Privacy policy
Last updated: 21 October 2026
1. Controller
The controller responsible for data processing on this website is:
[First and last name]
[Street and number]
[Postcode and city]
Germany
Email: kontakt@pm-studios.de
2. Overview
This website does not use analytics or tracking tools and shows no advertising. Fonts, icons, images and scripts are stored on the same server as the website. No content is loaded from other servers when you visit the website.
3. Hosting and server log files
This website is hosted by: GitHub Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA.
The website is published with GitHub Pages. According to GitHub, the IP addresses of visitors are logged and stored for security purposes. GitHub also processes data in the USA.
Each time the website is accessed, the server automatically stores the following data in log files: IP address, date and time of access, page requested, amount of data transferred, the previously visited page (referrer), and browser and operating system.
This processing is technically necessary to deliver the website and to keep it secure and stable. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and error-free operation of the website. The hosting provider processes the data on our behalf (Art. 28 GDPR). How long the log files are kept is decided by the hosting provider. For more information, see the hosting provider's privacy policy.
4. Cookie for the language setting
When you choose a language using the language switch, we store your choice in a cookie named
lang. It only contains the language code (for example en) and is deleted automatically
after one year. The cookie is used only to show the website in the language you chose and for no other purpose.
The legal basis for storing it is § 25 (2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because the cookie is strictly necessary to provide the service you explicitly requested. You can delete the cookie in your browser at any time. The website will then be shown in the default language again.
When you close the cookie notice with "Got it", your browser remembers this in its local storage
(localStorage, entry pm-cookie-notice), so the notice does not appear on every page.
The entry is not sent to us and stays until you delete it in your browser.
The legal basis is § 25 (2) No. 2 TDDDG.
5. Contact by email and ticket form
When you send us an email, we process the information it contains (for example your email address, your name and the content of your message) to handle your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract or steps prior to entering into a contract, otherwise Art. 6 (1) (f) GDPR; our legitimate interest is answering your request. We delete the data as soon as it is no longer needed, unless statutory retention obligations (in particular under commercial and tax law) apply.
You can also open a ticket with the form on our website. We process the details you enter there (name, email address, optional Discord name, topic, subject and message) on the same legal basis and for the same purpose as an email. The form does not send anything itself: it opens your email program with the ticket filled in, and the ticket only reaches us when you send that email.
If you create an account, we store your username, email address, a securely hashed version of your password
(never the password itself), the time of registration and of your last login, as well as your tickets and messages.
We use this data to provide your account and to handle your requests (Art. 6 (1) (b) GDPR). While you are logged in,
a cookie named pm_session keeps you logged in; it is deleted when you log out or close the browser.
It is strictly necessary for the login you requested (§ 25 (2) No. 2 TDDDG). To protect against password guessing,
we store the IP address of failed login attempts for 15 minutes. You can have your account deleted at any time
by writing to us.
6. Discord
We handle requests and orders on our server on the Discord platform. Our website only links to it. A connection to Discord is only made when you click one of these links.
When you join our Discord server or open a ticket, we process the data you provide there (for example your username, your messages and file attachments) to handle your request and, where applicable, your order. The legal basis is Art. 6 (1) (b) GDPR, otherwise Art. 6 (1) (f) GDPR. We delete tickets as soon as they are no longer needed, unless statutory retention obligations apply.
Discord also processes your data under its own responsibility, including in the USA. For details, see Discord's privacy policy.
7. Links to other websites
Our website contains links to other services (for example GitHub). Data is only transferred to the respective provider when you click such a link. Their privacy policy applies there.
8. Recipients
Your data is received by our hosting provider (see section 3). Beyond that, we only pass on data if we are legally obliged to do so.
9. Your rights
With regard to your personal data, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise these rights, contact kontakt@pm-studios.de. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
10. Right to object
Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.
11. Obligation to provide data
You are not obliged to provide us with personal data. Without the data listed in section 3, however, the website cannot be delivered. We do not use automated decision-making, including profiling.
This is a translation. The German version of this privacy policy is the binding one.