Privacy Policy

Protecting your personal data is important to us. This Privacy Policy is designed to explain in detail how we collect, use, and protect information when you use this website. Even though this is a fan project and not a commercial platform, we still comply with the requirements of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

The legal entity or natural person responsible for this website (the "controller" in GDPR terms) is listed in the Impressum. You can always reach out to us using the contact details provided there if you have questions about privacy or data protection.

2. Categories of Data We Process

When you use our website, different types of information are processed. Below we explain the categories of data in more detail so that you understand exactly what happens in the background:

• Server logs: Every time you visit a website, technical data is exchanged between your browser and the server. Our hosting provider (Vercel Inc.) automatically stores information such as your IP address, the type and version of your browser, the operating system you are using, the website you visited immediately before ours (referrer URL), and the date and time of the request. This happens automatically and is standard for all websites, as it is necessary for technical reasons.
• Analytics data: We use Vercel Analytics, which provides us with aggregated insights such as page views, visitor flow, and general referrer information. Unlike traditional analytics solutions, this system does not use cookies or track you across sites. Instead, it gives us a broad overview of how our site is being used so we can improve navigation and content.
• YouTube embeds: Because our website integrates video content from YouTube (Google LLC), loading or interacting with an embedded video may cause Google to process your IP address, device data, and potentially set cookies for analytics or advertising. This is beyond our control and subject to Google’s own policies.
• Communication data: If you actively send us an email, we will of course process the information you provide to us (such as your name, contact details, and the content of your message) in order to respond to your inquiry.

3. Purposes of Processing

We only process your personal data for specific and legitimate purposes. In practice, this means:

• To display the website and all its features correctly in your browser
• To maintain IT security and protect against attacks or misuse
• To understand how our site is used and where improvements are needed
• To deliver video content through YouTube embeds
• To communicate with you if you contact us directly

4. Legal Bases (Art. 6 GDPR)

Under GDPR, every form of data processing requires a legal basis. For our website, these are:

• Art. 6(1)(f) GDPR – legitimate interest: this covers server logs and analytics, as our interest in operating a secure, functioning, and optimized website is legitimate.
• Art. 6(1)(b) GDPR – contract performance: if you contact us and we respond, that falls under fulfilling a (pre-)contractual obligation.
• Art. 6(1)(a) GDPR – consent: when you choose to play an embedded YouTube video, you are consenting to data processing by Google.

5. Recipients of Data

We do not sell or trade your personal data. However, some processing is technically impossible without third parties:

• Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA – responsible for the technical delivery of this website.
• Analytics: Vercel Analytics – provides us with aggregate insights into site performance.
• Video embeds: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (subsidiary of Google LLC, USA).
• Email provider: any data you send via email is processed by the provider we use to manage our inbox.

6. Transfers to Third Countries

Since Vercel and Google are US-based companies, personal data may be transferred outside the EU. Both providers use safeguards such as the Standard Contractual Clauses approved by the European Commission to ensure compliance with EU law. Nevertheless, we want you to be aware that the level of data protection in the USA may not fully correspond to that in the EU.

7. Data Retention

We retain data only as long as necessary:

• Server logs are automatically deleted after approximately 30 days.
• Analytics data is stored in aggregated form without personal identifiers.
• Email communications are retained as long as needed to process your request and may be archived for legal retention obligations.

8. Your Rights

You have extensive rights under GDPR. In plain terms, you may:

• Ask us what data we hold about you (access)
• Ask us to correct inaccurate data (rectification)
• Request deletion of data (erasure)
• Restrict how we process data (restriction)
• Request a copy of your data in portable form (data portability)
• Object to certain processing, e.g. for legitimate interests (objection)
• Lodge a complaint with the German Federal Data Protection Authority or your local supervisory authority.

9. Children

Our website is aimed at a general audience and not at children under 16 years of age. We do not knowingly collect or process data of minors.

10. Updates to this Policy

This policy may be updated if technical or legal requirements change. When we make changes, we will update the "last updated" date below. We encourage you to check this page regularly.

11. Contact

If you have any questions about privacy or data protection, feel free to reach out to us at dmca.sb.meta@gmail.com. We take all inquiries seriously and will respond as quickly as possible.

Last updated: 2025-09-09