Privacy and cookies
What Going Concern stores about you, why, and for how long: your account, your saves, the leaderboard, and gameplay statistics only with your consent.
Take office →Going Concern is a game. We keep what the game needs to work, and we only count how it is played if you say yes. Nothing is sold, and there are no ads and no trackers from other companies.
Your choice about gameplay statistics
Who is responsible
Going Concern is made by SEJR Group A/S, CVR 46202465, Hovedvejen 107, 3., 2600 Glostrup, Denmark, which is the data controller. Questions and requests: Morris Dragsbæk-Friis, mdf@sejr.com.
What we store, and why
| What | Why | How long |
|---|---|---|
| Your account: email, a salted and hashed password (never the password itself), and the CEO and bank names you choose | So you can sign in and keep your career across devices | Until you ask us to delete the account |
| Your saved game | So your career continues where you left it | Until the account is deleted |
| Leaderboard entries and career cards: CEO name, bank name, results | Finished careers are ranked publicly, and you can share a career card | Until the account is deleted |
| Password reset links | To let you choose a new password by email | Expire after 60 minutes, used once |
| Gameplay statistics, only with your consent: a random device id and events such as sessions, milestones, the decisions you take on the desk (the kind, your choice, the month and the bank's ratios at the time) and how careers end | To see which parts of the game work and which do not, and improve it | 180 days, then deleted automatically |
| Error reports, only with your consent: the error message, where in the code it happened, the game month, the panes open, the jurisdiction and your browser's name and version, with the same random device id; at most five a session | To find and fix what breaks | 90 days, then deleted automatically |
We do not sell data, show ads, build profiles or share data with anyone for their own purposes.
Cookies and local storage
- sb_session (cookie, strictly necessary): keeps you signed in for up to 30 days. It holds a signed account id and your role, nothing else.
- Saves and settings (local storage, strictly necessary): your game, sound and display choices, stored in your own browser.
- sejr-cid (local storage, only with consent): the random device id for gameplay statistics. It is removed if you choose only necessary.
- gc-crash-q and gc-event-q (local storage, only with consent): error reports and decisions waiting to be sent when the server could not be reached. They are removed if you choose only necessary.
The website and the game load their fonts from our own servers, except some typefaces inside the game, which come from Google Fonts. That sends your browser's IP address to Google when the game loads.
Who helps us run it
Going Concern is hosted by Vercel, and the database runs on Neon. Password reset emails are sent through Resend. They process data only on our behalf, under data processing agreements.
Your rights
You can ask to see the data we hold about you, have it corrected, or have your account and everything linked to it deleted. Write to mdf@sejr.com from the email on your account. You can also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.
Last updated 19 October 2026.
Run a bank. Stay one.
A bank in a real jurisdiction in a real year, run from a terminal: the funding stack, the capital stack, the credit desk, the agencies, the supervisor and the board. Free, in the browser.