Privacy Policy

Last updated: 2026-08-21

This site is operated from Germany and processes personal data under the EU General Data Protection Regulation (GDPR). In case of any discrepancy, the German version is authoritative.

1. Controller

The controller within the meaning of the GDPR is the person or entity named in the imprint.

2. Your rights at a glance

You have the right, free of charge, to request information about your stored personal data, its origin, its recipients, and the purpose of processing (Art. 15 GDPR), and, where applicable, a right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21) of this data. Any consent given can be withdrawn at any time with future effect. You also have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). Please use the contact address given in the imprint.

3. Hosting and server log files

This website is hosted by [hosting provider, address]. Every time this website is accessed, our server automatically collects data from the accessing system (server log files), including: IP address, date and time of the request, content of the request (specific page), access status/HTTP status code, amount of data transferred, referring website, browser, operating system and its interface, and language and version of the browser software. Processing is based on Art. 6(1)(f) GDPR, arising from our legitimate interest in the technical provision, stability and security of this website. Log files are retained for a limited period for security purposes (e.g. to investigate abuse) and then deleted.

4. Cookies

We ourselves only use strictly necessary cookies (Art. 6(1)(f) GDPR / § 25(2) no. 2 TTDSG) required to operate the site. Consent is not required for these cookies; the cookie notice on the site exists purely for transparency. We do not set any analytics, marketing, or tracking cookies ourselves and do not build usage profiles. On individual form pages, a cookie from our third-party provider Cloudflare (Turnstile, bot protection) may additionally be set — see section 10.

5. Registration and user account

Certain features (uploading covers, commenting, the forum) require registration. We collect a username, email address and password. The password is stored only in hashed (non-reversible) form. You may optionally upload a profile picture and enable two-factor authentication (2FA), which stores a 2FA secret and backup codes. The legal basis is Art. 6(1)(b) GDPR (performance of the usage contract). Your email address is used solely for account management (email confirmation, password resets, notifications about your own uploads) and is not shared with third parties or used for advertising.

6. Content you publish

Cover scans and files you upload, as well as forum posts and comments, are displayed publicly under your username. Please note that content you publish can be viewed by other users. You may request full deletion of publicly visible content via the contact address given in the imprint, subject to any statutory retention obligations.

7. Fonts

We only embed fonts hosted locally on our own server. There is no connection to Google Fonts or any other external font service, so no data is transmitted to third parties in that regard when you visit this site.

8. Analytics and marketing tools

We do not use web analytics services, tracking pixels, or advertising networks, and we do not build visitor profiles.

9. External data source (IGDB)

Administrators of this site can look up public game and platform metadata (titles, cover images) via the IGDB API (Twitch Interactive, Inc., USA) in the internal admin area to maintain the catalog. This feature is not available to regular visitors. When an administrator loads a cover preview from this source, their IP address is transmitted to IGDB — a data transfer to a third country (USA) based on Art. 6(1)(f) GDPR (legitimate interest in efficient catalog maintenance).

10. Cloudflare Turnstile (bot protection)

On pages with a form that could be abused by automated submissions (contact form, registration, forgot-password), we use Cloudflare Turnstile, a service by Cloudflare, Inc. (USA) that checks whether a request comes from a human or a bot without a traditional CAPTCHA puzzle. This transmits your IP address and technical characteristics of your browser/device to Cloudflare for processing — a data transfer to a third country (USA) based on the EU Commission's Standard Contractual Clauses. Cloudflare may set its own cookie in the process. The service is loaded only on the form pages listed above, not on every page of this site. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting our forms from spam and bot abuse). More information: Cloudflare's privacy policy.

11. Retention period

Personal data is deleted once it is no longer required for the stated purposes and no statutory retention obligations apply. Account data is removed or anonymized when you delete your user account; publicly visible posts may remain in anonymized form for consistency.

12. Minors

This service is not specifically directed at children under 16. Individuals under 16 should not create a user account without parental consent.

13. Contact form

If you use our contact form, we process the data you provide (name, email address, subject and message) solely to handle your request. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in responding to inquiries) or Art. 6 (1)(b) GDPR where your request relates to entering into a contractual relationship. Your data is deleted once your request has been fully answered and no statutory retention obligations apply.

14. Changes to this policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements, or to reflect changes to our services.