Privacy Policy

1. Responsible Party (Verantwortlicher)

2. General Principles

This Website does not use cookies, tracking pixels, fingerprinting, or third-party advertising networks. No user accounts exist. No personal data is intentionally collected from visitors for marketing, profiling, or commercial purposes.

3. Data Collected Automatically (Server Logs)

When you access this Website, your browser automatically transmits data that may be temporarily stored in server log files by the hosting provider. This may include:

• IP address (potentially personally identifiable)
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Pages accessed

This data is processed on the basis of Article 6(1)(f) GDPR (legitimate interest) to ensure the security and technical operation of the Website. Log data is not merged with other data sources and is deleted after a maximum of 30 days unless required for longer retention by law. You may object to this processing under Article 21 GDPR; however, continued service may not be possible without minimal technical logging.

4. External Services & Third-Party Data Processors

This Website makes server-side requests to external APIs (GitHub, Discord, Spotify) to display publicly available information. These requests originate from the server — your IP address and personal data are never transmitted to those services. The following client-side integrations do involve your browser directly contacting third-party servers:

5. Contact via External Channels

If you contact the Operator via Discord or GitHub, the data you provide (username, message content) will be processed for the purpose of responding to your inquiry. Legal basis: Article 6(1)(b) GDPR (pre-contractual or contractual measures) or Article 6(1)(f) GDPR (legitimate interest). Data is retained only as long as necessary for the purpose.

6. Your Rights as a Data Subject (Betroffenenrechte)

Under the GDPR, you have the following rights:

• Art. 15 GDPR — Right of access to your personal data
• Art. 16 GDPR — Right to rectification of inaccurate data
• Art. 17 GDPR — Right to erasure ("right to be forgotten")
• Art. 18 GDPR — Right to restriction of processing
• Art. 20 GDPR — Right to data portability
• Art. 21 GDPR — Right to object to processing based on legitimate interests
• Art. 77 GDPR — Right to lodge a complaint with a supervisory authority

To exercise your rights, contact the Operator via the channels listed in Section 1. As only minimal technical data is processed, most of these rights may have limited practical application.

7. Supervisory Authority — LDI NRW

You have the right to lodge a complaint with the competent supervisory authority. The authority responsible for Nordrhein-Westfalen is:

8. Data Security

This Website is served exclusively over HTTPS (TLS encryption). Technical and organizational measures are implemented in accordance with Article 32 GDPR to protect personal data against unauthorized access, loss, or manipulation.

9. No Automated Decision-Making

This Website does not use automated decision-making processes or profiling within the meaning of Article 22 GDPR.

10. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in legal requirements or Website functionality. The "last updated" date at the top of this document indicates the date of the most recent revision. We recommend reviewing this policy periodically.