Privacy Policy
Last updated: June 2026
1. Controller (Art. 4 (7) GDPR)
Cosmic Drift Game Studio Marc Frost Slevogtstr. 10 04159 Leipzig Germany Privacy contact: [email protected]
2. Overview
This privacy policy explains how Cosmic Drift Game Studio (Marc Frost, “we”) as operator of Kumiko processes personal data when you visit our website kumiko.rocks. It applies to the marketing website only. The hosted platform and customer apps have separate privacy policies.
3. Data collected on this website
This website does not use cookies or tracking. No profiling, no advertising, no third-party scripts.
When you access the site, technically necessary data is stored in server logs (see “Sub-processors” section):
- IP address (max. 7 days)
- Date and time of access
- Requested URL and bytes transferred
- User-agent (browser, OS)
- Referrer (previous page, if any)
Legal basis: GDPR Art. 6(1)(f) — legitimate interest in technical operation and attack prevention. Data is not merged with other sources and is deleted after 7 days.
4. Email contact
When you contact us by email, your information is stored to process your request. Legal basis: GDPR Art. 6(1)(b) (contract initiation) or (f) (legitimate interest). We do not share this data without your consent.
Retention: until your request is fully handled, at most 24 months, unless statutory retention applies.
Sub-processors
We use the following sub-processors per GDPR Art. 28:
| Provider | Purpose | Location | Data processed |
|---|---|---|---|
| Hetzner Online GmbH | Website hosting, server logs | Germany (Frankfurt am Main / Falkenstein) | IP address (max. 7 days), date/time, URL, user-agent, referrer, bytes transferred |
We have a Data Processing Agreement (DPA) with Hetzner per GDPR Art. 28.
Third-country transfers
For this website, we do not intentionally transfer personal data to countries outside the EU/EEA. Server logs are processed exclusively by Hetzner in Germany.
Your Rights
Per Art. 15–22 GDPR. Requests to [email protected].
Right to Complain
You may complain to your local supervisory authority or to the supervisory authority responsible for us: Saxon Data Protection and Transparency Commissioner (SDTB), Maternistraße 17, 01067 Dresden, Germany, [email protected], https://www.datenschutz.sachsen.de/.