The data controller within the meaning of Art. 4(7) GDPR is NEVER PLAY THIS, operated by HyperHollow Games, Germany. You can reach us at privacy@neverplaythis.com.

neverplaythis.com does not use tracking cookies or analytics cookies. We do not set first-party cookies for advertising or user profiling. Essential cookies may be set by our hosting infrastructure for operational purposes (e.g. load balancing). Technically necessary cookies are exempt from the consent requirement under Sec. 25(2) No. 2 TTDSG.

We do not sell or rent your personal data. We share data only with the following processors, which are bound by data processing agreements:

• Vercel Inc. (hosting and analytics) — USA, certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
• Supabase Inc. (database) — USA, data processing agreement in place. Transfers safeguarded by EU-US Data Privacy Framework or EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

We may also disclose data if required by law or a binding court order.

You have the right to:

• (1) Right of access (Art. 15) — obtain confirmation of whether your data is processed and receive a copy.
• (2) Right to rectification (Art. 16) — correct inaccurate or incomplete data.
• (3) Right to erasure (Art. 17) — request deletion of your data under the conditions specified by law.
• (4) Right to restriction (Art. 18) — restrict the processing of your data in certain cases.
• (5) Right to data portability (Art. 20) — receive your data in a structured, commonly used, machine-readable format.
• (6) Right to object (Art. 21) — object to processing based on legitimate interests (see highlighted notice below).
• (7) Right to withdraw consent (Art. 7(3)) — withdraw any consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• (8) Right not to be subject to automated decision-making (Art. 22) — we do not use automated decision-making or profiling that produces legal effects.

To exercise any of these rights, email us at privacy@neverplaythis.com. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS). Access to personal data is restricted to authorized personnel on a need-to-know basis. Our processors (Vercel, Supabase) maintain their own security certifications and measures.

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16.

Our website contains links to external third-party websites, including game developer sites, digital storefronts (e.g. itch.io, Google Play), and other gaming platforms, over whose content and privacy practices we have no influence. We expressly distance ourselves from all data processing activities on linked pages. At the time of linking, no privacy violations were apparent. A permanent review of external privacy practices is not reasonable without concrete evidence of a violation (§ 7 Abs. 2 DDG). Upon becoming aware of privacy violations, we will remove such links immediately. We encourage you to review the privacy policies of any third-party site you visit. We are not responsible for the data protection practices, data security, or content of external websites.

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. You may contact any EU supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). A list of all German data protection authorities is available at www.bfdi.bund.de.

We reserve the right to update this privacy policy to reflect changes in our data processing activities or legal requirements. The current version is always available on this page. Material changes will be indicated by updating the date at the top of this policy.

The data controller within the meaning of Art. 4(7) GDPR is NEVER PLAY THIS, operated by HyperHollow Games, Germany. You can reach us at privacy@neverplaythis.com.

neverplaythis.com does not use tracking cookies or analytics cookies. We do not set first-party cookies for advertising or user profiling. Essential cookies may be set by our hosting infrastructure for operational purposes (e.g. load balancing). Technically necessary cookies are exempt from the consent requirement under Sec. 25(2) No. 2 TTDSG.

We do not sell or rent your personal data. We share data only with the following processors, which are bound by data processing agreements:

• Vercel Inc. (hosting and analytics) — USA, certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
• Supabase Inc. (database) — USA, data processing agreement in place. Transfers safeguarded by EU-US Data Privacy Framework or EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

We may also disclose data if required by law or a binding court order.

You have the right to:

• (1) Right of access (Art. 15) — obtain confirmation of whether your data is processed and receive a copy.
• (2) Right to rectification (Art. 16) — correct inaccurate or incomplete data.
• (3) Right to erasure (Art. 17) — request deletion of your data under the conditions specified by law.
• (4) Right to restriction (Art. 18) — restrict the processing of your data in certain cases.
• (5) Right to data portability (Art. 20) — receive your data in a structured, commonly used, machine-readable format.
• (6) Right to object (Art. 21) — object to processing based on legitimate interests (see highlighted notice below).
• (7) Right to withdraw consent (Art. 7(3)) — withdraw any consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• (8) Right not to be subject to automated decision-making (Art. 22) — we do not use automated decision-making or profiling that produces legal effects.

To exercise any of these rights, email us at privacy@neverplaythis.com. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS). Access to personal data is restricted to authorized personnel on a need-to-know basis. Our processors (Vercel, Supabase) maintain their own security certifications and measures.

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16.

Our website contains links to external third-party websites, including game developer sites, digital storefronts (e.g. itch.io, Google Play), and other gaming platforms, over whose content and privacy practices we have no influence. We expressly distance ourselves from all data processing activities on linked pages. At the time of linking, no privacy violations were apparent. A permanent review of external privacy practices is not reasonable without concrete evidence of a violation (§ 7 Abs. 2 DDG). Upon becoming aware of privacy violations, we will remove such links immediately. We encourage you to review the privacy policies of any third-party site you visit. We are not responsible for the data protection practices, data security, or content of external websites.

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. You may contact any EU supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). A list of all German data protection authorities is available at www.bfdi.bund.de.

We reserve the right to update this privacy policy to reflect changes in our data processing activities or legal requirements. The current version is always available on this page. Material changes will be indicated by updating the date at the top of this policy.