Privacy policy

Last updated: 7 November 2026

1. Who is responsible

The controller for the processing of your data on www.goetterfunke.games, on download.goetterfunke.games and in the Götterfunke test build is:

Daniel Bartonitschek
Wisbyer Str. 64
10439 Berlin
Germany
Email: hallo@goetterfunke.games

Please send any questions about data protection to this address.

2. The short version

• This website sets no cookies. The only exception is the sign-in cookie in the download area for testers (section 5). It loads no JavaScript, no tracking script and no content from other addresses. Fonts, images and videos are served from our own address.
• Data is processed in four cases:
  1. You visit the site. Our host then processes the connection data needed to deliver it.
  2. You sign up as a tester.
  3. You download the game as a tester.
  4. You send a report or performance data from the game.
• The game sends nothing to Unity or any other service. Data only leaves it when you send a report or have agreed to share performance data.

3. Visiting the website (hosting)

The websites www.goetterfunke.games and download.goetterfunke.games are hosted by Cloudflare (Cloudflare, Inc., USA). Cloudflare delivers them and routes the traffic. With every visit, Cloudflare processes this data:

• your IP address,
• the time,
• the address you requested,
• your browser identifier (user agent),
• the page you came from (referrer).

A page can't be delivered without this data. We keep no logs of it ourselves, except for the anonymous click and page view counts below.

Cloudflare also asks your browser to report failed connections to Cloudflare (Network Error Logging). For this, your browser remembers a setting from Cloudflare. Successful visits are not reported. A report describes the failure, such as the type of error and the point at which the connection broke off. From the IP address, Cloudflare works out the network provider, country and metro area, then discards the address straight away. This is used to spot connection problems. More from Cloudflare: https://developers.cloudflare.com/network-error-logging/

Clicks and page views. We count how often our pages are viewed and how often someone clicks one of our redirect links (addresses starting with www.goetterfunke.games/geh/, for example in YouTube descriptions). Counting happens on the server while the page is delivered, without a cookie and without a script. We store only the day, the page viewed or the target of the link, the language of the page, the values in the address itself (utm_source and utm_campaign), a rough origin such as "YouTube", "Google", "from our site" or "direct", and whether you came on a phone, tablet or computer. We work out the device from your browser identifier but do not store the identifier itself. We do not store your IP address or the time of day either. This only produces totals that show us which pages are read and which links are used. We cannot tell who is behind them, not even across several visits.

• Purpose: delivering the site securely and reliably, and counting anonymously which pages and links are used.
• Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is being able to offer the site at all, and without disruption, and knowing which content people are interested in.
• Retention: We store no connection data, and we keep the anonymous click and page view counts for 13 months at most. Cloudflare decides how long it keeps the connection data; see Cloudflare's privacy policy in section 10.

4. Signing up as a tester

On the “Join” page you can sign up as a tester. We then process:

• your name,
• your answer to “How do you know Daniel?”,
• your email address,
• the time and the language of the page.

• Purpose: deciding whom to invite to the test, and writing to you about it.
• Legal basis: Art. 6(1)(b) GDPR, because you asked to take part in the test.
• Protection against abuse: To stop programs from flooding the form, the server briefly counts how many sign-ups come from one address. For this it derives an identifier (hash) from your IP address and a random value, and keeps it only for a one-minute window. Your IP address itself is not stored. The random value exists only in our internal storage; a new one is created every day, and the previous day's value is overwritten. Without it, the IP address can't be worked out from the identifier. The legal basis for this is Art. 6(1)(f) GDPR; our legitimate interest is protection against abuse.
• Where it's stored and for how long: Your sign-up first lands in storage at Cloudflare. We collect it from there onto the controller's computer and delete it at Cloudflare. We keep it there until the end of the test, for 12 months at most.

5. Downloads for testers

As a tester you get a personal login (name and password) for download.goetterfunke.games. We then process:

• Your login name and password, to sign you in. The login is only held as a protected value at Cloudflare, not in a file.
• If you sign in on the sign-in page: a cookie, so that you stay signed in on this device for 30 days. It only holds your login name, the expiry date and a signature. It only applies to download.goetterfunke.games, can't be read by scripts and is deleted when you sign out. The browser's sign-in window works without a cookie.
• For each login, how often and which files were downloaded, and when the last download was. No IP address or browser is stored with this.
• Only if you enter a wrong password: an identifier (hash), the number of failed attempts and the waiting time. The identifier is derived from your IP address and a random value that changes daily, as in section 4. After three failed attempts the address has to wait a while. This data is deleted as soon as you sign in correctly, and at the latest after one day without another failed attempt. When the random value changes at midnight (UTC), the count starts over.

• Purposes: giving you the game, seeing whether and which version reaches the testers, and protecting the login against password guessing.
• Legal basis: Art. 6(1)(b) GDPR for the login and download, because they are part of the test. Art. 6(1)(f) GDPR for the counting and the protection against guessing; our legitimate interest is running the test and keeping access secure. The sign-in cookie is strictly necessary for the access you request (§ 25(2) no. 2 TDDDG).
• Retention: one day for failed attempts, as above. We keep the download count for 30 days. The sign-in cookie expires after 30 days.

6. Launcher

The launcher asks for your login once. It stores it encrypted on your computer, using Windows encryption for your user account, in the file zugang.dat in the program folder. It only sends the login to download.goetterfunke.games to fetch the latest version, and connects to no other address. Nothing is stored on our side beyond what section 5 describes. To remove the stored login, delete zugang.dat.

7. Reports from the game

In the test build you can send us a report with a button. It contains:

• your text, the type of report and your tester name,
• a screenshot,
• your save game at the moment of the report,
• technical details about the game: version and build, play time, window size, whether it runs in the editor or as a build, number of creatures and buildings, the latest game messages and performance values (frame rate, frame times, resolution, graphics quality level and the name of your graphics card).

The server adds the time of receipt and the size, but no IP address. Without a connection, the report stays on your computer and is sent later.

• Purpose: finding bugs and improving the game.
• Legal basis: Art. 6(1)(b) GDPR, because reporting is part of the test you are taking part in.
• Where it's stored and for how long: The report first lands in storage at Cloudflare. We collect it from there onto the controller's computer and delete it at Cloudflare. We keep it there until the end of the test, for 12 months at most.
• Deletion: If you'd like us to delete a report sooner, write to hallo@goetterfunke.games and give your tester name.
• Analysis with AI: Götterfunke is built with Claude Code, a tool made by Anthropic. AI sessions analyse reports to fix bugs, including the text, tester name and build. This content is passed to Anthropic, see section 10.

8. Performance data from the game

The game asks whether it may send performance data. Only if you agree does it send:

• details about your computer: graphics card and video memory, graphics API, processor and cores, RAM, operating system, resolution, refresh rate, display mode, VSync, frame rate and graphics quality level,
• measurements: frame times and the size of the scene, and in test versions after 7 November also whether the last launch got stuck before the first frame (build, time, last start step reached),
• an identifier for the game session and your tester name.

The server stores no IP address. If you say no, nothing is sent, and anything not yet sent is discarded.

• Purpose: seeing how the game runs on different computers, and making it faster.
• Legal basis: your consent, Art. 6(1)(a) GDPR.
• Withdrawal: You can withdraw your consent at any time with effect for the future. If you'd like us to delete what was already sent, write to hallo@goetterfunke.games.
• Where it's stored and for how long: as with reports in section 7, until the end of the test, for 12 months at most.
• Analysis with AI: Performance data is also analysed by AI sessions using Claude Code, see sections 7 and 10.

9. YouTube

We use the YouTube API Services for our own YouTube channel. Only the controller signs in, with our own channel. Our application may:

• upload videos to our channel,
• read channel and video data for our channel,
• read comments on our videos, including those YouTube holds for review.

If you comment on one of our videos, we read your comment along with the name it appears under on YouTube. From this we write a summary for our weekly report. We don't store individual accounts. Replying, approving and deleting are only ever done by hand.

• Purpose: running our channel and seeing what viewers say about the videos.
• Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is being able to respond to feedback on our videos.
• Access token: It is stored only on the controller's computer and remains valid until it is revoked.
• Terms of Service: Anyone who gives our application access to a YouTube account agrees to the YouTube Terms of Service: https://www.youtube.com/t/terms
• Privacy at Google: Data held by Google is covered by the Google Privacy Policy: https://policies.google.com/privacy
• Revoking access: Anyone who has given our application access can revoke it at any time in their Google account: https://security.google.com/settings/security/permissions

10. Recipients and transfers outside the EU

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, runs the website, the downloads, the form and the storage for sign-ups and reports on our behalf.

• Cloudflare processes the data on our behalf.
• The storage is set to prefer Eastern Europe, but is not bound to the EU. As Cloudflare is a US company, data may reach the USA.
• Basis for this: according to Cloudflare, it takes part in the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023). More in section 7 of Cloudflare's privacy policy.
• Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/
• Cloudflare data processing agreement: https://www.cloudflare.com/cloudflare-customer-dpa/

Anthropic provides Claude Code, which AI sessions use to analyse reports and performance data (sections 7 and 8). For users in the EEA, Anthropic names Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland, as the controller. Data may also be processed in the USA. More in Anthropic's privacy policy.

• Anthropic privacy policy: https://www.anthropic.com/legal/privacy

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: for the YouTube API Services, see section 9.

GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA: we keep task notes in our private code repository at GitHub. These may contain excerpts from reports (text, tester name, build). GitHub states that it takes part in the EU-US Data Privacy Framework.

• GitHub privacy statement: https://docs.github.com/site-policy/privacy-policies/github-general-privacy-statement

Beyond this, we don't pass your data on to anyone.

11. Your rights

You have the right:

1. to access the data we hold about you (Art. 15 GDPR),
2. to have incorrect data corrected (Art. 16 GDPR),
3. to erasure (Art. 17 GDPR),
4. to restriction of processing (Art. 18 GDPR),
5. to data portability, that is, to receive your data in a common format (Art. 20 GDPR),
6. to withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data based on a legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless there are compelling legitimate grounds.

An email to hallo@goetterfunke.games is all it takes.

Right to lodge a complaint: You can complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59–61, 10555 Berlin, Germany.

12. Do you have to provide data?

No. But without signing up we can't invite you to the test, and without a login there's no download. Reports and performance data are voluntary. There is no automated decision-making or profiling.

13. Changes

If anything about the services above changes, we'll update this policy. The version with the date at the top applies.