Game Devs
en
  1. Home
  2. Privacy policy

Privacy policy

[DRAFT – to be reviewed by a legal professional before publishing] This draft describes the data processing this website actually performs. Passages marked [ADD] or [REVIEW] must be completed or confirmed before going live.

1. Controller

The controller responsible for data processing on this website is:

Sven Steinmetz
Papinstraße 47
81249 Munich, Germany
E-mail: info@game-devs.com

[REVIEW] Align with the legal notice and decide which address handles privacy requests.

2. Summary

  • The public website sets no cookies and uses no tracking or analytics services.
  • Fonts, scripts and images are served exclusively from our own server – no data is sent to third parties (such as Google Fonts or CDNs) when you visit.
  • The language is selected via the address (e.g. /de/ or /en/) and is not stored.
  • Videos from YouTube or Vimeo are only loaded after you click.

3. Hosting and server log files

This website is hosted by: [ADD: name and address of the hosting provider]. A data processing agreement pursuant to Art. 28 GDPR is in place [REVIEW].

When you visit the website, the web server automatically processes data transmitted by your browser: IP address, date and time of access, requested address, amount of data transferred, HTTP status code, referrer and browser/operating system (user agent).

The purpose is to deliver the website and to ensure its stability and security. The legal basis is Art. 6 (1) (f) GDPR. Log files are deleted after [ADD: retention period] unless they are needed to investigate a security incident.

4. Cookies and local storage

The public pages of this website set no cookies and store no information on your device. A cookie banner is therefore not required.

Only in the password-protected administration area (/admin), which is accessible exclusively to our team, a technically necessary session cookie is set after login (§ 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR).

5. Contact and contact form

If you contact us by e-mail or via the contact form, we process your name, e-mail address, subject and message in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR where the request relates to a contract, otherwise Art. 6 (1) (f) GDPR.

Messages sent via the contact form are not stored in the website's database; they are forwarded to us by e-mail. To prevent spam we use an invisible check field, a time check and a limit on the number of requests per IP address. For this, a hash of the IP address is kept in the server cache for at most 24 hours. No external captcha services are used.

E-mails are sent and received via [ADD: e-mail provider]. We delete requests once they have been dealt with, unless statutory retention obligations apply [REVIEW].

6. Links to stores and platforms

Our website contains links to external services such as Steam, Roblox, Google Play, Epic Games or social networks. These are regular links: only when you click a link are you taken to the provider's website, where its privacy policy applies.

7. Embedded videos (two-click solution)

Trailers from YouTube (privacy-enhanced mode via youtube-nocookie.com) or Vimeo are only loaded when you click "Play trailer". Before that, no data is transferred to the video provider. After the click, your browser transmits data such as your IP address to the provider (Google Ireland Limited or Vimeo.com, Inc.); this may include a transfer to third countries such as the USA. The legal basis is your consent given by clicking (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). [REVIEW]

8. Administration area

For logins of team members, login attempts (time, IP address, success/failure, hashed e-mail address) are stored to prevent abuse and deleted automatically after 30 days. Changes to content are recorded in an audit log; IP addresses in this log are removed after 30 days and entries are deleted after one year. The legal basis is Art. 6 (1) (f) GDPR.

9. Images

Images published on this website are re-encoded on upload. Embedded metadata (e.g. EXIF data with camera or location information) is removed.

10. Backups

To protect against data loss, we regularly back up the database and uploaded images. Backups contain no contact form messages and are deleted after [REVIEW: 14 days]. Storage location: [ADD].

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You can withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). [REVIEW] For private bodies in Bavaria this is the Bavarian State Office for Data Protection Supervision (BayLDA), Postfach 1349, 91504 Ansbach, Germany (as stated in the previous privacy policy).

12. Version

Draft of October 2026. [REVIEW: update the date when publishing]