Privacy Policy

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Mystic Forge Studios UG (haftungsbeschränkt)
Kai Saßmannshausen & Roman Esseln
Feldbergstraße 22
61191 Rosbach v.d.Höhe
Germany

Email: [email protected]

2.1 Website Usage Data

When you visit our website, our web server automatically collects the following information:

• IP address (anonymized after processing)
• Date and time of access
• Pages visited and files downloaded
• Browser type and version
• Operating system
• Referrer URL (the page from which you came to our site)

This data is processed based on our legitimate interest in ensuring the security and functionality of our website (Art. 6 para. 1 lit. f GDPR).

2.2 Contact Information

When you contact us through our contact form or email, we collect:

• Your name
• Email address
• Subject of inquiry
• Message content

This data is processed based on your consent (Art. 6 para. 1 lit. a GDPR) or our legitimate interest in responding to your inquiries (Art. 6 para. 1 lit. f GDPR).

2.3 Cookies and Tracking

Our website uses cookies to enhance your browsing experience. We distinguish between:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Help us understand website usage (optional)
• Third-Party Cookies: From embedded services like YouTube (optional)

You can manage your cookie preferences through our cookie banner or by clicking Cookie Settings.

3.1 YouTube

Our website embeds videos from YouTube (Google LLC). When you play a video, YouTube may collect data about your usage. YouTube's privacy policy applies: https://policies.google.com/privacy

3.2 Font Services

We use Google Fonts to display fonts. Google may collect data about font loading. Google's privacy policy applies: https://policies.google.com/privacy

3.3 Social Media Links

Our website contains links to social media platforms (YouTube, Reddit, Discord). These platforms have their own privacy policies that apply when you visit them.

We use collected data for the following purposes:

• Providing and maintaining our website
• Responding to your inquiries and support requests
• Improving our website and services
• Ensuring website security and preventing abuse
• Complying with legal obligations

• Website logs: Deleted after 30 days
• Contact inquiries: Stored for up to 3 years for customer service purposes
• Cookies: Retention periods vary by type (see cookie settings)

Data may be retained longer if required by law or for legitimate business purposes.

Under the GDPR, you have the following rights:

• Right of access: Request information about your personal data
• Right to rectification: Correct inaccurate personal data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, please contact us at [email protected]

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• SSL/TLS encryption for data transmission
• Regular security updates and monitoring
• Access controls and authentication measures
• Regular backups and data recovery procedures

Some of our service providers (e.g., Google/YouTube) may transfer data to countries outside the European Economic Area (EEA). Such transfers are based on adequacy decisions by the European Commission or appropriate safeguards such as Standard Contractual Clauses.

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. The competent authority for our company is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany
Website: datenschutz.hessen.de