Privacy

Privacy

How personal data is processed when you visit the website, send a message, submit feedback or comment on a devlog post.

1. Controller

Jens Ullrich
Jessa Studio
Prof.-Werner-Str. 37
01796 Pirna
Germany

Email: hello@jessa.studio

2. Hosting and Server Log Files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

When the website is accessed, the web server processes technically necessary access data. This may include the requested file or page, date and time of access, transferred data volume, browser information, referrer and IP address.

The processing is carried out to provide the website securely, reliably and without errors and to detect and prevent attacks. The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure and functional operation of the website.

According to STRATO, IP addresses in server log files are stored for no more than seven days for the detection and prevention of attacks.

A data processing agreement pursuant to Article 28 GDPR has been concluded with STRATO.

3. Encrypted Transmission

This website uses TLS encryption.

This protects data transmitted between your browser and the server against simple interception during transmission. An encrypted connection can be recognised in particular by the address beginning with https://.

4. Contact Form and Direct Contact

If you use the contact form or send an email, the information you provide is processed. This may include your name, email address, subject and message content.

The contact form does not permanently store the message text in the WordPress database. The message is sent to Jessa Studio by email and is then processed in the email system used.

The processing is carried out to handle and respond to your enquiry.

If your message concerns the initiation or performance of a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, the processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in handling voluntarily submitted enquiries and communicating with interested persons.

Fields marked as required are necessary to process and answer the enquiry meaningfully. Any other information is voluntary.

Contact emails are generally deleted within six months after the enquiry has been fully handled, unless statutory retention obligations, the establishment or defence of legal claims or other legitimate reasons require longer storage.

5. Project Feedback and Bug Reports

You may voluntarily submit feedback, suggestions or bug reports through project pages.

Depending on your input, the following data may be processed:

  • type of report
  • short summary
  • project version
  • platform or technical environment
  • description
  • steps to reproduce
  • your email address, if provided

The report is not displayed publicly. It is stored in the protected WordPress administration area and may additionally be reported to the administrator email address.

The processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in improving, analysing, maintaining and documenting personal projects.

Providing an email address is voluntary. It is used only when a follow-up question or response regarding the report is necessary.

Feedback data is reviewed no later than twelve months after the report has been completed or closed and is then deleted or anonymised, unless it is still required for technical documentation, error prevention or the establishment or defence of legal claims.

6. Devlog Comments

If you comment on a devlog post, the following data may be processed depending on your login status:

  • submitted name
  • email address
  • comment content
  • time of submission
  • assignment to the commented post

The email address is not displayed publicly. The submitted name and comment text are displayed publicly after successful moderation.

Comments are reviewed before publication. Processing for review, moderation and administration is based on Article 6(1)(f) GDPR. The legitimate interest lies in enabling constructive discussion and preventing unlawful, abusive or irrelevant contributions.

The public display of your name and comment is based on your explicit consent pursuant to Article 6(1)(a) GDPR.

This website does not permanently store the IP address or browser user-agent for devlog comments in the WordPress comment database.

Published comments generally remain stored while the related post and discussion remain publicly available. You may withdraw your consent to further public display at any time with effect for the future and request deletion or anonymisation by contacting hello@jessa.studio, unless overriding legal or legitimate reasons apply.

The lawfulness of processing carried out before the withdrawal remains unaffected.

7. Spam and Abuse Protection

Contact, feedback and comment features use local technical safeguards. These include security nonces, hidden form fields, minimum completion times, checks for suspicious content and temporary rate limits.

For rate limiting, a temporary pseudonymous technical key may be derived from the IP address. It is used solely to restrict abusive form submissions and is no longer required after the relevant rate-limit period expires.

The processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in protecting the website and its forms against spam, automated access and other abuse.

No external CAPTCHA service is used.

8. Downloads and Download Counting

When a file provided by Jessa Studio is downloaded, an anonymous total counter for the relevant version is increased.

No IP addresses, individual identifiers or personal download profiles are stored for this counter.

Technically necessary server log files described in section 2 may still be generated independently of the counter.

9. Language Selection

The website is available in multiple languages. Automatic browser-language detection is disabled.

The desired language version is selected through the visible language switcher and language-specific URLs. The language choice is not used for automatic redirection based on the browser language.

10. Colour Scheme

If you explicitly switch between the light and dark colour schemes, this choice is stored locally in your browser.

The storage is used to retain your chosen display setting on later visits. No user identifier is transmitted to the server and no cross-site profile is created.

You can change the setting through the website or remove it by deleting the website’s local data in your browser.

11. Embedded Videos and External Platforms

External video content from providers such as YouTube or Vimeo is not loaded automatically when a page is opened.

A connection to the relevant provider is established only after you deliberately activate video playback. The provider may then process your IP address, browser information and information about the page you visited and may use cookies or similar technologies.

Activation is based on your consent pursuant to Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.

The privacy information of the respective platform provider applies to its further processing. Processing outside the European Union or the European Economic Area cannot be ruled out.

Links to itch.io, Bluesky and other external platforms do not load content from those platforms merely by visiting jessa.studio. When you open an external link, you leave this website and the terms of the respective provider apply.

12. Local Fonts and No Marketing Analytics

The fonts used on this website are served locally from the website’s own server. Loading them does not establish a connection to Google Fonts or a comparable external font provider.

No advertising networks, personalised advertising or external marketing or audience tracking are currently used.

13. Cookies and Similar Storage Technologies

The public website currently does not use cookies or similar storage technologies for advertising, analytics or profiling.

Storage may occur for the explicitly selected colour scheme, technical security and form functions and WordPress sessions of logged-in administrators.

The public comment form does not set convenience cookies to store a name or email address. Gravatar profile images are not loaded.

Where storage is strictly necessary to provide a function explicitly requested by you, it is carried out without separate consent pursuant to Section 25(2)(2) TDDDG. Other storage takes place only after the relevant consent has been given.

14. Recipients and Data Processing

Personal data may be processed to the technically and organisationally necessary extent by:

  • STRATO as hosting and email service provider
  • the WordPress administration operated by Jessa Studio
  • external platform providers only after their content or links are deliberately opened

A data processing agreement pursuant to Article 28 GDPR has been concluded with STRATO.

Data is disclosed to other recipients only if this is necessary to process an enquiry, required by law, necessary for the establishment or defence of legal claims, or covered by valid consent.

15. Storage Period

Personal data is stored only for as long as necessary for the relevant purpose.

Unless a more specific period is stated in this privacy policy, data is deleted when the purpose no longer applies, no statutory retention obligation exists, no legal claims need to be established or defended and no other legitimate reason requires continued storage.

16. Your Rights

Subject to the statutory requirements, you have the right to:

  • access information about the processing of your personal data
  • rectification of inaccurate data
  • erasure of your data
  • restriction of processing
  • data portability
  • object to processing
  • withdraw consent with effect for the future

Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.

You may withdraw consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

To exercise your rights, contact hello@jessa.studio.

17. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

For the controller located in Saxony, the following authority is particularly responsible:

Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany

Email: post@sdtb.sachsen.de
Website: https://www.datenschutz.sachsen.de/

You may also contact another data protection supervisory authority competent under the applicable law.

18. Changes to This Privacy Policy

This privacy policy will be updated if the website’s technical functions, services or legal framework change.

The version published on this page applies.