Privacy Policy

1. General Information

Below we would like to inform you how we use and store personal data. If you make use of certain services (e.g., by sending us an email), personal data may be collected. We comply with the applicable European data protection provisions.

2. Contact details of the controller and for data protection inquiries

Controller for the online presence associated with this privacy policy is:

3. Data processing in connection with our online presence

3.1 Social media presence

Data processing in connection with our Instagram presence

For the information we publish, we rely on the platform and services of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). If you choose to use our Meta pages, you do so at your own responsibility. This applies in particular to the use of interactive features (e.g., commenting or rating). We have no influence over the type and scope of data collected and processed by Meta. As a general rule, when you use our Meta pages, the IP address assigned to your device is transmitted to Meta. According to Meta, this IP address is anonymized (for IP addresses from Germany) and deleted after 90 days. Meta also stores information about your device. This information is used to provide us, as page operators, with statistical information.

Meta also provides us with statistical data for our pages. This is aggregated data that allows us to understand how users interact with our page and enables us to present our offering in an optimized way and to communicate effectively with users. The legal basis for this processing is Art. 6(1)(f) GDPR, our legitimate interest arising from the purposes stated above. The data collected about you in this context is processed by Meta and, where applicable, transferred to countries outside the European Union.

Information on the transfer of European data to third countries by Meta, including the Instagram platform, can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum

Further information on data protection at Meta, and in particular on how you can object to the processing or manage or delete the information held about you, can be found in Meta's privacy policies: https://privacycenter.instagram.com/policy/

If you are logged in to Meta services, a cookie containing your identifier is placed on your device. This allows Meta to determine that you have visited our page and how you used it. This also applies to all other Meta pages. Meta is also able to associate your visits to these websites with your Meta profile. Based on this data, Meta can offer you content or advertising tailored to you. If you wish to avoid this, you can log out of Meta or deactivate the “stay logged in” function and delete the cookies stored on your device. This will delete Meta information that could be used to identify you directly. You can then use our Meta pages without your Meta identifier being revealed. If you wish to use interactive features of the page (e.g., liking, commenting, and messaging), a Meta login window will appear. After logging in, Meta may again associate you with your profile.

Insofar as we, as the provider of our Meta pages, process personal data exclusively ourselves — for example, if you contact us regarding our products or give us your consent to do so — the collection, processing, and use of your data is carried out for the purpose of responding to your inquiry or providing the service you have requested. The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR.

As the provider of our Meta pages, we do not collect or process any further data from your use of the service.

Data processing in connection with our YouTube presence

We operate a YouTube channel to share our content and offerings via the YouTube platform, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”). If you visit our YouTube channel or interact with our videos, various data about you is collected and processed by YouTube. YouTube collects data about your use of the platform, such as which videos you watch, the duration of your use, and your interactions (e.g., likes, comments). YouTube uses this data, among other things, to provide and improve the service, to personalize advertising, and to analyze your usage. We have no influence over this data processing by YouTube.

We use the statistics and reports provided by YouTube to gain insights into user behaviour on our channel and to better tailor our content to viewers' interests. In addition, we process your data to respond to inquiries and communicate with you if you contact us via YouTube. Our processing of your data is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in analyzing the success of our content and offering you the best possible communication.

Further information on data processing by YouTube can be found in YouTube's privacy policy: https://policies.google.com/privacy

Data processing in connection with our TikTok presence

For the content we publish, we use the platform and services of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). If you visit our TikTok presence or interact with our content, TikTok processes various personal data, such as your IP address, interaction data (likes, comments, shared content), and usage data (videos watched, time spent). This data is used to provide us with anonymized statistics on the use of our TikTok content, to analyze the reach of our posts, and to optimize our content. This data is processed on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, in order to improve our social media presence and better understand our target audiences.

TikTok itself processes your data in accordance with its own privacy policy, over which we have no influence.

Further information on data processing by TikTok can be found in TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy

3.2 Discord

For support, general communication, news, and order-related communication in connection with custom plugin orders, we offer you the option of contacting us via Discord. Our website contains only a link to our Discord server; simply visiting our website does not result in any automatic exchange of data with Discord.

Once you contact us via Discord, we process the data you provide in the process (e.g., your Discord username, the content of your messages, and any order or project details you share) in order to handle your inquiry or to initiate and perform a contract. The legal bases are Art. 6(1)(b) GDPR (performance/initiation of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

The service is provided by Discord Netherlands B.V., Schiphol Boulevard 195 1118BG Schiphol, Netherlands, and its affiliate Discord Inc. (USA). A transfer of personal data to the USA cannot be ruled out. Discord states that it uses appropriate safeguards, such as the European Commission's Standard Contractual Clauses, pursuant to Art. 46 GDPR.

Further information on data processing by Discord can be found in its privacy policy at: https://discord.com/privacy

3.3 BuiltByBit

For the sale of our plugins, we link to the BuiltByBit platform. After clicking the corresponding link, you leave our website; any further processing of your data (including in connection with creating a user account, placing an order, and processing payment) is the sole responsibility of the operator of BuiltByBit as an independent controller. We have no influence over this processing and do not become aware of it unless you separately share the relevant information with us.

Further information on data processing by BuiltByBit can be found in its privacy policy at: https://builtbybit.com/help/privacy-policy

3.4 Use of payment service providers

PayPal

If you choose to pay via PayPal, payment is processed by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). In connection with this payment process, personal data is transmitted to PayPal or from PayPal to us.

If you select PayPal as your payment method, we transmit certain personal data to PayPal in order to carry out the payment, in particular the invoice amount and other information required for processing the payment. This data is processed on the basis of Art. 6(1)(b) GDPR, as it is necessary for the performance of the contract. In addition, we have a legitimate interest in using a secure and efficient payment system, so that processing also takes place on the basis of Art. 6(1)(f) GDPR.

In order to enable the payment, PayPal may in turn transmit personal data to us, in particular your name, billing and delivery address, and any other information required to process the purchase agreement. This data processing is likewise carried out on the basis of Art. 6(1)(b) GDPR.

As the operator of this website, we do not receive complete payment data such as credit card numbers or bank details from PayPal. Instead, we only receive from PayPal a confirmation of the payment status (successful or failed), a transaction ID, and, where applicable, a note regarding fraud checks or chargebacks. We process this information to perform the contractual relationship pursuant to Art. 6(1)(b) GDPR.

PayPal also reserves the right to process personal data for identity and creditworthiness checks as well as fraud prevention. For this purpose, PayPal may share data with affiliated companies, payment service providers, or credit agencies. In this context, it is possible that personal data may also be transferred to third countries outside the European Union or the European Economic Area. In such cases, PayPal ensures that appropriate safeguards are in place pursuant to Art. 46 GDPR, for example through the European Commission's Standard Contractual Clauses.

Further information on data processing by PayPal, as well as your rights and options, can be found in PayPal's privacy policy at: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

Stripe

If you make a payment in connection with our offering, payment is processed by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”). In this context, your personal data is processed in order to carry out the payment transaction.

If you make a payment via Stripe, the data required for the transaction — in particular payment information such as your credit card or account details, your IP address, and other information necessary for processing the payment — is transmitted directly to Stripe. As the website operator, we do not receive complete payment data such as credit card numbers or bank details, but only a payment confirmation or an error message from Stripe. This data is processed to perform the contractual relationship pursuant to Art. 6(1)(b) GDPR. In addition, we have a legitimate interest in using a secure and efficient payment system, so that processing is also based on Art. 6(1)(f) GDPR.

Stripe may use the transmitted data for fraud prevention as well as identity and creditworthiness checks, and may share it for this purpose with affiliated companies, banks, payment service providers, or credit agencies. In this context, data may also be transferred to third countries outside the European Union or the European Economic Area. In such cases, Stripe ensures that appropriate safeguards are in place pursuant to Art. 46 GDPR, for example through the European Commission's Standard Contractual Clauses.

Further information on data processing by Stripe, as well as your rights and options, can be found in Stripe's privacy policy at: https://stripe.com/privacy

4. Data processing when using our website

When you access our website, your internet browser automatically transmits the following data to our web server for technical reasons:

• IP address
• Date and time of the server request
• URL of the file accessed
• Amount of data transferred
• Operating system
• Information on browser type and version used
• Name of the internet service provider
• Website from which our website was accessed
• Page visited on our website

The collection, processing, and use of the data listed above is carried out for the purpose of enabling the use and delivery of our website. Further purposes include the security of our IT systems and technical administration. The legal basis for this processing is Art. 6(1)(f) GDPR, our legitimate interest arising from the purposes stated above.

Our website is hosted on a virtual server provided by Serverdiscounter GmbH; our business email correspondence is likewise handled via email hosting provided by Serverdiscounter GmbH. We have entered into a data processing agreement with Serverdiscounter pursuant to Art. 28 GDPR.

You can contact us via email or Discord. When you contact us, we process the personal data you provide, in particular your contact details and the content of your message, insofar as this is necessary to process your request, communicate with you, or prepare for or perform a contract.

The processing is based on Article 6(1)(b) GDPR insofar as your request is related to a contract or pre-contractual measures, and, where applicable, on Article 6(1)(f) GDPR based on our legitimate interest in ensuring efficient communication and handling of inquiries.

We send invoices exclusively by email to the email address you have provided. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) as well as, where applicable, Art. 6(1)(c) GDPR (statutory retention obligations under commercial and tax law).

Cookies

This website does not use cookies.

5. Disclosure of data to third parties and external recipients

In certain cases, we are legally obliged to transmit data to a requesting government authority, for example under national legal provisions. The legal basis for this processing is Art. 6(1)(c) GDPR. Where we engage service providers for data processing on our behalf, we comply with the data protection provisions of Art. 28 GDPR and Art. 44 et seq. GDPR.

Beyond this, we only disclose data to third parties if you have expressly consented to this, if the disclosure is evidently necessary to provide a service you have requested (e.g., involving a shipping service provider), or if the disclosure is required by law.

In the event that personal data is transferred to countries outside the EU or the EEA, we take all necessary steps to ensure that appropriate measures are in place to protect your personal data in accordance with data protection law, for example by applying the Standard Contractual Clauses approved by the European Commission.

6. Use of data for communication and marketing

Surveys and advertising for similar products

To ensure that our service meets your needs, we may use the email address you provide in connection with an inquiry, an order, or your use of our free offerings for customer satisfaction surveys. As an existing customer, we may send you advertising by email for similar products to those you have previously ordered or made use of even without your prior consent. The legal basis for this processing is our legitimate interest in improving our services (Art. 6(1)(f) GDPR).

You may object to any future use of your data for this purpose at any time by sending a message to the contact details given above, or, in the case of a newsletter, by using the unsubscribe link contained therein.

7. Use of a registered-address / mail handling service (IP-Management)

We use the services of IMPRESSUM-PRIVATSCHUTZ GmbH, Ludwig-Erhard-Str. 18, 20459 Hamburg, to manage mail sent to us. This service provider offers a secure and reliable postal address for our project (e.g., for the legal notice, privacy policy, right of withdrawal information, and possibly other areas). This also constitutes a legitimate interest of ours within the meaning of Art. 6(1)(f) GDPR. We have entered into a data processing agreement with Impressum-Privatschutz and fully implement the strict requirements of the German data protection authorities when using this service.

Further information on data protection at Impressum-Privatschutz GmbH can be found here: https://impressum-privatschutz.de/datenschutzerklaerung/

8. Retention period of data

We store personal data until you revoke your consent, until the data is no longer required to fulfil our business interests or to provide the service you have requested, or until this is legally required.

9. Data security

We place great importance on protecting your personal data and have therefore implemented technical and organisational measures (TOMs) to ensure an appropriate level of protection in accordance with legal requirements, in particular the General Data Protection Regulation (GDPR). These measures are designed to ensure the confidentiality, integrity, and availability of the data we process and to protect it against unauthorised access, loss, destruction, or manipulation.

Where necessary, technical and organisational measures are adapted to reflect the current state of the art in order to continue ensuring the protection of your data.

10. Your rights as a data subject

You have the right, at any time and free of charge, to request information about the purpose, scope, origin, and recipients of the personal data stored about you (Art. 15 GDPR). You also have the right to request the correction of inaccurate or incomplete data (Art. 16 GDPR).

Under applicable data protection law, you also have the right to request the erasure of your personal data, provided the requirements of Art. 17 GDPR are met (right to be forgotten), as well as the right to restrict the processing of your personal data pursuant to Art. 18 GDPR. You also have the right to object at any time to the processing of your personal data pursuant to Art. 21 GDPR, where such processing is based on Art. 6(1)(e) or (f) GDPR. This applies in particular to the processing of your data for direct marketing purposes.

Furthermore, you have the right to data portability, meaning you may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to have this data transmitted to another controller, provided the requirements of Art. 20 GDPR are met.

If you believe that the processing of your personal data violates data protection law or that your rights have otherwise been infringed, you have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.

You also have the right to withdraw, at any time and with effect for the future, any consent you have given for the processing of your personal data — for example, by an informal message by email or in writing to the contact details given above (Art. 7(3) GDPR). The lawfulness of any processing carried out on the basis of your consent prior to its withdrawal remains unaffected.