Six things worth knowing
- No analytics, no advertising pixels and no tracking cookies. We don't sell your data or use it for ads.
- We only get personal data when you contact us: through the brief form, by email or on Telegram.
- Briefs from the form are delivered to a private Telegram chat that only our team reads.
- Cloudflare hosts the site. Fonts come from Google Fonts, and on desktop a small scrolling script comes from jsDelivr. These providers see your IP address when your browser fetches their files.
- The demo games keep your progress and settings in your own browser. That data never reaches us.
- You can ask to see, correct or delete your data at any time: hello@scatterhaus.com.
01Who is responsible
Scatterhaus is a business-to-business studio: we make games for casinos and operators, and landing pages, pre-landers, ad creatives and playable ads for affiliates and media buyers. In this notice, "we", "us" and "Scatterhaus" mean the studio.
The controller of your personal data is Rastezh Digital EOOD, the company that owns the Scatterhaus brand, established in the European Union. Its full legal details are provided on request and in every contract.
For anything about privacy, write to hello@scatterhaus.com. A person on our team handles these requests. We have not appointed a data protection officer.
02When you simply browse
Our own code does not collect personal data while you look around. There is no analytics script, no advertising or social media pixel, and no session recording. A few things do happen in the background, because that is how websites work:
Hosting and security (Cloudflare)
Cloudflare delivers the site and protects it from attacks. To do that it processes the technical data your browser sends with every request: your IP address, the page requested, the time, your browser and device type, and the referring page. In Cloudflare's dashboard we can see aggregated traffic figures, such as requests per day and visits by country. We don't add any analytics on top of that.
Fonts (Google Fonts)
Our fonts (Inter, JetBrains Mono and Unbounded, plus a few display fonts on the demo landing pages) load from Google's servers at fonts.googleapis.com and fonts.gstatic.com. Your browser fetches them directly, so Google receives your IP address and browser details.
Smooth scrolling (jsDelivr)
On computers with a mouse or trackpad, and only if your device does not ask for reduced motion, the site loads a small open-source scrolling library (Lenis) from cdn.jsdelivr.net. jsDelivr receives the same kind of technical data. Touch-only devices such as most phones don't load it.
Why and on what basis: to deliver a secure, working, consistently designed website. That is our legitimate interest under Article 6(1)(f) GDPR.
03When you send us a brief
The "Start a project" form is a short wizard that asks about your project. Here is what happens to your answers.
What we receive
- What you type: your role, company, target markets, what you need, project details, budget and timing, how you found us, your name or nickname, your email and/or Telegram handle, how you prefer to be contacted, any reference links, and your notes.
- A few technical details that help us reply well: your approximate country (worked out by Cloudflare from your IP address when you send the brief), your browser's time zone and language, how long the form took to fill in, any campaign tags (
utm_…) in the link that brought you here, and a reference number for the brief.
How it travels
Your browser sends the brief to a small Cloudflare function on our own domain. The function checks it, formats it, and posts it through Telegram's Bot API to a private Telegram chat that only our team can read. The function does not save the brief anywhere else, and it does not forward your IP address.
Spam protection
The form uses a hidden field that only bots fill in, a minimum filling time, size limits, and a limit of five briefs per network every ten minutes. For that limit your IP address is turned into a one-way code (a hash), which is held in memory and may also be held in Cloudflare's storage, for no more than ten minutes. The raw IP address is never sent to us or stored by our code.
Your unsent draft
While you fill in the form, it saves a draft in your own browser so you don't lose your work if the tab closes. The draft is deleted from your browser when the brief is sent or when you start over. See section 05.
If the form can't send
If the function is unavailable, the form offers to open your own email app with the brief filled in, to copy it, or to open our Telegram. The quick form on our contact page works the same way: it opens your email app with your answers filled in, and nothing is sent until you press send there. In these cases the message travels through your own email or Telegram provider instead of through our function.
Why and on what basis
- To answer your enquiry, prepare a proposal and, if we agree, start a project. These are steps taken at your request before a possible contract (Article 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Article 6(1)(f)).
- The technical extras (country, time zone, campaign tags, how you found us) help us reply at a sensible hour and understand which channels bring us work. That is our legitimate interest (Article 6(1)(f)).
- The required box "Yes, contact me about this brief" confirms that you want a reply. We use your details for that conversation and any project that follows. No newsletters, no mailing lists.
04When you email or message us, or work with us
Email and Telegram. If you write to hello@scatterhaus.com or message @Scatterhaus on Telegram, we receive your message, your email address or Telegram name and handle, and anything you attach. We use it to reply and to handle your request, on the same legal bases as briefs (Article 6(1)(b) and (f) GDPR).
Clients. If we work together, we process business contact details, project communication and billing information to perform the contract (Article 6(1)(b)) and to meet our accounting and tax duties (Article 6(1)(c)). Details are set out in the contract.
05Cookies and browser storage
We don't set cookies. There are no tracking, analytics or advertising cookies on this site, which is why you won't see a consent banner. If Cloudflare's bot protection decides to check a visit, it may set a strictly necessary security cookie (such as __cf_bm or cf_clearance). These only help tell people from bots.
Some features remember things in your browser's own storage (localStorage and sessionStorage). This data stays on your device. It is never sent to us, and we can't see it. It is strictly necessary for features you choose to use, so it needs no consent.
| Key | Used by | What it remembers | How long |
|---|---|---|---|
sh-intro | Whole site (sessionStorage) | That you have already seen the intro animation | Until you close the tab |
sh-cookie | Whole site | That you closed the "no cookies here" note | Until you clear it |
sh-brief-draft-v1 | Start a project form | Your unsent brief | Until the brief is sent, you start over, or you clear it |
sh-meta-v1 | Originals demo games | Your demo profile: level, XP, daily missions, achievements and play-money round stats | Until you clear it |
sh-sound sh-calm | Originals demo games | Sound on or off; calm mode (less screen shake and flashing) | Until you clear it |
vp.muted vp.music vp.intro.hide | Vampir slot demo | Sound and music settings; "don't show the intro again" | Until you clear it |
Play-money balances in the demos have no cash value and are not linked to you. To remove everything above, clear this site's data in your browser settings.
06Who helps us
We share personal data only with the service providers we need to run the site and talk to you, and only for the purposes above.
| Provider | What they do for us | Data involved |
|---|---|---|
| Cloudflare | Hosting, content delivery, security, and running the brief function | Technical request data (IP address, browser, pages); brief contents while they pass through the function |
| Telegram | Delivering briefs to our private team chat; messages you send us on Telegram | Brief contents; your Telegram name and messages |
| Google (Google Fonts) | Serving our web fonts | IP address and browser details |
| jsDelivr | Serving the smooth-scrolling library on desktop | IP address and browser details |
| Our email hosting provider | Receiving and storing email sent to hello@scatterhaus.com | Your emails, your email address, attachments |
We may also share data with professional advisers (such as accountants or lawyers) where needed, or with authorities when the law requires it. We never sell personal data.
Transfers outside the EEA
Some of these providers are based in, or process data in, countries outside the European Economic Area, including the United States. Where that happens, we rely on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework, for providers certified under it) or on the Commission's standard contractual clauses where the provider offers them. For messages you choose to send us through Telegram, the transfer is necessary to deal with your own request (Article 49(1)(b) GDPR). Ask us if you'd like more detail.
07How long we keep it
- Briefs, emails and messages that don't turn into a project: deleted within 24 months of our last exchange.
- Client records: for as long as the contract runs, then for as long as accounting and tax law requires.
- Rate-limit codes (hashed IP addresses): ten minutes at most.
- Technical logs kept by Cloudflare, Google and jsDelivr: according to their own retention policies.
- Browser storage: on your device until it is cleared, as shown in section 05.
08Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- delete your data ("right to be forgotten"), unless we have to keep it by law;
- restrict how we use it while a question is being sorted out;
- receive data you gave us in a portable format, or have it sent to someone else;
- object at any time to processing based on our legitimate interests;
- withdraw consent at any time, where we rely on it (this doesn't affect what happened before);
- complain to a data protection authority, in particular in the EU country where you live or work or where you think the problem happened. We'd appreciate the chance to fix it first.
To use any of these rights, email hello@scatterhaus.com. It's free. We reply within one month, and we may ask for something that confirms the request really comes from you.
09A few more things
No automated decisions. We don't profile you or make decisions about you by automated means alone.
Under 18s. This site and its demos are for adults working in the industry. We don't knowingly collect data from anyone under 18. If you think a minor has sent us data, tell us and we'll delete it.
Security. The site is served only over HTTPS. The brief function keeps its access keys on the server, and only our team can read the brief chat and the mailbox.
Links. Sites we link to, including Telegram and the help organisations on our responsible gaming page, have their own privacy policies.
Changes. If our setup changes, for example a new provider, we'll update this page and the date at the top before the change goes live.
10Contact
Questions, requests or worries about your data: hello@scatterhaus.com. A human reads every message.