Privacy policy
Last updated: 30 October 2026
Who is responsible?
Haven Games is operated by Mickey Collett-Nygaard, Denmark, who is responsible for the personal information described here. Contact support@havengames.dk. This policy covers our support and privacy websites, support emails and the games named below. We will add game-specific information before future games introduce different data processing.
Arrowhaven
Arrowhaven works offline, without an account or providing a name or email. Progress, settings and results are stored on your device; we do not receive these saves. There are no ads, advertising identifiers, tracking pixels, advertising SDKs or in-game analytics SDKs. Sound and vibration do not transmit personal information to us. Support and privacy links open external services. Local data remains until you or your operating system removes it. Uninstalling normally deletes app data, but backups may retain copies; manage those through Apple settings. We cannot restore a save from a server. Apple separately handles purchases, downloads, backups and diagnostics you choose to share. Any reports Apple provides to us are used for operation, troubleshooting and improvement, not advertising or cross-app tracking.
Support emails
Messages sent to support@havengames.dk are forwarded to the operator’s regular mailbox. We receive your address, displayed name, message and any details or attachments you provide, to respond, investigate and follow up. The GDPR basis is our legitimate interest in support and reliable service (Article 6(1)(f)); contract performance or legal obligations may apply where necessary (6(1)(b)/(c)). We keep correspondence while a case is open and afterwards only as needed for follow-up, disputes or legal duties. Unneeded information is deleted or anonymised; provider backups may persist until expiry.
Our websites
Cloudflare Pages hosts these sites. Delivery and security may process IP address, requested URL, time, browser or device details and security traffic data. We add no advertising trackers, analytics, forms, external fonts or social embeds. The page code sets no cookies and uses no browser storage; language selection follows ordinary links and is not saved. Hosting services may process technical data separately. Our basis is legitimate interest in availability and security (GDPR Article 6(1)(f)). Hosting data is retained as needed for delivery, security, troubleshooting and legal duties under service arrangements. We keep no separate visitor-profile database.
Providers and transfers
Hosting and email providers process data needed for their services. For providers acting on our behalf, we require contractual safeguards, confidentiality and protection consistent with this policy and law. Apple operates under its own terms. We do not sell personal information or share it for targeted advertising. Disclosure may be needed for legal obligations or claims. Providers may process data outside Denmark and the EEA. Where we are responsible for transfers requiring safeguards, we use applicable adequacy decisions or safeguards such as EU Standard Contractual Clauses. Contact us for details or copies.
Your rights
Depending on the law and circumstances, you may request access, correction, deletion, restriction or data portability, and object to legitimate-interest processing. Consent, where used, may be withdrawn without affecting previous lawful processing. Email support@havengames.dk; we may request proportionate identity verification and normally respond within one month under GDPR. Legal duties or claims may require retention. Manage local saves, backups and Apple diagnostics on your device; we cannot delete local saves remotely. You may complain to your local data protection authority, or Datatilsynet in Denmark.
Children, security and changes
Arrowhaven does not ask children to submit personal information or create accounts. Children should ask a parent or guardian to contact us; tell us if unnecessary personal information was sent so we can review and remove it where appropriate. We use reasonable technical and organisational safeguards, but no system guarantees absolute security. When practices change we update this policy and date, and give additional notice or obtain consent when required.