Privacy
Privacy note
Last updated: 12 October 2026
Short version: this site sets no tracking cookies and loads no third-party trackers unless the site owner switches them on and you accept them. If you reserve an early-bird machine, we keep your email and answers only to tell you about it, and we delete them when you ask.
Who is responsible
The data controller is Kvakkefly Holding AS (organisation number 925 499 900), Oslo, Norway, which runs Enigma Doublestep. Contact: hello@enigmadoublestep.com.
What we collect and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Email, chosen edition, deposit answer, optional country, use and note | To email you about early-bird orders and to plan production | Your consent (GDPR art. 6(1)(a)), given with the checkbox | Until you unsubscribe or ask for deletion, at most 24 months after the early-bird machines ship |
| Which price you were shown, the ad campaign that brought you (utm tags), the page you landed on | To learn which offer and which ads work. Sent only together with a reservation | Your consent, as above | As above |
| Server logs (IP address, browser, time) kept by our host | To deliver the site and keep it secure | Legitimate interest (art. 6(1)(f)) | Per the host's retention, typically days to weeks |
Stored on your device
No cookies. The site stores two small values in your browser: your light/dark theme choice (localStorage, only if you click the switch) and, for this tab only, which price variant you saw and the campaign tags in the address (sessionStorage, cleared when you close the tab). The 3D simulator remembers its own settings in localStorage. None of this is sent anywhere unless you submit the reservation form.
Analytics and advertising tags
By default none are active. If the site owner turns them on, this section lists them:
- Plausible Analytics (EU-hosted, cookieless, no personal data stored): counts page views and button clicks in aggregate. Loaded without a banner because it does not identify you.
- Google Analytics 4, Google Ads conversion tag, Meta Pixel: only loaded after you click "Accept" in the banner. They set cookies and send data to Google or Meta (USA) to measure which ads bring visitors. You can change your choice with "Cookie settings" in the footer.
Who processes the data for us
Our web host, Cloudflare, also stores the reservation form answers for us in its database service (D1). Cloudflare and any email service we use later process data on our behalf under data processing agreements. Some are based in the USA; transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses. We never sell your data.
Your rights
You can ask for a copy of your data, correct it, have it deleted, take it elsewhere, or withdraw consent at any time (every email has an unsubscribe link). Email us and we will reply within 30 days. You can also complain to the Norwegian Data Protection Authority, Datatilsynet, or the authority where you live.