Privacy Policy
Last updated: October 2026
Questi testi legali sono disponibili in inglese e tedesco. Fa fede la versione tedesca.
1. Controller
Ertugrul Kolac
Remboldstr. 5, 86356 Neusäß
Deutschland / Germany
Email: info@boltfray.com
A data protection officer is not legally required and has not been appointed.
2. Visiting the website (server logs)
Our hosting provider processes technically necessary data (IP address, time, page, browser type) to deliver the site securely. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and stability). We do not store plain IP addresses ourselves.
3. Waitlist and closed beta
When you sign up we process: your email address (stored encrypted), optional player name, selected platforms, language, optional creator channel, time of consent and confirmation, a hashed (non-reversible) IP value for abuse prevention and a truncated browser identifier.
Purpose: waitlist updates, selecting 100 beta testers based on platform and region balance, and inviting them. Legal basis: your consent (Art. 6(1)(a) GDPR).
Double opt-in: we send a confirmation link that expires after 48 hours. You are only added after confirming.
To check deliverability we only query the domain of your email (MX record) via Cloudflare DNS; your full address is not transmitted.
4. Retention
Unconfirmed sign-ups are deleted once the confirmation link expires. Confirmed sign-ups are kept until you leave the waitlist or it is no longer needed after the first public release, then deleted.
5. Recipients and processors
Hosting and database: Lovable (Lovable Labs Incorporated) and its sub-processors, including Cloudflare, Inc., under a data processing agreement (Art. 28 GDPR). Transfers to third countries (e.g. USA) rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.
We do not sell your data, share it with other third parties or use it for advertising.
6. Cookies, tracking and fonts
No analytics or marketing cookies and no tracking. Only your cookie choice is stored in your browser’s local storage (strictly necessary, § 25(2) TDDDG). Fonts are served locally, not from Google.
7. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). You may withdraw consent at any time via your personal removal link or by emailing info@boltfray.com.
You may lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
8. Required data
Your email address is required for the waitlist; everything else is optional. No automated decision-making within the meaning of Art. 22 GDPR takes place.