Privacy policy

1. Controller

Erdem Misir, Mühlwiesenstraße 16, 73527 Schwäbisch Gmünd, Germany, email: [email protected].

2. Hosting

This website is hosted by Cloudflare Pages (Cloudflare, Inc., USA). When you open a page, the host processes technical data such as IP address, time, page requested and browser type to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Data may be processed in the USA; the provider is certified under the EU-US Data Privacy Framework.

3. No cookies, cookieless statistics

This website sets no cookies and uses no marketing tools. Fonts, images and videos are served from this website itself, so no data goes to Google, YouTube or similar services when you browse.

Visitor statistics: I use Cloudflare Web Analytics (Cloudflare, Inc., USA, EU-US Data Privacy Framework) to count visits. It sets no cookies, stores nothing on your device and creates no user profiles, and it does not use your IP address to recognise you. I only see totals such as page views, referring sites, countries and device types. Legal basis: my legitimate interest in improving this website (Art. 6(1)(f) GDPR). You can object at any time (section 9), for example by blocking static.cloudflareinsights.com in your browser.

Your cart is saved only in your own browser (local storage) so it survives a reload. It is not sent to me. You can clear it at any time by emptying the cart or your browser data (§ 25(2) TDDDG).

4. Checkout with Payhip

When you check out, you go to Payhip (Payhip Ltd., United Kingdom), which handles the order, invoice and download and takes care of taxes due abroad, for example UK VAT. For the order I receive your email address, country, name if provided, order data and your consent to immediate delivery (Art. 6(1)(b) and (c) GDPR). Payments are processed by Stripe (Stripe Payments Europe Ltd., Ireland) and, if you choose PayPal, by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg; I do not receive full card details. An adequacy decision of the European Commission exists for the United Kingdom. More: payhip.com/privacy.

5. Project requests

If you use the project form, I process the details you enter (chosen pack or topic, idea, platform, speed, name or handle, email or Discord name, link) to answer your request and prepare an offer (Art. 6(1)(b) GDPR). If no order follows, I delete the request after six months at the latest.

If the form shows "Create my brief", nothing is sent: the brief is created in your browser, and you decide whether to send it on Discord.

6. Service orders

For an Island Trailer I process the details you send for the order: island code (or playtest code), Discord name, launch date, wishes and logo. I only need your island code; I do not need your project files or your Epic login. For a Custom Creature I process your idea, sketches or pictures, wishes and Discord name. I deliver the finished files through a download link on Google Drive (Google LLC, USA, EU-US Data Privacy Framework) that only you get and that I switch off after 30 days. I delete your material and my work files 60 days after delivery at the latest and keep only the finished files (Art. 6(1)(b) GDPR).

Showcase: I may show finished work in my portfolio, on this website and on my channels to present my work, never for sale. I wait until your island or game is public, at the latest 60 days after delivery, unless you tell me a later date. I name you only if you want (Art. 6(1)(a) GDPR); otherwise the legal basis is my legitimate interest in presenting my work (Art. 6(1)(f) GDPR). Before I start you can ask me to keep your order private, and you can object at any time (section 9).

For other services I process the details you send me to deliver the service (Art. 6(1)(b) GDPR).

7. Discord and email

If you contact me on Discord or by email, I process your messages to answer you (Art. 6(1)(b) or (f) GDPR). Discord (Discord Inc., USA) processes data under its own privacy policy. Links to Discord and Payhip only transfer data when you click them.

8. Storage period

I keep data only as long as needed for the purpose. Order and invoice data is kept for up to ten years because of tax retention duties.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6(1)(f) GDPR. You can withdraw consent at any time with effect for the future, and you can lodge a complaint with a data protection supervisory authority.