Privacy Policy

Last updated: August 16, 2026

The data controller is MiGame Oy, business ID 2254874-7, Helsinki, Finland. Contact: [email protected] or the MiGame support form.

We may collect customer account details, name, email address, phone number, billing details, order information, product information, delivery status, payment status, customer support messages, device and browser information, IP address, cookie identifiers and fraud-prevention information.

We process personal data to operate the online store, process payments, deliver digital products, process and ship physical orders, provide receipts and tracking, show order history, provide customer support, prevent fraud and abuse, comply with legal obligations and improve the service.

The main legal bases are performance of a contract, legal obligation, legitimate interest and consent. Consent is used for non-essential cookies and marketing where required.

MiGame does not store full card numbers. Card and payment details are handled by the payment service provider. MiGame stores payment identifiers, payment status and order records needed to complete the purchase, provide receipts and handle support.

Some products require sharing limited order or delivery information with digital product suppliers. This may include product ID, order ID, delivery status, email address or other information needed to issue or verify a digital code, link, balance or top-up.

For a physical-product purchase, MiGame shares with order-processing and delivery service providers the product and artwork selection plus the recipient name, delivery address, email address and phone number needed to process, ship and track the order. MiGame remains the seller and customer-support contact.

When you contact support, we process the information needed to answer your question and resolve the issue. This may include your order number, email address, product information, payment status, delivery status and the content of your support message.

We may process order, payment, device and activity information to protect customers, prevent fraud, secure the checkout and investigate misuse.

We use necessary cookies to run the website and checkout. With analytics consent, MiGame uses first-party random browser and 30-minute session identifiers to measure page-by-page journeys, active time, scroll depth, navigation, ecommerce steps, coarse device and country information, client-error categories and Core Web Vitals. When you are signed in or complete checkout, that consented session may be linked to your customer account and order so the journey can be measured through purchase; signing in, signing out and changing account starts a new analytics session. We do not use analytics to record form fields, payment-card data, passwords, full query strings, raw IP addresses, unrestricted error messages or video/DOM session replay. Analytics or marketing cookies are used only when the user has given consent and MiGame has securely recorded that choice. Users can withdraw consent at any time through the cookie settings link; collection stops and the analytics identifiers are removed from the browser.

Marketing messages are sent only where allowed by law and consent settings. You can withdraw marketing consent by contacting support or using unsubscribe controls when available.

Account data is retained while the account is active and normally for two years after closure unless an order or legal obligation requires longer retention. Raw pseudonymous analytics events, browser identifiers and page-by-page session timelines are normally retained for no more than 395 days and are deleted automatically; non-identifying daily aggregates may be retained for up to 25 months. Order, receipt and accounting records are retained for at least six years as required by Finnish accounting and tax law. Support records are normally retained for three years after a case is closed, security and fraud-prevention records for up to two years, and consent records for five years after consent is withdrawn. Data may be retained longer when needed for an active legal claim or statutory obligation.

Personal data may be shared with payment service providers, hosting providers, email providers, analytics providers when consent has been given, customer support tools, digital product suppliers, order-processing and delivery service providers for physical orders, and authorities when required by law. Some providers may process data outside Finland or outside the EU/EEA. If data is transferred outside the EU or EEA, MiGame uses lawful transfer mechanisms where required, such as adequacy decisions, standard contractual clauses or other safeguards.

You may have the right to access your personal data, request correction, request deletion, object to processing, restrict processing, request data portability and withdraw consent. Some rights may be limited by legal obligations such as accounting and fraud-prevention requirements.

Contact us through the MiGame support form. We may need to verify your identity before processing your request.

If you believe your data protection rights have been violated, you may contact the Finnish Data Protection Ombudsman at tietosuoja.fi. MiGame may update this privacy policy when the service, delivery workflows or legal requirements change.