Datenschutz
Privacy policy · Last updated: November 2026
This website is deliberately simple. It sets no cookies, uses no analytics or tracking tools, and loads no fonts, scripts or embeds from other providers. The only exception is our videos, which load from YouTube only after you click play (see section 4). This page explains the little data that is processed when you visit the site.
1. Controller
Spaceflower UG (haftungsbeschränkt)Rednitzstr. 18
90449 Nürnberg
Germany
Represented by: Thomas Otto
Email: privacy@spaceflower.de
Phone: +49 911 580 547 67
Register court: Amtsgericht Nürnberg, HRB 36475
2. Hosting and server log files
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Whenever you open a page, your browser automatically sends technical information that the server stores in log files:
- IP address
- Date and time of the request
- Page or file requested and amount of data transferred
- Referrer URL (the page you came from)
- Browser type, version and operating system
We need this data to deliver the website and to keep it stable and secure, for example to detect attacks or misuse. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Log files about visitors are stored for a maximum of 7 days and then deleted, unless we need them longer as evidence of a specific security incident. We have a data processing agreement with the hosting provider under Art. 28 GDPR.
3. No cookies, no tracking
We do not use cookies, local storage, analytics, advertising tools or social media plugins. We do not create user profiles. That is why this website has no cookie banner. If you choose to play a video, YouTube may store information on your device; see section 4.
4. YouTube videos
We show two YouTube videos: the trailer for Let Them Trade and a documentary about our studio. At first, the page only shows a preview image stored on our own server, and no connection to YouTube is made. Only when you click the play button is the video loaded from YouTube in its privacy-enhanced mode (youtube-nocookie.com).
Once you click play, your browser connects to the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google receives at least your IP address, the page you came from and technical information about your browser. Google may also store information on your device and link the visit to your Google account if you are logged in. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework.
The legal basis is your consent by clicking play (Art. 6(1)(a) GDPR and § 25(1) TDDDG). If you do not click, no data is sent to YouTube. For details, see Google's privacy policy.
5. Links to other websites
The website links to Steam and Discord. Links are plain links: no data is sent to these services until you click one. Once you follow a link, the privacy policy of that service applies:
- Steam – Valve Corporation, USA: privacy policy
- Discord – Discord Inc., USA: privacy policy
6. Our Discord community
We run a Discord server to talk with players and share news about our games. If you interact with us there, the platform processes your data under its own terms, and some of it may be processed outside the EU. For some platform features, we and the platform may be joint controllers under Art. 26 GDPR. Our legal basis is our legitimate interest in communicating with our community (Art. 6(1)(f) GDPR). You can most effectively exercise your rights directly with the platform, but you can always contact us too.
7. Contacting us
If you email us, we process your email address and the content of your message to answer you. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, and Art. 6(1)(f) GDPR otherwise. We delete the data once your request is resolved, unless we are legally required to keep it, for example for tax reasons.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have it corrected (Art. 16) or deleted (Art. 17)
- restrict its processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw any consent you gave, with effect for the future (Art. 7(3))
To exercise these rights, email privacy@spaceflower.de. You also have the right to complain to a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.
9. Encryption
This website uses TLS encryption (HTTPS) to protect data on its way between your browser and our server.
10. Changes
We update this policy when the website or the legal situation changes. The current version is always available on this page.