LEGAL

Privacy Policy

Last updated: October 20, 2026

We take the protection of your personal data seriously. This policy explains what data is processed when you visit this website, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Controller

DevTraum GmbH
Elisabethweg 2
2130 Mistelbach, Austria
Email: [email protected]
Company register: FN 657669 k, Landesgericht Korneuburg
VAT ID: ATU82461168

2. Summary

3. Hosting and server log files

This website is hosted by DigitalOcean, LLC (USA) in its Frankfurt (FRA1) data center in Germany, so the website data is stored in the EU. DigitalOcean processes this data on our behalf under a data processing agreement (Art. 28 GDPR). As a US company, DigitalOcean may be able to access the data from the USA; such transfers are covered by the EU Standard Contractual Clauses included in DigitalOcean's data processing agreement. When you visit the site, the server automatically records technical data that your browser transmits: IP address, date and time of the request, requested page, referrer URL, browser type and operating system.

This data is needed to deliver the website and to keep it secure (e.g. to detect attacks). Legal basis: our legitimate interest under Art. 6(1)(f) GDPR. Log files are deleted after 14 days unless they are needed to investigate a security incident.

4. Content delivery network and security (Cloudflare)

We use the content delivery network and security services of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. All requests to this website are routed through Cloudflare's servers, which deliver the site faster and protect it against attacks and abusive bots. In the process, Cloudflare processes the same technical data your browser transmits to any web server: IP address, date and time of the request, requested page, referrer URL, browser type and operating system. Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare may process data in the USA; such transfers are covered by the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the EU Standard Contractual Clauses included in Cloudflare's data processing agreement.

To tell human visitors apart from automated bots, Cloudflare may set the cookie __cf_bm. It is technically necessary to protect the site, contains no information that identifies you, is not used for tracking, and expires after 30 minutes (§ 165(3) TKG 2021). Cloudflare also protects the email addresses on this site against spam harvesters (email obfuscation): addresses are encoded in the page and decoded in your browser by a small script delivered from our own domain. No additional data is sent to third parties for this.

Legal basis: our legitimate interest in a fast, secure and stable website under Art. 6(1)(f) GDPR. Cloudflare privacy policy: cloudflare.com/privacypolicy.

5. Storage on your device

Apart from the Cloudflare cookie described above, we store one entry in your browser's local storage (de-consent) to remember whether you accepted or declined external content. It contains no personal data, is not sent to us, and is strictly necessary to respect your choice (§ 165(3) TKG 2021). You can delete it at any time via your browser settings or the “Privacy settings” link in the footer of our homepage.

6. ClickUp (news feed and feedback form)

Our news feed and feedback form are embedded from ClickUp, a service of Mango Technologies, Inc. d/b/a ClickUp, 350 Tenth Ave, 5th Floor, San Diego, CA 92101, USA. They are only loaded after you click “Accept” in the privacy banner or “Load content” on the placeholder.

When loaded, your browser connects to ClickUp's servers and transmits at least your IP address and technical browser data. If you submit the feedback form, the information you enter (e.g. your message, and your email address if you provide one) is stored in our ClickUp workspace. We use it only to process your feedback and improve the game.

Legal basis: your consent under Art. 6(1)(a) GDPR. Data is transferred to the USA. This transfer is safeguarded by the EU Standard Contractual Clauses (Commission Decision 2021/914) included in ClickUp's Data Protection Addendum (clickup.com/terms/dpa). ClickUp privacy policy: clickup.com/privacy.

7. YouTube (trailer)

The game trailer is embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The video is only loaded when you press play; before that, only a preview image hosted on our own server is shown.

Once you press play, your browser connects to YouTube/Google servers and transmits your IP address and technical data. Google may store cookies or similar identifiers and transfer data to the USA. Legal basis: your consent under Art. 6(1)(a) GDPR, given by pressing play. Google privacy policy: policies.google.com/privacy.

8. Links to other websites

Our site links to Steam, YouTube, TikTok, Instagram, LinkedIn and Reddit. These are plain links: no data is sent to these services until you click one. After that, the privacy policy of the respective provider applies.

9. Contacting us

If you contact us by email, we process your email address and message to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed, unless statutory retention periods apply.

10. Your rights

You have the right to:

To exercise these rights, contact us at the address above. You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.

11. Changes

We may update this policy when our website or the law changes. The current version is always available on this page.