Who is responsible
The provider named in the Impressum. E-mail: contact@castlecodex.com, or use the contact form.
Hosting and server logs
This site is served by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open a page, your browser sends technical data such as your IP address, the time of the request, the page requested and your browser type. Cloudflare processes this data to deliver the site and protect it against attacks. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor under a data processing agreement and is certified under the EU-US Data Privacy Framework.
Cookies and local storage
This site sets no cookies and uses no tracking. The setup checklist and the player-count switch save your choices in your browser's local storage, only on your device, so they are still there when you come back. Nothing is sent to us. You can delete it at any time by clearing your browser's site data.
Contact form and e-mail
When you write to us through the contact form or by e-mail, we process your name, your e-mail address, the topic you chose and your message to answer you. The form stores nothing on this website. Your message is sent once as an e-mail through Cloudflare, our processor named above, to our mailbox at Google (Gmail, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). E-mails to contact@castlecodex.com take the same route through Cloudflare Email Routing. Google may also process data in the USA and is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in answering your message (Art. 6(1)(f) GDPR) and, if your message is about a contract with us, Art. 6(1)(b) GDPR. We delete your message once your request is settled, unless the law requires us to keep it longer.
YouTube videos
Videos are embedded with a click-to-load preview. Nothing is loaded from YouTube until you click play. After the click, your browser connects to YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) through its privacy-enhanced domain youtube-nocookie.com, and Google processes data such as your IP address under its own privacy policy. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR).
Links to other websites
We link to Kickstarter, MinaLima, YouTube, shops and other sites. Their own privacy policies apply once you follow a link.
Affiliate links
Some links to shops are affiliate links. They are labelled "Affiliate links" right next to the shop buttons, and the label opens a short explanation. If you buy something after clicking such a link, the shop pays us a small commission; the price stays the same for you. The link tells the shop that you came from this site, and the shop records this on its own website, usually with a cookie, to credit the sale. This site itself sets no cookies for this. What happens on the shop's website is governed by the shop's own privacy policy, for example Amazon (amazon.com, amazon.co.uk, amazon.de) or the affiliate network Awin. The legal basis for showing these links is our legitimate interest in financing this free site (Art. 6(1)(f) GDPR).
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), and the right to withdraw consent at any time. You can also complain to a data protection supervisory authority, for example the one responsible for your place of residence.