Privacy Policy (GDPR Compliant)

1. Controller

Email: scriptseller88@gmail.com

2. Hosting – Netlify

This website is hosted by Netlify Inc., USA. When accessing this website, server log files may automatically process: IP address, browser type, operating system, date/time of access and referrer URL.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

Data may be transferred to the United States. Transfers are based on Standard Contractual Clauses (Art. 46 GDPR).

3. Digital Sales – itch.io

Purchases are processed via itch.io (USA). Personal data such as name, email address and payment details are processed directly by itch.io. We do not store full payment information.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

4. Newsletter – Brevo

We use Brevo (Sendinblue GmbH, Germany) for newsletter distribution. Registration requires double opt-in confirmation. Processed data: email address, IP address, registration timestamp.

Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw consent at any time via the unsubscribe link.

5. Embedded YouTube Videos

This website embeds YouTube videos (Google Ireland Limited). When loading a video, personal data (IP address, usage data, device data) may be transmitted to Google servers, potentially in the USA.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting multimedia content). Data transfers rely on Standard Contractual Clauses.

6. WhatsApp Business

Support communication may occur via WhatsApp Business (Meta Platforms Ireland Ltd.). Phone numbers and communication data may be processed. Data transfers outside the EU may occur.

Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (pre-contractual communication).

7. Discord

We operate a Discord community (Discord Inc., USA). Usernames, IP addresses and message content may be processed by Discord.

Legal basis: Art. 6(1)(a) GDPR (voluntary participation).

8. Data Retention

Personal data is stored only as long as necessary for contract fulfillment, legal obligations (e.g., tax retention periods) or legitimate business interests. Newsletter data is stored until consent is withdrawn.

9. International Data Transfers

Where personal data is transferred to countries outside the EU/EEA, appropriate safeguards such as Standard Contractual Clauses (Art. 46 GDPR) are applied.

10. Your Rights

You have the right to: Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR)

11. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. Responsible authority in Bavaria, Germany: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

12. Data Security

We implement appropriate technical and organizational measures to protect personal data. This website uses SSL/TLS encryption.

Last updated: February 2026