Long Lost
English
Contact

Privacy Policy

Last updated: September 24, 2026

This policy is published in several languages. If the translations differ, the English version governs.

1. Data Controller

Long Lost Games is the data controller responsible for your personal data. The company is registered in Norway as Long Lost AS, organisation number 936 017 290. For any questions regarding this policy or your data, contact us at contact@longlost.no.

2. Information We Collect

This site has no accounts and no sign-in. The personal data you give us is what you type into the contact form: your name, your email address, the topic you choose, your message, and your company if you add it. If you subscribe to the newsletter, we also hold the email address you subscribed with.

Our host also records standard server logs, including IP addresses, for security and debugging.

3. Legal Basis for Processing

We process your personal data based on:

  • Legitimate interest: Replying to enquiries you send us, site security, and fraud prevention
  • Consent: Sending you the newsletter, if you subscribed. You can withdraw it at any time by unsubscribing
  • Steps prior to a contract: Handling your enquiry where it concerns working together
  • Legal obligation: When required by law to retain or disclose data

4. How We Use Your Information

We use your information to:

  • Reply to the enquiry you sent us
  • Send you the newsletter, if you subscribed to it
  • Provide and maintain this site
  • Keep the site secure and diagnose faults
  • Meet our legal obligations

We do not sell your data, and we do not use it to advertise to you.

5. Third-Party Processors

We use the following third-party services to operate this site:

  • Cloudflare, Inc. (USA) – Site hosting, database (D1), file storage (R2), email delivery (Email Service), and visit statistics (Web Analytics)

These providers process data on our behalf under data processing agreements and are required to protect your data in accordance with applicable laws.

The Tidespawn trailer is a YouTube (Google, USA) embed. It loads from youtube-nocookie.com and is not requested until you scroll to it, so nothing reaches YouTube unless you go as far as the video. If you do, YouTube receives your IP address and handles it under its own privacy policy rather than ours.

The Tidespawn pitch deck at pitch.longlost.no is a Canva (Canva Pty Ltd, Australia) embed. Nothing is requested from Canva until you press the button that shows the deck. If you do, Canva receives your IP address and sets its own cookies, and handles both under its own privacy policy rather than ours.

6. International Data Transfers

Your data may be transferred to and processed in the United States by our third-party providers. These transfers are protected by Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your data for the following periods:

  • Contact messages: 24 months from our last exchange with you, then deleted
  • Newsletter subscription: Until you unsubscribe, which the link in every issue does. Your address is then deleted
  • Server logs: Up to 30 days for security and debugging purposes

8. Your Rights

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Ask us to correct inaccurate data
  • Erasure: Request deletion of your data
  • Data portability: Receive your data in a machine-readable format
  • Object: Object to processing based on legitimate interest
  • Restriction: Request we limit processing in certain circumstances

To exercise these rights, contact us at contact@longlost.no. We will respond within 30 days.

9. Cookies

This site sets no cookies. There is no sign-in to keep you in, and nothing to remember between visits. We use no advertising or tracking, and we do not follow you across other sites.

We do count visits, with Cloudflare Web Analytics, on this site and on the shop: which pages are read, the site that sent you here, your country, and your kind of device and browser. It sets no cookies, stores nothing in your browser, and does not identify you or build a profile of you; it gives us totals, not people. Cloudflare runs it for us (section 5).

We do count how many times each news post is read. It is one number per post and nothing else: nothing about who read it, no cookie and no address. Bots such as search engines are not counted.

One request does leave your browser for a third party, and it is not a cookie. The Tidespawn trailer is fetched from YouTube’s no-cookie domain, but only once you scroll to it. It is described in section 5. The typefaces are served from this site.

The pitch deck site, pitch.longlost.no, is the one place a third party can set cookies, and only once you ask for it. Pressing the button that shows the pitch deck loads it from Canva, which then sets its own cookies, among them an identifier for your browser that it keeps for a year. Until you press it, nothing is requested from Canva. It is described in section 5.

The shop at shop.longlost.no is the exception: it sets two cookies of its own, described in section 10.

10. The Shop

The shop at shop.longlost.no sells our merchandise. Fourthwall, Inc. (USA) sells and ships every order: the checkout, the payment, your delivery address and the order emails are Fourthwall’s, handled under its privacy policy. Product pictures are loaded from Fourthwall’s servers, which receive your IP address.

The shop sets two cookies, both only so the shop works, and neither for tracking:

  • ll_cart: the id of your cart, set when you first add something to it, so the cart is still there on the next page. Kept for 30 days.
  • ll_cur: the currency you chose to see prices in. Kept for 30 days.

That you closed the newsletter card is remembered in that browser tab only, and forgotten when you close it. The card signs you up to the same newsletter as this site; see sections 2 and 7.

Reviews. When Fourthwall tells us about an order, we keep your email address, your first name and last initial, what you bought, and when it shipped and arrived. We do not receive your address, phone number or payment details. About a week after delivery we send one email asking you to review what you bought, and no reminders. Every email has a link to never be asked again; we then keep only a one-way code made from your address, so we can recognise it but not read it. We erase your email address and name 60 days after the invitation, or after 180 days if none was sent.

A review you write holds the name you choose to show, your rating, your words, the fit, and up to three photos. Photos are saved again without their camera data, location included. Nothing is shown until we have read it; approved reviews are public on the product’s page, under the name you chose. We keep a review until you ask us to remove it. Legal basis: legitimate interest in asking buyers what they thought of what they bought, which you can object to at any time with the link.

11. Data Security

We implement appropriate technical measures to protect your data, including encrypted connections (HTTPS) and access controls. However, no system is completely secure.

12. Children’s Privacy

Our services are not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, please contact us.

13. Changes to This Policy

We may update this policy from time to time. The date at the top of this page tells you when it last changed.

14. Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

15. Contact

For privacy-related questions, contact us at contact@longlost.no.