Privacy Notice

Controller

Data We Process

• HTTP request metadata may include IP address, user agent, and timestamps for security and diagnostics.
• Cloudflare is used as CDN/proxy and may process traffic metadata to deliver and protect the service.
• Media and project-related assets may be stored and served through Cloudflare R2.
• Authentication/session cookies are used for sign-in and protected routes; deployments may also use NextAuth cookies if enabled.
• Local-first platform features may store project, auth, and save metadata in your browser storage.

Purpose and Legal Basis

Processing is performed to provide platform functionality, secure operation, and creator/player account features. Depending on context, processing is based on contract performance, legitimate interests (security/stability), and legal obligations.

Retention

Server-side operational logs and related telemetry are retained only as long as required for operations, abuse prevention, and compliance. Browser-local data is controlled by you and can be removed via browser settings.

Your Rights

If GDPR applies, you may have rights of access, rectification, erasure, restriction, portability, and objection, plus the right to lodge a complaint with a supervisory authority.