Privacy policy

1. Who is responsible

The controller under the GDPR is the provider named below and in the imprint:

2. In short

GameDNA shows no ads and uses no tracking, analytics or third-party scripts; fonts are served by the site itself. We process personal data only to run the site and your account.

3. Hosting and delivery (Cloudflare)

The site runs on Cloudflare (Cloudflare, Inc., USA). Every request passes through Cloudflare, which processes your IP address, the time, the requested address and browser details to deliver the pages and protect them from attacks. From your IP address Cloudflare derives your country, which we use only to show prices and store links for your country. Legal basis: Art. 6(1)(f) GDPR (secure, working website). Cloudflare is our processor; transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses.

4. Cookies

We use two strictly necessary cookies and nothing else: gamedna_csrf protects forms against misuse and is deleted when you close the browser; gamedna_auth keeps you signed in for 30 days and is set only after you use a sign-in link. They need no consent (Section 25(2) TDDDG); legal basis Art. 6(1)(b) and (f) GDPR.

5. Your account

For an account we store your email address, your username, when the account was created and verified, and your last sign-in. Sign-in links are stored only as a fingerprint (hash) and expire after 30 minutes. Legal basis: Art. 6(1)(b) GDPR. We keep the data until you delete your account.

6. Sign-in emails (Resend)

Sign-in emails are sent through Resend (Resend, Inc., USA), which receives your email address and the content of the email for that purpose. Resend is our processor; transfers to the USA are based on standard contractual clauses. Legal basis: Art. 6(1)(b) GDPR.

7. Votes

Your votes are stored with your account and shown publicly only as part of averages, never with your name. They are deleted with your account.

8. Store links and prices

Store links first lead to our own redirect and then to the shop. From then on the shop, and the affiliate network it works with, process data under their own privacy policies; we receive only reports about commissions, without data about you. To show a GOG price, our server asks GOG for the price in your country; GOG receives nothing about you, not even your IP address.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. You can delete your account yourself on the account page; for everything else, write to us. You may also complain to a data protection supervisory authority.

Contact: info@eudassist.com