Privacy policy
Glimfolk by Premex AB · Updated 18 October 2026
Premex AB, Sweden, is responsible for personal data processed for Glimfolk. Contact info@glimfolk.com for privacy questions or requests.
Playing on your device
Solo progress, settings, map drafts and challenge records are saved on your device. The app checks our server for weekly challenges. Solo progress stays on your device unless you choose a cloud backup or optional gameplay statistics. This playtest has no advertising, advertising identifiers, cross-app tracking or third-party analytics SDK.
Online play and optional accounts
Online access creates a guest identifier and a session token. If you register, we store your chosen username, a password hash and a recovery-code hash. We do not ask for an email address inside the game. Keep your recovery code private. We store online matches, moves and results, shared map content, reports, blocks and any cloud backup you choose to upload.
Your display name, shared maps and match participation are visible to the players using those features. Anyone with a private map code can open that map. Maps submitted to the public catalogue are moderated before publication. Do not include personal information in map titles, descriptions or usernames.
Optional notifications
Android and iOS players can choose notifications in Settings → Notifications. Turn reminders, rematch invitations, new challenges and game news each have their own switch and are off by default. Notifications are never required to play. Enabling them sends a Firebase installation identifier, platform and your choices to our server, linked to your online account. Google Firebase Cloud Messaging and, on iOS, Apple Push Notification service process the identifiers and message contents to deliver your selected notifications. They may process data outside your country under their applicable data-protection arrangements. No advertising identifier or Analytics SDK is used for this feature.
You can withdraw your choice in the game or revoke notification permission in device settings. We remove the live push registration when you turn all notifications off, sign out or delete your account. Inactive registrations expire after 60 days or when the associated session expires. Turn and rematch delivery jobs expire after six hours; announcement jobs after 24 hours. If you are offline, server removal happens when the app reconnects; Android also checks your local choices before displaying a message. A message already delivered to your device is controlled by your device settings. We do not use notification permission to subscribe you to email.
Anonymous website statistics
Our website server counts daily page requests and clicks through to fixed store destinations. These counters contain only a page or store category, a day and a total. They do not contain visitor identifiers, cookies, IP addresses, device fingerprints, query strings or referrers. They cannot identify returning visitors or link a website visit to a player. The counters are kept for up to 400 days. We exclude requests with Do Not Track or Global Privacy Control enabled, as well as common crawlers. The website does not use an analytics script or advertising cookies.
Optional gameplay statistics and personal reminders
Players aged 16 or older can opt in under Settings → Game statistics & personal reminders. Both options are off by default and the full game works without them. Gameplay statistics include sessions, modes opened, chapters started, resumed, won or lost, rounds taken, help or goal screens opened, map publication counts, app version and platform. No map content, names, messages, advertising identifiers or precise location are collected for analytics. These events are linked to your account and installation: they are personal data, not anonymous data. An online guest account is created if needed when you enable sharing. We rely on your consent.
Personal reminders require a separate choice, gameplay sharing and device notification permission. We use the shared activity to identify simple groups, such as players who asked for help in early chapters, players ready for another chapter, returning weekly challengers or map creators. We send only reviewed reminders relevant to those groups through Firebase and Apple, at most once in seven days and twice in 30 days per installation, between 10:00 and 20:00 using the device time zone last shared. These groups do not affect prices, access, matchmaking or rewards. If you opt in, we measure reminder opens and subsequent goals to evaluate relevance. Provider acceptance does not prove that a notification was delivered or read.
Shared events and reminder history are kept for up to 90 days. An offline queue on your device holds at most 128 events for up to six days and is sent only after consent has been recorded by the server. Turning sharing off deletes queued events immediately and requests removal of the shared history and any pending personal reminders for that installation. Server deletion completes when connected. Turning personal reminders off removes the reminder history and pending reminders while leaving gameplay sharing unchanged if you still want it. Signing out, switching accounts, session expiry or deleting your account also removes the associated shared history. Other installations have their own choices. A notification already handed to Apple or Google may still arrive. We do not import previous local progress into analytics when you opt in.
Why we use this information
We use account and game data to provide the online features you request, maintain fair matches, save progress, handle reports and secure the service. We process necessary account and game data to provide the service; security and moderation also support our legitimate interest in keeping players and the service safe. Optional cloud backups are made only on your instruction. We rely on your consent for optional push registration and the notification categories you select.
Service providers and security
Our game servers and website hosting process information needed to deliver the service. Network requests include an IP address and technical connection information, which may be used for security, rate limiting and troubleshooting. Connections to the game API use HTTPS. We do not sell your personal data or share it for advertising. Apple and Google separately process store and testing information under their own privacy policies.
Retention and deletion
Account data stays while your account is active. You can delete your account in the game or request deletion from our website. Deletion revokes sessions, removes login credentials and cloud saves, removes your reports and blocks, and withdraws your shared maps. Your profile becomes “Retired kindred”. Match records and maps already copied into matches may remain so other players retain their history; they are no longer associated with an active named profile.
Restricted backups and security records may remain for recovery, security or legal purposes until their retention period ends. Backups are kept separately from the live service. Your offline save stays on the device unless you remove the app or its data.
Your choices and rights
You can play solo without registering, choose whether to upload a cloud save, and sign out or delete your account. Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Email support with your request; we may need to verify account ownership. Never email passwords, recovery codes or session tokens. You may also contact the Swedish privacy regulator, IMY.
Support and younger players
If you email support, we receive your email address and the information you choose to send and use it to respond. Please do not send unnecessary personal information. The online service is not directed at children under 13; a parent or guardian can contact us about a child’s data.
Changes
We will update this page when the game’s data practices change. The date above identifies the current policy.