Privacy policy

As of: 27. Oktober 2026 · Translation for information only – the German version is legally binding.

1. Controller

[Vor- und Nachname]
[Straße und Hausnummer]
[PLZ und Ort]
Deutschland
Email: [ventoview@beispiel.com]

2. The key points

  • Your game data, designs and own images stay on your PC. The editor and overlay fetch them in the browser directly from the Ventoview app on your PC (address 127.0.0.1). This data does not reach our server.
  • For an account we only store a few details (section 5).
  • We use no advertising or analytics cookies and no tracking.

3. Hosting and server

The website runs on a server of [Hosting-Anbieter mit Anschrift, z. B. Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen]. The provider processes the data on our behalf (Art. 28 GDPR).

When a page is requested, the server technically processes your IP address, the time, the requested address and your browser's identifier in order to deliver the page. We do not keep permanent access logs. Error messages may briefly end up in the server's system log, which is overwritten automatically. To protect the cancellation form against abuse we keep IP addresses in memory for up to one hour. While a page of the website is open, it briefly checks in with the server about every 30 seconds – with a random number for that open page, its address and whether it is currently visible; if you are signed in, the server links the check-in to your account. We only use this to count how many pages and accounts are online right now. It stays in memory and is forgotten no later than 2.5 minutes after the last check-in; nothing is stored on your device for this. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).

4. Cookies

We only use two technically necessary cookies (§ 25 (2) no. 2 TDDDG). No consent is required for them.

  • sh_session: keeps you signed in, 30 days.
  • sh_oauth: protects the sign-in with Twitch or Google, 10 minutes.

The editor also remembers your view (e.g. column widths, grid, sound off) in your browser's local storage. This information does not leave your browser.

5. Account and sign-in with Twitch or Google

Sign-in only works via Twitch (Twitch Interactive, Inc., USA) or Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Only when you click “Sign in with Twitch” or “Sign in with Google” are you forwarded to the provider. Afterwards we receive from it:

  • your account ID with the provider and your login name,
  • your display name and the address of your profile picture,
  • your email address.

We do not store a password. We do not get access to your channel. Your browser loads your profile picture directly from the server of Twitch or Google, which tells the provider your IP address. For transfers to the USA the respective provider's safeguards apply (EU-US Data Privacy Framework or standard contractual clauses). The legal basis is providing your account (Art. 6 (1) (b) GDPR).

6. Connected PCs and license

When you connect a PC to your account, we store a name for the PC (e.g. “Windows PC”), the time of the connection and of the last license request, and a check value of the device key. The app requests a new license about every six hours. The legal basis is Art. 6 (1) (b) GDPR.

If you connect your Twitch account in the app (e.g. for chat commands or alerts), this happens directly between the app and Twitch. The access keys stay encrypted on your PC. We receive none of it.

7. Purchases and subscriptions via Paddle

Purchases and subscriptions are handled by Paddle.com Market Limited, Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom, as reseller (Merchant of Record). Paddle is itself responsible for payment and invoice data. The checkout (Paddle.js) is only loaded from Paddle's servers when you click “Buy” in the shop. Details are in Paddle's privacy policy.

From Paddle we receive your customer ID, your email address, the purchased item, the transaction ID and the status and period of your subscription so that we can record the unlock in your account. We do not receive payment data such as card numbers. For the United Kingdom there is an adequacy decision of the EU Commission. The legal basis is Art. 6 (1) (b) GDPR.

8. Cancellations

If you cancel via “Cancel contracts here”, we store your details (name, email address, type and, if given, reason for cancellation) and the time of receipt as proof. We send you the confirmation by email. For this we use the delivery service Resend (Resend, Inc., USA) as processor with standard contractual clauses. The legal basis is our legal obligation under § 312k BGB (Art. 6 (1) (c) GDPR).

9. Fonts

We load fonts (Google Fonts) via our own server. Your browser does not connect to Google for this, and no data about you is transferred to Google.

10. Storage period

  • Account, connected PCs and unlocks: until you delete your account (account page → “Delete account”).
  • Sign-in sessions: 30 days.
  • Cancellations: three years (proof, regular limitation period).
  • Paddle keeps invoice and payment data according to the statutory periods.

11. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To do so, write to us at [ventoview@beispiel.com]. You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the authority of your state or country.