We take the protection of your personal data seriously. This Privacy Policy explains what data we collect when you visit our website, why we collect it, and what rights you have — in accordance with the EU General Data Protection Regulation (GDPR) and the German Telecommunications-Telemedia Data Protection Act (TTDSG).

1. Who Is Responsible

The controller responsible for data processing on this website is:

Ironbite Games GmbH Gartenstraße 7a 93188 Pielenhofen, Germany Represented by: Johannes Natterer, Florian Gröger Registergericht Regensburg, HRB 21910 

We are not required to appoint a Data Protection Officer, as our core activities do not involve large-scale processing of special categories of data or systematic large-scale monitoring (Art. 37 GDPR).

2. Server Log Data

Every time you visit our website, our hosting provider automatically collects certain technical data in server log files, such as:

• IP address (shortened/anonymized where technically feasible)
• Date and time of access
• Browser type and version, operating system
• Referring URL
• Pages requested

This data is processed to ensure the technical stability and security of the website (Art. 6(1)(f) GDPR — legitimate interest) and is not merged with other data sources. Log data is typically deleted automatically after a short retention period.

3. Cookies and Consent

Some features of this website use cookies or similar technologies. Cookies that are strictly necessary for the website to function are used on the basis of Art. 6(1)(f) GDPR / § 25(2) TTDSG.

For any non-essential cookies — such as those used for analytics (see Section 4) or embedded third-party content (see Section 5) — we ask for your consent via a cookie banner before those services load, in accordance with § 25(1) TTDSG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, e.g. via the cookie settings link in the website footer.

4. Google Analytics

We use Google Analytics (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to understand how visitors use our website (e.g. pages visited, session duration, general traffic sources).

• Legal basis: Your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG), given via our cookie banner. Google Analytics only runs after you actively consent.
• What is processed: Usage data such as pages viewed, approximate location (derived from IP, which is shortened/anonymized before storage), device and browser type, and referral source. Google Analytics does not collect your name or contact details directly.
• Data transfers: Data may be transferred to and processed on Google's servers, including in the United States. Google is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognized as providing an adequate level of protection.
• Retention: Analytics data is retained according to the settings configured in our Google Analytics account (commonly 14 months) before automatic deletion.
• Withdrawing consent: You can withdraw consent at any time via the cookie settings link in the footer, or by using the Google Analytics Opt-out Browser Add-on.

More information: Google's Privacy Policy and how Google Analytics processes data on websites.

5. Embedded Videos (YouTube / Vimeo)

We embed video content (such as game trailers) from YouTube and/or Vimeo on some pages. Where possible, we use these platforms' privacy-enhanced embed modes (e.g. YouTube's "youtube-nocookie.com" domain), which limit data processing until you actively play the video.

However, even in privacy-enhanced mode, when you play an embedded video, a connection is made to the provider's servers, and your IP address and browser information are transmitted to and processed by:

• YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Vimeo: Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA

Legal basis: Your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG), given via our cookie banner before the embedded player loads.

More information: YouTube's Privacy Policy / Vimeo's Privacy Policy.

6. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erasure of your data ("right to be forgotten") (Art. 17 GDPR)
• Restrict processing under certain conditions (Art. 18 GDPR)
• Data portability for data you provided to us (Art. 20 GDPR)
• Object to processing based on legitimate interest, including profiling (Art. 21 GDPR)
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR)
• Lodge a complaint with a supervisory authority. The competent authority for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 27, 91522 Ansbach, Germany www.lda.bayern.de

To exercise any of these rights, contact us at [contact email].

7. Data Security

We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Data transmitted via this website is encrypted using TLS/SSL.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted with a revised "Last updated" date.

9. Contact

For any questions about this Privacy Policy or your data, contact:

Ironbite Games GmbH Gartenstraße 7a 93188 Pielenhofen, Germany