Legal
Privacy policy
Controller
Sören Hauser
c/o flexdienst – #21945
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
67663 Kaiserslautern
Germany
sohauser.dev@gmail.com
Data-minimising website
This website uses no advertising trackers, external fonts or user accounts. Cloudflare Web Analytics is not enabled. Personal data is processed only where necessary to provide the website, handle the voluntary release signup or respond to an email.
Hosting
The website is delivered through Cloudflare. When it is accessed, technically necessary connection data is processed. This may include the IP address, time, requested address, browser information and operating-system information. Processing is necessary to deliver the site, maintain its stability and defend against attacks. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of this website.
Contact by email
If you contact me by email, I process the information you provide to handle your request. The legal basis is Art. 6(1)(b) GDPR for contractual or pre-contractual enquiries and otherwise Art. 6(1)(f) GDPR. The data is deleted when it is no longer needed for the enquiry and no statutory retention duties apply.
Web design enquiry form
The web design enquiry form processes the business name, contact name, email address, optional phone number, existing website, package interest, preferred reply method and the content of the enquiry. This is used to answer the request and take steps before entering into a possible contract under Art. 6(1)(b) GDPR. Enquiries that do not result in a project are deleted no later than six months after communication ends, unless legal duties or the establishment, exercise or defence of legal claims require longer storage. The information is not used for newsletters or unrelated advertising.
Release notification
On the Craft Flow and Coregrove pages, you may voluntarily sign up for exactly one email when the selected game is released. The email address, selected game, language, signup and confirmation times, and the applicable consent version are stored.
A confirmation email is sent after signup. The signup is not complete until the confirmation link has been opened. The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time through the unsubscribe link in the release email or by contacting the controller.
Unconfirmed signups are deleted after seven days. After the release email or an unsubscribe request, the data is deleted within 30 days unless statutory obligations require otherwise.
Cloudflare D1, Workers and Turnstile
The release signup and the web design enquiry form are processed by Cloudflare Workers and stored in Cloudflare D1 databases. Cloudflare Turnstile protects the forms against automated submissions. Cloudflare processes technically necessary connection and device data to determine whether a request is made by a human. The result is checked on the server; the Turnstile token is not stored permanently.
Further information is available in the Cloudflare Privacy Policy.
Email delivery through Resend
Confirmation and release emails are delivered through Resend, Inc. The email address and the content of the relevant message are sent to Resend for this purpose. Open and click tracking are not enabled. Further information is available in the Resend Privacy Policy.
Processing outside the EU
Cloudflare and Resend are providers based in the United States. Processing in third countries therefore cannot be excluded. Their privacy policies describe the safeguards they use.
Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. You may also lodge a complaint with a data-protection supervisory authority.
Privacy in the games
The apps have separate privacy policies because they use different features and Apple services:
Last updated
August 2026