SEC-06 / Privacy policy

Privacy policy

Gelopard is the trade name of Hedvig Holding AB, which is the controller for the personal data described here.

This policy covers the website at gelopard.com. Apps and games published under the Gelopard name link to this policy from their store listing, and each gets its own section here before it ships.

SEC-06.1 / Controller
EntityHedvig Holding AB
Trade nameGelopard
Reg.no559346-1865
Registered officeSolna, Sweden
SEC-06.2 / What is collected

The contact form is the only part of this site that collects anything. Sending it records six things:

Email addressThe address you type, so the enquiry can be answered.
MessageWhat you wrote.
IP addressUsed to rate limit the form, so it cannot be flooded.
CountryA two-letter code supplied by the network edge. Used to handle abuse.
BrowserThe user-agent string, shortened to 300 characters. Used to handle abuse.
TimeWhen the form was sent.

Nothing else is collected. There is no account, no payment and no profile.

SEC-06.3 / Legal basis

The processing rests on legitimate interest under Article 6(1)(f) of the GDPR: answering enquiries that were sent voluntarily, and keeping the form working for everyone else.

You are not asked for consent, because none of this is separable from the act of sending a message. If you would rather not supply it, write to contact@gelopard.com directly instead of using the form.

SEC-06.4 / How long it is kept
Stored copy30 days in Cloudflare KV, then deleted automatically.
Notification30 days in the mailbox that receives it.

Nothing is archived past those windows.

SEC-06.5 / Who else handles it
Cloudflare, Inc.Hosting, storage and outbound mail. United States. Transfers rest on the European Commission's standard contractual clauses.
Proton AGThe mailbox that receives the notification. Switzerland, which the European Commission recognises as providing adequate protection.

No one else. Nothing here is sold, shared for advertising, or used to train anything.

SEC-06.6 / Cookies and tracking

This site sets no cookies. There is no analytics, no tag manager, no embedded third-party content and no tracking pixel. Nothing follows you between pages.

SEC-06.7 / Your rights

Under the GDPR you can ask for a copy of what is held about you, ask for it to be corrected or erased, object to the processing, or ask for it to be restricted. Write to contact@gelopard.com.

Because everything expires after 30 days, a request that arrives later than that will find nothing left to act on.

If you believe the processing is unlawful you can complain to the Swedish Authority for Privacy Protection, imy.se.

SEC-06.8 / Changes
Last updated2026-08-24

Changes are published on this page. There is no mailing list to notify.