Privacy policy
Last updated 13 October 2026
This page explains what Walk & Solve and Mordpromenad store about you, why we do it, how long we keep it and what rights you have.
Who is responsible
Walk & Solve and Mordpromenad are run by Patrik Gineman, who is the data controller. The business does not have a company yet. When it moves to a limited company, we will update this page and email everyone on our list.
Contact: [email protected]. Write to us if you have questions or want to use your rights.
When you sign up
When you sign up as a beta tester or location scout, or want to know when we come to your town, we store:
- your email address
- the town you chose and, if you wrote one, where you would like a mystery
- which phone you have and which language the page was shown in
- whether you want to be a location scout
- which cases you chose to test, and a personal code that makes the links in our emails work only for you
- when you gave your consent and when we emailed you
We also store a copy of what you sent in the form, when it was sent and how you found us, for example a campaign code in the link or the website that linked here. We use this to see which channels work.
Why: to invite you to the beta test, email you about the beta test and the launch, give you the beta discount and decide which towns to focus on.
Legal basis: your consent. You can withdraw it at any time.
How long: until you unsubscribe. When the beta discount has expired, six months after launch, we delete the data unless you have become a customer or given us new consent.
When you play a case
The game runs in your phone's browser. We store:
- the code of the game link, which case it is for, and when it was started and expires
- the team name and the team's progress: which clues you have found, your answers and notes, hints you asked for and your score
- a random code for each phone that joins the team, at most six per game link
- the email address the game link was sent to, if we sent it
Progress is stored on our side so that everyone in the team sees the same thing and you can continue if a phone is swapped.
Your location: the phone's GPS is only used on the phone to check whether you have reached a location. Your position is not sent to us and is not stored.
Why and legal basis: to make the game work, which means providing the service you asked for.
How long: for 12 months after the game link has expired. After that we delete the team name, the notes and the email address.
The survey after the game
After the finale you can answer a short survey. We store the answers, the team's score and playing time, the type of phone you played on and, if you wish, an email address we may contact.
We use the answers to improve the cases, which is a legitimate interest. The email address is optional and only used to contact you about your answers. We keep the answers as long as the case exists. We delete the email address after 12 months.
Quotes: if you write a quote about the experience and tick the box allowing us to publish it, we may show the quote and the name you gave on mordpromenad.se, walkandsolve.se and in social media. The legal basis is your consent. You can withdraw it at any time by emailing [email protected], and we will then remove the quote wherever we have published it. Without the tick, only we read the quote.
When you suggest a location
As a location scout you can send us places with a name, address, position on the map, a story and photos. The tip is linked to your sign-up so that we can thank you and send your free case if we use it.
The legal basis is your consent. If we use the tip, the place and the story may become part of a case, but your name and email never appear in the game. Please do not upload photos where people or number plates can be recognised. We delete tips we do not use 12 months after they were sent.
When you record voices
Sometimes we invite someone to record lines for an interview in the game. We then store the reader's name, the recordings and when you agreed to their use. The voice is played to everyone who plays the case. If you have also agreed to it, we may use the recordings to create an AI voice for the same role.
The legal basis is your consent. If you withdraw it, we remove your recordings from the game and delete them within 30 days.
When your company or organisation contacts us
If you send us an enquiry about an event or a custom case, we store your name, organisation, email, phone number and what you wrote. We use the details to reply and prepare a quote, which is a legitimate interest. If there is no deal, we delete the enquiry after 12 months. If there is a deal, we keep what Swedish bookkeeping law requires.
Accounts for people who help us
Writers, location scouts and others who help us make cases can get an account. We then store name, email, role and when you logged in. The password is only stored in a form that cannot be read back. The account is removed when you should no longer have access.
Cookies and browser storage
We use no cookies for advertising or statistics, and no tracking by other companies. The fonts are served from our own server.
- The game stores the team's progress and the phone's code in the browser's local storage, so that the game works even if the page is reloaded.
- The login for people who help us uses a cookie that is needed to stay logged in.
This is needed for the service to work, which is why we do not ask for consent to it.
Who helps us with the data
We never sell your data and never share it with anyone for advertising. Two companies process data on our behalf:
- Cloudflare runs our websites and the database. Cloudflare is a US company. The transfer to the US is protected by the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses. Cloudflare also handles technical data such as IP addresses in its logs, to protect the sites against attacks.
- Brevo (Sendinblue SAS, France) sends our emails. Brevo receives your email address and the content of the email. The data stays within the EU.
Your rights
You have the right to:
- know what data we have about you and get a copy of it
- have errors corrected
- have your data deleted
- restrict how we use it, and object to what we do on the basis of legitimate interest
- receive data you have given us in a portable format
- withdraw your consent, which does not affect what we have already done
Email [email protected] and we will reply within a month. If you just want to stop receiving emails, reply to one of our emails with the word unsubscribe.
If you are not happy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection, imy.se, or the data protection authority in your country.
Children
You must be at least 13 to sign up. Younger children are welcome to play with an adult, but then the adult signs up.
Changes
We update this page when something changes, for example when we start a company or begin selling cases. The date at the top shows when the page was last changed. We email you about larger changes.