identity before responding.
14. Data security
We take reasonable technical and organisational measures appropriate to the nature of a small studio website—including HTTPS, same-origin checks on the contact API, input validation, rate limiting, honeypot and Turnstile bot checks, and restricting server secrets to the hosting environment. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
15. Links to third-party services
The Website may link to third-party sites or platforms (for example Stake Engine or other external resources). Their privacy practices are their own. This Policy applies only to vorvastudios.com and to personal information we process as described here.
16. Changes
We may update this Privacy Policy from time to time. The “Last revised” date at the top of this page will change when we do. Continued use of the Website after an update means you should review the revised Policy. Material changes that affect how we handle personal information will be reflected on this page.
17. Contact
VORVA Studios
Website: https://vorvastudios.com
Privacy and general inquiries: info@vorvastudios.com
Contact form: vorvastudios.com/contact
Based in Denmark.