Privacy
Controller
Ronny Fischer · OverLKD Studio
An der Mehle 12b, 97295 Waldbrunn, Germany
[email protected]
Orders and optional accounts
We process your email address, purchased products, amounts, language, payment and delivery status to fulfil your purchase and provide support (GDPR Article 6(1)(b)). Customer accounts are optional and additionally store an optional name, verified email address, language and consent preferences. Billing data is processed where needed for accounting and legal obligations (Article 6(1)(c)).
Payments
Stripe processes your payment. We do not store full card details. We receive payment references, amounts and status, together with required billing and tax information. Stripe processes data under its own privacy notice.
Sign-in, keys and email
Single-use email links verify your account and sensitive changes. Sessions and access links are protected. Transactional email supports fulfilment and account security. Promotional email requires your explicit consent (Article 6(1)(a)), which you can withdraw at any time.
Necessary cookies
A language cookie remembers your selection. Protected session cookies enable customer and administrator sign-in, with security functions to prevent misuse. Fonts are hosted locally. The store does not use advertising or tracking cookies.
Hosting and security
Our hosting, Cloudflare and email service providers process connection or delivery data needed to run the service. Security logs and abuse prevention serve our legitimate interest in protecting the service (Article 6(1)(f)). Steam keys are stored encrypted. External services such as Steam, Discord and social networks process data under their own rules when you visit them.
Retention
We retain contractual and invoice records according to statutory retention obligations. Deleting a customer account therefore does not automatically delete all order records. Security and access data is retained only as long as needed for its purpose.
Your rights
You may request access, correction, erasure, restriction and data portability, and object to processing based on legitimate interests. You may withdraw consent for future processing at any time and complain to a data protection supervisory authority. Contact us at the address above; we verify your identity to protect your data.