YOUR PRIVACY.

1. Controller and contact

The website operator is responsible for personal data processed through this website. The controller’s legal name, postal address and contact email must be added to the legal notice before public launch. If a data protection officer is appointed or required, their contact details must also be added.

2. Scope of this notice

This notice covers the Astral Roleplay landing page and its legal pages. The page code has no registration, contact form, payment service, advertising, analytics, tracking pixels or embedded social media. Fonts, images, stylesheets and scripts are served from this website’s own origin.

It does not describe account or message processing on the forum, Discord, the multiplayer client or the game server. Those services need their own accurate privacy information before use.

3. Hosting and technical access data

Delivering a web page involves processing the visitor’s IP address and request information. The hosting and security services may also process timestamps, requested URLs, response codes, browser information and security events.

The current private preview is hosted through OpenAI Sites with Cloudflare infrastructure. Access is restricted through the hosting platform. Hosting and access services may process account information or use authentication and security cookies separately from the page code.

Hosting and access providers

[CONFIRM CONTRACTING LEGAL ENTITIES, ADDRESSES, ROLES AND RECIPIENTS]

Purposes and lawful basis

[CONFIRM DELIVERY, ACCESS CONTROL AND SECURITY PURPOSES; DOCUMENT THE APPLICABLE ARTICLE 6 GDPR BASIS FOR EACH]

Retention

[ADD VERIFIED LOG, ACCESS AND SECURITY DATA RETENTION PERIODS OR CRITERIA]

International transfers

[CONFIRM LOCATIONS, ANY TRANSFERS OUTSIDE THE EEA, APPLICABLE SAFEGUARDS AND HOW TO OBTAIN A COPY]

If processing is based on legitimate interests under Article 6(1)(f) GDPR, the relevant interests and balancing assessment must be established. Provider contracts and any required data processing agreements must reflect the actual service setup.

4. Cookies and browser storage

The landing-page code does not set cookies, read or write local storage, or use device fingerprinting. It does not load Google Fonts or social media widgets from external servers.

This statement does not cover cookies or other storage used by the hosting platform’s sign-in and security layer. Their names, purposes, providers, durations and legal basis must be checked and added before public launch. Non-essential storage or access must not begin before any required consent under Section 25 TDDDG. No optional analytics or advertising is enabled in this website code.

5. External links

Discord, the forum and the game store are ordinary links, not embedded content. The landing-page code does not load their services simply because you view this page. Following a link connects your browser to the destination, which can process your IP address and other request or account data. These links use a no-referrer policy.

Check the privacy information available at each destination. The forum’s operator, accounts, cookies and retention rules must be documented separately; linking it here does not establish that those arrangements have been reviewed.

6. Messages to the operator

If you contact the operator, your contact information and message content will be processed to handle your request.

[ADD THE CONTACT SERVICE PROVIDER, PURPOSE-SPECIFIC LAWFUL BASIS AND VERIFIED RETENTION PERIOD OR CRITERIA BEFORE ACTIVATING THE CONTACT ADDRESS]

7. Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction of processing and data portability under Articles 15–20 GDPR. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

Right to object: where data is processed under Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. If personal data is used for direct marketing, you may object to that processing at any time.

Contact the controller using the details in the legal notice. You also have the right to complain to a supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the alleged infringement (Article 77 GDPR).

[ADD THE RELEVANT GERMAN SUPERVISORY AUTHORITY AND ITS CONTACT DETAILS ONCE THE OPERATOR’S LOCATION IS KNOWN]

8. Required data and automated decisions

No personal information is requested through a form on this landing page. Technical request data is necessary to deliver the page. Access to the private preview depends on the hosting platform’s authentication requirements.

The page code does not perform profiling or automated decisions that produce legal or similarly significant effects. Any separate provider processing must be verified and described where applicable.