Your privacy,
clearly explained.

Who we are.

Case & Candle is operated by PAYPRECISE LTD, registered in England and Wales under company number 17202696. PAYPRECISE LTD is the data controller responsible for the personal information described in this notice.

For privacy questions, requests or complaints, email hello@payprecision.co.uk or write to our registered office, marking your correspondence “Case & Candle privacy”.

This notice covers Case & Candle. Other websites operated by the company, including PayPrecise, have their own privacy information.

Information we use, and why.

You do not need to give us your name or email to browse the marketing pages. An email address is required to open the free case. Contacting us is otherwise optional, but without a reply address or enough information about the issue, we may not be able to help.

Private game feedback.

Giving feedback is optional. Tapping a thumb opens a form. We save your vote only when you send it, together with the required reason and any optional story detail or comment, the case and edition, whether you responded during play or at the ending, and the submission and update times. Your answers, notebook text and saved game are not included.

We use a pseudonymous identifier derived from your existing access marker to keep one editable response per case edition and stage. Your email address is not included in the feedback record or owner view. Your response is visible only through the private owner service; ratings and comments are not published.

We use this feedback to understand enjoyment, identify story or interface problems and improve the games. Our lawful basis is our legitimate interest in improving the service and controlling duplicate or abusive submissions. We limit collection to feedback you choose to give, protect owner access and keep it separate from marketing. See the ICO guidance on legitimate interests. You can object or request deletion by contacting us.

Feedback is stored in our Netlify database. Responses last updated more than 12 months ago are excluded from results and deleted when the owner reviews feedback. Provider backups may take longer to expire. Your owner sign-in, if applicable, uses an essential secure cookie called cc_feedback_owner, which expires after eight hours. Failed sign-in attempts are counted to protect access; the count does not contain a submitted password or IP address.

Optional free-mystery journey analytics.

If you allow analytics, we record when you start the free game, reach each act, open its ending, choose a paid case and complete a resulting purchase. We store the story edition, milestone, act or paid case, time, and a pseudonymous identifier derived from your existing free-case access marker. We do not include your email, answers, notes or feedback text in these events.

These consent-based measurements help us compare story editions and improve the free-to-paid journey. They are stored in our Netlify database, separated from test activity, and shown only in the private owner view. Repeated milestones are counted once per player, edition and destination. We keep them for up to 12 months, removing expired records when the owner reviews the journey counts.

With analytics allowed, this browser remembers the free edition you played for up to 30 days to attribute a later paid-case purchase. Checkout receives that edition and a pseudonymous marker, and the purchase milestone is recorded only after payment is confirmed. Declining or withdrawing analytics stops new browser milestones and clears this browser’s attribution preference; it does not delete events already collected. You can request deletion by contacting us. Analytics is optional and separate from email marketing consent.

Cookies, analytics choices & saved game progress.

Fonts and artwork are served with the website. Google Analytics does not load until you allow it. When allowed, it may use cookies or similar storage to distinguish visits and measure website use.

We save your choice as case-and-candle:analytics-consent:v1 in local browser storage. This preference is necessary to remember whether you allowed or declined analytics. It stays until you change it, clear this website’s data or your browser removes it.

When you play, the game also uses browser storage to remember progress, opened records, answers, hints, notes and display preferences. The saved game stays in that browser on that device and is not automatically sent to us with page requests.

We use these records to let you continue your investigation. Where your notes contain personal information, our legitimate interest is providing that continuity. The game does not need real personal details in your notes; please keep them about the fictional case.

There is no account backup or cross-device synchronisation. Anyone with access to the same browser profile may be able to see the saved game. If you send us notes or screenshots for support, the information you send becomes part of that correspondence.

The free case, The Shortest Day, uses its own save: case-and-candle:free:the-shortest-day:four-act-v5. Its game screen sends optional milestones only when analytics is allowed. Answers, notes and story choices are not sent to analytics. The previous edition’s save remains untouched; returning players start the revised case afresh, with earlier notes carried over where readable. You can clear only that case using “Start again” in the game.

After you enter your email, an essential secure cookie called cc_free_case_access remembers access for up to 180 days. The cookie contains a signed access marker, not your email address, answers or notes. It is separate from paid-case access.

Your controls

Review or change your cookie choices. If you withdraw consent after Google Analytics has loaded on the current page, the page reloads to stop further analytics activity. You can also use your browser’s site-data settings to remove the saved choice, analytics data, free-case access cookie or game progress. Clearing data can remove progress for every case on this website. Blocking storage may prevent saving; check the in-game save status before leaving. See our saving guidance.

Paid orders & access.

When paid sales open, we will keep the checkout email, Stripe session and payment references, case, amount, currency, payment status, purchase time, the purchase-terms version and the record of your immediate digital-supply consent. We use these details to perform the purchase contract, provide access, prevent duplicate grants and handle support, refunds and disputes. Stripe receives and processes the payment details; we do not receive your full card number.

A paid access grant expires 12 months after purchase. An essential secure cookie called cc_case_access lets the paid route recognise that grant and expires no later than the remaining access term. The cookie contains a signed access marker rather than your email address, card details, answers or notes. A return link can renew the browser cookie only while the underlying grant remains active.

Sharing & overseas processing.

We do not sell personal information or share it for advertising. Your game saves are not uploaded to us.

The services involved

• Google — consented analytics and Gmail: Google Analytics measurement ID G-8NLKKXC8F7 loads only after you allow analytics. Google also provides our company mailbox and handles message content, attachments, sender and recipient details and delivery information. See Google’s privacy policy.
• Ahrefs — aggregate website analytics: Ahrefs processes page and interaction metadata as described above. Its privacy policy explains its processing and retention arrangements.
• Netlify — website hosting and free-case access: Netlify delivers the website, runs the access functions and stores the email-access record. It also processes the technical request and security information needed to operate the service. See Netlify’s privacy information and data processing agreement.
• Resend — access email delivery: Resend receives the email address and message details needed to send the requested return link and records delivery events used to diagnose failed or unwanted email. See Resend’s privacy policy.
• Stripe — payments: Stripe handles payment information, transaction details and fraud-prevention checks for paid cases. Stripe can act as a controller for its own regulatory and fraud-prevention purposes as well as processing information for merchants. See Stripe’s privacy policy.

People handling your enquiry need access to the relevant correspondence. We may also need to disclose information to professional advisers or public authorities to deal with a dispute or meet a legal requirement.

Processing outside the UK

These providers operate internationally, including in the United States. Google describes its transfer arrangements in its data transfer frameworks; Netlify’s arrangements are set out in its data processing agreement, Resend describes its safeguards in its privacy information, and Stripe publishes a data transfers addendum.

Their published mechanisms include UK-recognised adequacy arrangements, including the UK Extension to the EU–US Data Privacy Framework where applicable, and approved contractual safeguards where needed. Contact us for information or copies of the protections relevant to your information. Browser-only game saves are not transferred overseas by the game.

Links to provider policies, Companies House and the Information Commissioner’s Office take you to independent websites with their own privacy practices. Following a link does not send them your saved game.

How long information is kept.

• Analytics choice: the choice saved in your browser has no automatic expiry. It stays until you change it, clear this website’s data or your browser removes it.
• Analytics information: retention follows the setting applied to the Case & Candle Google Analytics property.
• Game saves: there is no automatic expiry in the game. Progress stays until you remove it, a game reset clears it where available, or your browser removes it. Closing a tab does not normally delete a successful save.
• Free-case access: the access cookie expires after 180 days. We keep the email-access record while the service is available and for as long as reasonably needed to provide return access, honour marketing choices and control misuse. You can ask us to delete it, subject to any record we must keep for legal or suppression purposes.
• Enquiries: we keep correspondence for as long as needed to resolve the issue and any related follow-up. When deciding whether longer retention is necessary, we consider ongoing disputes, legal obligations and the need to explain how an issue was handled.
• Privacy requests and complaints: we keep enough information to respond and demonstrate how we dealt with the request, taking account of any continuing complaint or legal requirement.
• Hosting and delivery records: retention reflects Netlify’s and Resend’s service arrangements and the need to investigate delivery faults or security incidents.
• Purchase records: retention takes account of providing access, handling support or disputes and meeting tax and accounting obligations. Stripe also retains information for its own legal and fraud-prevention purposes, as described in its policy.

We delete or anonymise information when it is no longer needed for those purposes. Provider backup copies may take longer to be removed under their own deletion processes. Browser-saved choices and progress are under your device’s controls; we cannot remotely erase or recover them.

Your rights & complaints.

Depending on the circumstances, you can ask to access your personal information, correct inaccuracies, erase it or restrict its use. Data portability may apply to information you supplied where processing is automated and based on consent or a contract.

Your right to object: you can object to processing based on legitimate interests because of your particular circumstances. We must stop unless we can show compelling grounds that override your interests and rights, or the information is needed for legal claims.

You can withdraw optional marketing consent at any time without affecting earlier lawful processing. Use the unsubscribe option in a marketing email or contact us. Withdrawing marketing consent does not close your free-case access.

Send requests to hello@payprecision.co.uk. We normally respond within one calendar month. We may need proportionate identity checks, and the law allows extra time in some circumstances; we will explain if that applies. Requests are normally free.

You can complain to the UK Information Commissioner’s Office through its complaints service. We welcome the chance to put things right if you contact us.

Currency preferences.

We use the country inferred by our hosting provider from your connection to suggest a payment currency. You can change it at any time. If you choose a currency, we remember that preference in this browser when storage is available. This currency feature does not save your IP address or send your selection to analytics. Clearing browser storage removes the preference.

Security, children & automated decisions.

Use a device and browser profile you trust. Do not put passwords, payment details or sensitive information in your game notes or support messages. No website, device or email service can guarantee complete security.

Case & Candle games are intended for adults. We do not offer children’s accounts or ask children to submit personal information. If a child has sent us personal information, please contact us so we can address it.

The game checks fictional-case answers and saves progress. It does not make decisions about you with legal or similarly significant effects, or profile you for advertising.

Changes & future purchases.

The free-case email form does not collect order, billing or payment-card information. Paid-case checkout and access are described at the point where those services are offered.

Processing an order and delivering paid access relies on performing the purchase contract. Required accounting records rely on legal obligations, and proportionate fraud-prevention activity on legitimate interests. The checkout notice explains the information required and the effect of not providing it before you pay.

We will update this notice when our services or providers change. We do not use the analytics choice as marketing consent; the optional marketing choice on the free-case form is separate.

Questions about this notice? Email hello@payprecision.co.uk.