Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. General

Protecting your data is important to me. This website and my two free Windows programs “Valorant-Spind” (section 8) and “SpindTune” (section 9) are intentionally designed to keep data collection to a minimum. For the website: there is no login and no user accounts. For reach measurement, I only use Matomo, self-hosted and configured for data minimization – cookieless by default and with a shortened IP address (pseudonymous); I only set statistics cookies if you explicitly agree in the cookie notice (see section 4, where I also openly explain the legal question about measurement without consent under Section 25 TDDDG). There are no advertising or marketing cookies and no third-party tracking. Otherwise, only the data that is technically necessary to operate the site is processed (see Hosting).

3. Hosting & server log files

This website is hosted by the following provider:

When you access the website, your browser transmits technically necessary information to my host’s server so that the page can be delivered: IP address, date and time of access, the requested file/address, the amount of data transferred, notification of successful retrieval, the browser and operating system used, and the previously visited page (referrer). No access log files are created: in ALL-INKL’s hosting panel, the setting “no logs are created” is active for this website (checked on October 30, 2026), and access statistics are switched off as well. The data is processed only while the page is being delivered, is not stored permanently and is not merged with other data sources.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). ALL-INKL processes this data on my behalf (Art. 28 GDPR). Should I switch logging on later for troubleshooting or to fend off attacks, I will update this section beforehand with the scope and retention period.

3a. Delivery and protection of the website (Cloudflare)

To make the website load quickly and securely, I use Cloudflare’s content delivery network (CDN) and security features. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. All requests to this website pass through Cloudflare’s servers. For technical reasons, Cloudflare processes your IP address, the requested address, date and time as well as browser and operating system details in order to deliver content from its cache and to fend off attacks (e.g. overload attacks or bots). Cloudflare processes this data as a processor on the basis of its Data Processing Addendum. A transfer to the USA is possible; Cloudflare is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission, and additionally uses the EU Standard Contractual Clauses. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a fast, secure and reliable provision of the website). More at cloudflare.com/privacypolicy.

Cloudflare security cookie: To protect against bot attacks, Cloudflare may in individual cases set a strictly necessary security cookie (e.g. “__cf_bm”). It is used solely to distinguish real visitors from automated traffic, is not used for advertising or analytics and is deleted automatically after 30 minutes at the latest. The legal basis is Section 25 (2) no. 2 TDDDG (strictly necessary) in conjunction with Art. 6 (1) (f) GDPR.

4. Cookies & web analytics with Matomo

For the statistical analysis of website usage (reach measurement), I use the open-source software Matomo, which I operate myself on my own server (at ALL-INKL, server location Germany). No data is transmitted to third parties. Matomo runs in two modes – depending on whether you choose “Allow statistics” or “Decline all” in the notice on your first visit. Without a decision, the cookieless mode always applies.

Default (without consent): Matomo sets no cookies (cookieless tracking) and stores no identifier on your device; IP addresses are shortened before any storage. Matomo’s browser feature detection (e.g. screen resolution, browser plugins and client hints such as the exact platform and version) is switched off in this mode; it is only enabled when you choose “Allow statistics”. So that several page views can still be grouped into one visit, Matomo creates a hash value from technical characteristics of the request (including IP address and browser details) that changes daily. Visits are therefore only grouped within a single day; there is no recognition across several days and no cross-device or cross-site recognition. This means the data is not anonymous but pseudonymous. The following is collected:

• pages visited, approximate location at country level, referring page (referrer) and browser/device type,
• triggered downloads (e.g. clicks on the download of the “Valorant-Spind” app or the “SpindTune” program),
• clicks on links to other websites (the target address is recorded; addresses that would contain data you entered – such as the profile links of the tracker quick search with your Riot ID – are not recorded; there, only the event “Tracker-Suche” with the name of the tracker is counted, without the Riot ID),
• playback of my own videos (start, playback time reached in seconds, watched completely),
• interactions with interactive tools (e.g. opening a simulator, using a calculator or switching tabs in the SpindTune app tour) and whether the app notice shown after a tool result was displayed or clicked (event “App-CTA-Ergebnis”, only with the name of the tool – without your result),
• clicks on notices and banners pointing to pages of this website (e.g. the notice about the Discord server), clicks on buttons and internal links (the page, area and label of the element are recorded) and opening FAQ entries,
• scroll depth (25/50/75/90%), values chosen in drop-down menus and sliders as well as copying page text (see below for both),
• whether the keyboard shortcut for saving a bookmark (Ctrl/⌘ + D) was pressed or the website was installed on the home screen (without any details about the bookmark itself),
• closing notices and your choice in the cookie notice (“Allow statistics” or “Decline all”),
• technical JavaScript error messages and the approximate active time spent on a page.

I only evaluate this data in aggregated form and do not try to identify individual persons. Shared links can contain names you entered (e.g. the player names in the agent roulette share link); these are removed from the recorded address before it is sent. Challenge links from quizzes and games only contain a random number for the tasks and the score reached – no names.

Drop-down menus, sliders and inputs: If you choose a value in a drop-down menu or set a slider in a tool, the chosen value is sent along – e.g. the selected rank “Gold 2”, the win-rate slider “55” or the days in the refund calculator – so that I can see which options are used. Anything you type freely – for example into text and number fields, the text pasted into the purchase history analyzer, an email address or your Riot ID – is not transmitted to Matomo.

Copying text: If you copy text from a page, the selected text (50 characters at most) is transmitted so that I can see which content (e.g. crosshair codes) gets copied. Email addresses and Riot IDs (Name#Tag) in the selected text are replaced with placeholders before sending. If you copy something from an input field, only “(Eingabefeld)” (“input field”) is counted, without any content.

Information derived from browser settings: For two notices, the website reads information from your browser: the browser language you have set (for the notice that the page is also available in your language) and whether you are using a Windows device (PC) or a mobile device (for the download notices for the Windows app). Reading this is technically necessary so that these notices can be shown appropriately (Section 25 (2) no. 2 TDDDG). Only a rough category is sent to Matomo – whether the browser language matches the page language (e.g. “de->en”) or whether it is a PC or a mobile device – not the exact browser details. As for the rest of the reach measurement, the legal basis for this transmission to Matomo is Art. 6 (1) (f) GDPR.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a statistical, privacy-friendly analysis of reach to improve the service). In this mode, no cookies are set and no identifiers are stored on your device. Matomo automatically deletes the individual visit data (raw data, with shortened IP address) after 180 days. After that, only aggregated reports with figures such as visits and page views remain, from which individual visits can no longer be read.

Explained openly – measurement without consent and Section 25 TDDDG: Even in cookieless mode, your browser loads the Matomo script from my server, and the script makes your browser send the information listed above to Matomo. Whether this alone counts as access to information on your device within the meaning of Section 25 (1) TDDDG, which would require consent, has not been conclusively settled legally. In its Guidelines 2/2023, the European Data Protection Board (EDPB) interprets the underlying rule in Art. 5 (3) of the ePrivacy Directive broadly; under that reading, script-based measurement like this can also be covered. German law contains no explicit exemption for reach measurement. I have nevertheless decided to run cookieless measurement without consent, because it stores nothing on your device, browser feature detection is switched off, the IP address is shortened, visits are only grouped within a single day and the data stays exclusively on my own server in Germany. If you don’t want this, you can object to the measurement at any time – via the opt-out below. Content blockers in your browser also prevent the Matomo script from loading. Important: “Decline all” in the cookie notice covers the statistics cookie and the “New since your last visit” notice; you stop cookieless measurement by objecting.

With your consent (statistics cookie): If you choose “Allow statistics” in the notice, Matomo additionally sets cookies so that I can tell whether you visit the website again (returning visitors, visit frequency, paths across several visits). The following are set: “_pk_id” (random visitor ID, stored for 13 months), “_pk_ses” (session, 30 minutes), “_pk_ref” (referring website, 6 months) and “mtm_cookie_consent” (stores your consent, 12 months). In addition, Matomo’s browser feature detection is enabled (e.g. screen resolution, browser plugins and client hints such as the exact platform and version). The IP address is shortened in this mode too, and no data is passed on to third parties. The legal basis is your consent under Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. I also store your decision (“Allow statistics” or “Decline all”) in your browser’s local storage (“vs-consent”) so the notice does not appear on every page view (Section 25 (2) no. 2 TDDDG). After 12 months your consent expires and I ask again; until you decide again, Matomo measures cookieless and without browser feature detection.

Changing or withdrawing consent: You can withdraw your consent at any time with effect for the future, or give it later – via the “Cookie settings” link in the footer of every page or right here: Open cookie settings. When you withdraw, the consent cookie is deleted and Matomo goes back to measuring without cookies and without browser feature detection.

Objection (opt-out): You can object to the reach measurement at any time. To do so, use the following opt-out option. Only if you use the opt-out is a strictly necessary opt-out cookie (“mtm_consent_removed”) stored in your browser, so that your objection is retained; it contains no personal data and no identifier.

Storage in your browser (local storage and session storage): Some features store information directly in your browser. In local storage (localStorage, kept until you delete it) these are: “vs-consent” (your choice in the cookie notice with a timestamp; after 12 months I ask again), “vs-nb” (your choice regarding the “New since your last visit” notice), “vs-lv” and “vs-nb-seen” (only if you have consented to “New since your last visit”, see section 7b), keys for dismissed notices (e.g. “vs-langhint-off” for the language notice, “vsat-off” for the app notice, “vsbm-off:…” for the bookmark notice) and the data of individual tools: your entries in the Performance Score tracker, your Champions bracket picks (“vs-cb26”, and “vs-cb26-wenn” for the what-if mode, each only stored after your first entry), your planning in the map rating planner, favorites in the name generator, best scores in games and quizzes (“vs-best:…” – only your best score per tool), your selection in the skin calculator (“skrSel_v2”, stores the skin IDs of your selection), your selection in the spending calculator (“vs-rg-sel”, stores only the IDs of the selected skins), today’s game state in Valordle (“vd-daily”, only the state of the current day) and your Valordle statistics with streak (“vs-valordle-stats”), your top 5 in the skin arena, your agent pool in the agent roulette and your checkmarks in the OG test. Session storage (sessionStorage, deleted when you close the tab) holds “vs-lv-s”, “vs-nb-first” and “vs-nbq”: they belong to “New since your last visit” and only remember, within the session, whether the notice or the question about it has already been shown. This data stays exclusively on your device, is not transmitted to me or third parties and is not used for recognition or analytics. The legal basis for storage that is necessary for the features is Section 25 (2) no. 2 TDDDG: it only takes place so that your choice or the feature you use is retained. For the storage relating to “New since your last visit” (“vs-lv”, “vs-nb-seen”, “vs-lv-s”, “vs-nb-first”), your consent applies (see section 7b). You can delete it at any time by clearing the site data for valorant-spind.de in your browser.

5. Fonts (web fonts)

This website does not embed any external font services (e.g. Google Fonts). The fonts used are served locally or system fonts are used. No connection to third-party servers is established and no IP address is transmitted to third parties.

6. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption (recognizable by “https://” and the padlock symbol in the address bar). As a result, the data transmitted between your browser and the server cannot be read by third parties.

7. Contact, feedback form & tools

If you contact me by email or via the feedback/bug form on this website, I process the information you submit exclusively to handle your request: the type of request, your message text, optionally your email address (only if you provide it – for a reply) and any images you attach. The form itself does not store an IP address with your message; however, as with every page request, your IP address is processed by my host’s server (see section 3) and by Cloudflare (see section 3a). Submissions are sent to me by email via my host’s mail server (ALL-INKL); no disclosure to any other third parties takes place.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in handling inquiries and preventing abuse) or Art. 6 (1) (b) GDPR where a usage relationship is involved. This data is deleted as soon as your request has been conclusively dealt with and no statutory retention obligations apply. Providing your email address is voluntary; without it, however, I cannot reply to you directly.

7a. Community voting “skin arena”

In the skin arena you can vote without signing in and without an account on which of two skins you like better. Your browser only sends my server (ALL-INKL, via Cloudflare) the IDs of the two skins, your choice or “skip” and a technical signature of the duel. Only the skin ratings are stored (Elo rating, number of duels and wins) – no name, no account, no email address, no cookies.

To prevent manipulation (automated mass voting), the server creates a shortened hash from your IP address, the current date and a secret key. Your IP address itself is not stored for this; the hash changes daily, is only used to limit votes per minute and per day and is discarded when the day changes. Used duel signatures are kept for about 30 minutes so that every vote counts only once. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in fair, abuse-free voting).

Your personal top 5 in the skin arena, your settings in the agent roulette (your own agent pool) and your checkmarks in the OG test are only stored in your browser’s local storage (localStorage) and are not sent to me. You can remove them at any time in your browser settings (“clear site data”). If you close a notice (e.g. the app or language notice) with “✕”, your browser also remembers this only in local storage so the notice doesn’t reappear for a while.

7b. The “New since your last visit” notice

The “New since your last visit” notice has its own, voluntary consent: you can switch it on with the checkbox in the cookie notice – the checkbox is saved together with “Allow statistics”, and “Decline all” turns the notice off too. On a later visit you can also switch it on by answering the question about it with “Yes, show me”, regardless of your choice on statistics. Your browser stores your decision in local storage (“vs-nb”). Only if you have consented does it also store the time of your last visit (“vs-lv”) and which news you have already seen (“vs-nb-seen”); within a session it also uses session storage for this (“vs-lv-s”, “vs-nb-first”). Independently of this, session storage only remembers in “vs-nbq” whether you have already been asked about the notice in this session; entries in session storage are deleted when you close the tab. This lets me show you the news from my RSS feed that has been added since then on your next visit. These times never leave your browser and are not sent to me; Matomo only records whether the notice was shown or clicked and whether you switched it on or off. The legal basis is your consent under Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You can withdraw it at any time via “Cookie settings” in the footer (uncheck the box); “vs-lv”, “vs-nb-seen”, “vs-lv-s” and “vs-nb-first” are then deleted automatically on your next page view.

7c. Purchase history analyzer (processed in your browser only)

Text you paste into the purchase history analyzer (e.g. the copied list from your Riot purchase history) is analyzed exclusively in your browser. It is neither stored nor transmitted to me or third parties. Matomo only records that the tool or its buttons were used – without the pasted text, i.e. without contents, amounts, dates or payment methods. If you yourself select and copy text from the displayed analysis, the copying rule from section 4 applies. The link to the official purchase history leads to Riot Games; Riot’s privacy policy applies there.

8. The “Valorant-Spind” app

The app processes your game data on your own device and displays it exclusively to you. It needs a running, logged-in Riot client and uses the access token already present locally in that client – with no additional login and no request for credentials. With it, the app retrieves your game data (inventory, rank, matches, shop) and skin prices from Riot Games’ servers; it loads skin names and images from the community database valorant-api.com (not run by Riot, see section 10). The app derives the currency for the money value from the country of your Riot account; it only shows a money value in the eurozone, the USA, Canada and Turkey, elsewhere only the VP value. Only in rare cases – if the Riot client doesn’t provide your account country – does the app query it from auth.riotgames.com using the existing token, with no sign-in and no password. In addition, the app loads a file from gist.githubusercontent.com (GitHub, Inc., USA, a Microsoft company) once per start to check whether a new app version is available, and when you play skin videos it loads them from Riot’s video server valorant.dyn.riotcdn.net. Since version 3.0, fonts and libraries are bundled with the app; Google Fonts and cdnjs are not contacted at startup. With the requests mentioned, the respective provider technically receives your IP address; a transfer to the USA is possible. Apart from these requests, the app transmits no data, not even to me: your locker and match data stay on your PC – no account with me, no server of mine.

Local interface and local files: The app shows its interface in a browser window at the local address 127.0.0.1; this address can only be reached on your own PC. Since version 3.0, only the app window opened at startup may talk to the program – other websites, including those on other local ports of your PC, have no access to the app’s interface. Your settings (e.g. language, region, currency, theme and sound) are stored by your browser for this local address; the app needs cookies for 127.0.0.1 for this. The app stores saved matches and your locker value history locally on your PC, and in your user folder the file “contract_baseline.json” (only public catalog data on contract rewards and a timestamp). You can find details on how it works on the homepage under “Security & transparency” and in the changelog for version 3.0.

9. The Windows program “SpindTune”

SpindTune is a free Windows program by Valorant-Spind for updating, cleaning up and checking your PC (product page: valorant-spind.de/en/spindtune.html). It is installed and runs locally on your computer. This section explains fully and transparently what data the program processes on your device, what it stores locally and which services it connects to – exclusively after your click.

9.1 Principle: no data to me

• No sign-in, no account: SpindTune requires no registration, no email address and no login credentials.
• No telemetry and no usage statistics: The program contains no analytics, tracking or crash-reporting function that sends data to me or to third parties. There is no device or advertising ID.
• No ads, no subscription, no in-app purchases.
• Nothing in the background: SpindTune does not add itself to startup or to the Windows Task Scheduler, installs no service and only checks, updates or deletes when you explicitly click a button.
• No automatic update check: SpindTune does not look for new versions of itself. “Check for updates” merely opens this website in your browser.

All results (e.g. hardware data, Gaming Check, Valorant Check) are generated and displayed exclusively on your device. As the developer I receive none of it and have no access to your device or your data. Data only reaches me if you send me something yourself (see 9.6).

9.2 What SpindTune reads on your device

So that its features can work, SpindTune reads the following information via Windows interfaces after your click. It is only used locally:

• System and hardware: Windows version, PC manufacturer and model, motherboard, BIOS/UEFI version and date, processor, memory, graphics card, drives (including health, temperature and power-on-hours values), monitors and the version and date of important drivers.
• Software: installed programs and Store apps (name, version, publisher, size), available updates, startup entries and installed games (via Steam, Epic Games and uninstall entries of known publishers).
• Security and Valorant status: TPM, Secure Boot, UEFI/legacy mode, partition style, Memory integrity, virtualization, Kernel DMA Protection, BitLocker status, the status of the Riot Vanguard services and the VALORANT install location.
• Network and performance: LAN/Wi-Fi connection and signal strength, ping values, load from background programs, power plan and Windows gaming settings.
• Running programs (Gaming Mode, Playtime, Lag Hunter): names and program paths of the programs running in your Windows session from the Windows process list, and whether a program has a visible window. SpindTune does not read any program memory and does not hook into any games.
• Lag Hunter measurements (only during a recording you start): frame times of the detected game via the bundled measuring tool Intel PresentMon, which only reads Windows events and injects nothing into the game; processor and disk load per program from the Windows process list, without opening any programs; graphics card temperature and load from Windows. If the separate program HWiNFO is running with “Shared Memory Support” turned on, SpindTune also reads its sensor values, such as the CPU temperature.
• Displays (Hz Check): monitor model, resolution, current and maximum possible refresh rate and the connection type (e.g. HDMI or DisplayPort).
• Recordings (Clips): folders, number, size and date of video recordings in the known recording folders, in the settings of recording programs (e.g. OBS) and on the drives you select. Profiles of other Windows users are not searched.
• Files and folders: size and number of files in the checked folders (cleanup, storage analysis). When searching for duplicate files, files are read for comparison and checksums are calculated locally; their contents are neither stored nor transmitted.

Serial numbers, your Windows user name and IP and MAC addresses are not included in the shareable image cards (see 9.5).

9.3 What SpindTune stores locally

SpindTune stores its files exclusively on your computer, in the folder %LOCALAPPDATA%\SpindTune:

• Settings (einstellungen.json): language, view, hidden updates, column widths, your selection in the cleanup and in Gaming Mode, the list of programs closed by Gaming Mode (for “Restore”), the drives selected for the clip search, whether playtime tracking is turned on, folders you added, details you entered for the Hardware Card (e.g. power supply or mouse), your confirmation of the safety notes with date and time, and when you were last reminded to update the database.
• Log file (spindtune_log.txt): a technical log of the actions performed, for troubleshooting. It is cleared every time the program starts and is limited in size (rotating, about 9 MB at most).
• Gaming Check history (the last 20 results), so you can see changes.
• Playtime history (spielzeit.json): only if you turn on “Track playtime” yourself – the game name and the start and end time of each session. Time is only counted while SpindTune is open. “Delete history” removes all entries.
• Lag Hunter data (ruckel_verlauf.json, ruckel_letzte_auswertung.json and the “ruckel” folder): key figures of your measured matches for the history, the latest analysis and only the newest raw PresentMon file; SpindTune deletes older raw files automatically.
• HWiNFO settings: only when you click “Start & enable HWiNFO” does SpindTune set three entries in the HWiNFO64.INI file in the HWiNFO folder (sensors-only mode, shared memory, no start window), creating a backup first (HWiNFO64.INI.spindtune-sicherung). If HWiNFO is already running, SpindTune changes nothing.
• Backups of deleted startup entries, so you can restore them.
• Cleanup database (Winapp2.ini), if you downloaded it again via “Update database”.

For driver installations SpindTune temporarily uses the folder %ProgramData%\SpindTune\Treiber, which only administrators and the system can access; leftovers older than one day are removed automatically. Images you save (Hardware Card, Gaming Check and speed test cards) are stored in the folder you choose. On first start SpindTune copies the settings of its predecessor “Update-Zentrale” once, if present; nothing is deleted in the process.

When you uninstall it via Windows (“Apps > Installed apps”), the program is removed. The folder %LOCALAPPDATA%\SpindTune with your settings may remain; you can delete it yourself at any time.

9.4 Internet connections – only after your click

SpindTune only connects to the internet when you start a feature that needs it. The connection goes directly from your computer to the respective provider – not via my server. As with any internet request, the respective provider technically receives your IP address and the usual connection data; the respective provider is responsible for the processing there, and its privacy policy applies. For providers outside the EU, a transfer to third countries (in particular the USA) is possible. In detail:

• Microsoft (program updates via winget and the Microsoft Store, Windows Update, Microsoft Defender, Microsoft Office, WSL): checking for and installing updates via the official Microsoft interfaces. Program updates via winget are downloaded from the download addresses of the respective software publishers listed in the winget catalog. Provider in the EU: Microsoft Ireland Operations Limited, Dublin, Ireland.
• NVIDIA (graphics drivers): looking up the matching driver via NVIDIA’s official driver search; the model of your graphics card (as an NVIDIA product number) is transmitted. The download comes from download.nvidia.com.
• AMD (graphics drivers): loading the driver download page and AMD’s official installer from amd.com and drivers.amd.com.
• Intel: on request the “Intel Driver & Support Assistant” is installed via winget; then Intel’s website opens in your browser.
• Valve (Steam) (Gaming Check): retrieving the official system requirements of installed Steam games from store.steampowered.com; the Steam app number of the respective game is transmitted.
• Cloudflare (speed test, only after confirmation): measurement via speed.cloudflare.com. Random test data is downloaded and uploaded (up to about 1–2 GB depending on your connection). The test data contains no information about you or your PC.
• Ping measurement (Gaming Check, speed test, Connection Check and Lag Hunter): short ping packets to the public DNS servers 1.1.1.1 (Cloudflare), 8.8.8.8 (Google) and 9.9.9.9 (Quad9) and to your own router. The Connection Check sends pings to your router and to 1.1.1.1 and 8.8.8.8 for about 20 seconds. During a recording, the Lag Hunter sends one ping per second to your router and to 1.1.1.1. The ping packets contain no information about you or your PC; for technical reasons the operators receive your IP address.
• Your router (Gaming Check): querying publicly readable device information (e.g. model and firmware version) exclusively within your home network – without logging in and without changing any settings.
• GitHub (only with “Update database”): downloading the community cleanup database Winapp2 from raw.githubusercontent.com (GitHub, Inc., a Microsoft company).
• Game launchers (e.g. Steam, Epic Games, EA app): on request SpindTune only starts the launcher; it then updates itself under its own terms.
• Links in your browser: buttons such as “Open official guide” or manufacturer support pages open in your default browser. SpindTune does not retrieve these pages itself; the terms of the respective website apply.

When accessing NVIDIA’s driver servers and the Steam query, SpindTune sends a generic browser or program identifier (user agent), but no identifier that identifies you or your device. SpindTune transmits no other data – such as hardware lists, results, file names or logs – to any of these services.

9.5 Sharing images and results

The Hardware Card and the Gaming Check and speed test cards contain details about your hardware or your measured values. Serial numbers, your user name and IP and MAC addresses are not included on the cards. The image files only contain metadata about the program (software, author, website) – no data about you. Whether and where you publish an image (e.g. on Discord, Reddit or Instagram) is your decision; the terms of the respective platform then apply.

“Copy result” and “Copy error” only place text on your clipboard; nothing is sent automatically.

9.6 If you contact me

If you voluntarily send me results, error reports, logs or screenshots (e.g. by email, via the feedback form or on the Discord server), I process them exclusively to handle your request; section 7 applies. Please remove anything you do not want to share beforehand. For messages on Discord, Discord’s privacy policy also applies (see section 10).

9.7 Downloading SpindTune from this website

When you download the installation file SpindTune-Setup.exe, the request is delivered via Cloudflare like any other page request and processed by my host’s server (see section 3). Matomo counts the click on the download button – as long as you have not consented, without cookies and with a shortened IP address (see section 4). The link to the VirusTotal report is a normal link: only when you click it do you leave my website, and VirusTotal’s privacy policy (a Google service) applies. Only download SpindTune from valorant-spind.de and, if you like, compare the SHA-256 checksum shown on the product page.

10. Embedded images, game data, videos, streamer page & security badge

Game images (Riot/valorant-api, wsrv.nl): The guide pages display Valorant images such as agent, map, skin and rank icons. These are loaded partly directly from the public database valorant-api.com (media.valorant-api.com) and via the image optimization service images.weserv.nl (wsrv.nl). valorant-api.com is an unofficial database and is not operated by Riot Games (by its own account “non-official” and not endorsed by Riot Games); its operator gives neither an address nor a location on the website. I therefore cannot state in which country the data is processed; a transfer to third countries is possible. wsrv.nl is an independent, free open-source service. According to its own information, it runs its servers in Finland and Germany, uses Cloudflare’s content delivery network (CDN) as a cache and deletes its logs after 7 days. Via Cloudflare, a transfer to the USA is possible; according to its own information, Cloudflare is certified under the EU-U.S. Data Privacy Framework (see section 3a). I do not have a data processing agreement with the operator of wsrv.nl. When images from valorant-api.com and wsrv.nl are loaded, your device’s IP address is technically transmitted to the respective service. No cookies are set and no further personal data is transmitted. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an appealing, fast-loading presentation and in the fast delivery of optimized images).

SaaSHub badge and AI illustrations: The “Approved” badge of the software directory SaaSHub on the homepage and the SpindTune pages is stored as a copy on my own server; displaying it transmits nothing to SaaSHub – only when you click the link do you leave my website. Some title and illustration images are AI-generated and labeled “AI illustration” in their caption; they are loaded from my own server or via the image service wsrv.nl (see above), not directly from the AI provider.

Game data for the tools (valorant-api.com): Many interactive tools (e.g. skin calculators, quizzes, simulators) load current game data such as weapon, skin and agent lists directly from the public, unofficial database valorant-api.com (for the operator, see above). For technical reasons your IP address is transmitted to the operator of this service; a transfer to third countries is possible; no cookies are set and none of your entries are transmitted. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in current, correct game data).

Ability videos (Riot Games): On the agent guide pages, a short video clip is shown for each agent ability. These clips are not loaded when the page is opened, but only when you move your mouse over an ability (preview, only on devices with a mouse) or click, tap or open it via the keyboard. Only then is the clip loaded directly from Riot Games’ servers (cmsassets.rgpub.io), and only then, for technical reasons, is your device’s IP address transmitted to Riot Games; a transfer to countries outside the EU (including the USA) is possible. I do not set any cookies and no further personal data is transmitted. The provider is Riot Games, Inc., 12333 W. Olympic Blvd., Los Angeles, CA 90064, USA. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an illustrative presentation of the game content); the request only takes place when you actively select the ability. The skin videos and sounds in Skin Cinema, the Skin Sound Quiz and on individual skin pages (e.g. Champions bundle, Warden) are also loaded directly from Riot Games servers (valorant.dyn.riotcdn.net); for technical reasons your IP address is transmitted to Riot Games. The voice lines in the soundboard, by contrast, are hosted on my own server; no data is transmitted to third parties in that case. Further information on Riot Games’ data processing is available at riotgames.com/en/privacy-notice.

Embedded video (YouTube, two-click solution): The Champions 2026 bundle page and the page about the agent Hush each embed a trailer video from YouTube. When you open the page, only a preview image is shown, loaded via the image service wsrv.nl – no connection to YouTube is established yet. Only when you actively click the play button is the player loaded in privacy-enhanced mode (youtube-nocookie.com). A connection to YouTube servers is then established and, for technical reasons, your IP address among other data is transmitted to YouTube; YouTube may also transfer data to countries outside the EU (including the USA). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you give by clicking the play button. More at policies.google.com/privacy.

Embedded video (TikTok, two-click solution): The homepage embeds an introductory video provided via the TikTok service. For data-protection reasons it is implemented as a “two-click solution”: when you open the page, only a local preview (a placeholder with a play button) is shown at first – no connection to TikTok is established and no data is transmitted to TikTok. Only when you actively click the play button is the TikTok player loaded. This establishes a connection to TikTok’s servers and, for technical reasons, transmits your IP address (among other data) to TikTok; TikTok may set its own cookies and may also transfer data to countries outside the EU (including the USA). The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland (part of the ByteDance group). The legal basis for this loading is your consent pursuant to Art. 6 (1) (a) GDPR, which you give by clicking the play button; you can refuse it by simply not starting the video. Further information on TikTok’s data processing is available at tiktok.com/legal/page/eea/privacy-policy/en.

Streamer and esports page (Twitch): On the “Popular German Valorant streamers” page I show names, profile pictures and the live status of individual Twitch channels. Both the live status and the profile pictures are retrieved exclusively server-side, via my own server, from the official Twitch API and delivered through my domain. The esports page also shows the live status of the official VALORANT channels this way; their preview images are loaded via the image service wsrv.nl (see above). Therefore, simply visiting these pages transmits no IP address and no data from your device to Twitch. Only when you actively click a streamer link (twitch.tv) do you leave my website; the privacy policy of Twitch (Twitch Interactive, Inc., 350 Bush Street, San Francisco, CA 94104, USA) then applies.

Discord server: My website links to my Discord server “Valorant-Spind”. These are ordinary links – simply visiting my pages loads no content from Discord and transmits no data from your device to Discord. The member and online counts shown (if displayed) are retrieved by my server exclusively server-side via Discord’s public interface and delivered through my domain; no visitor data is transmitted to Discord in the process. Only when you actively click a Discord link do you leave my website; Discord’s privacy policy then applies. For users in the EEA, the controller is Discord Netherlands BV, Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands. Further information is available at discord.com/privacy.

Security badge (VirusTotal): On the homepage I display, for transparency, the result of a virus scan of the app via the VirusTotal service. This query is made exclusively server-side, via my server; no data from your device is transmitted to VirusTotal.

My own videos & “send the link to your PC”: The app’s introduction videos (e.g. on the homepage) are hosted on my own server; playing them transmits no data to third parties. On smartphones the download buttons offer to send you the download link by email, WhatsApp or Telegram, via your device’s share function, as a calendar reminder or by copying it. These are ordinary links or functions of your device: merely visiting my pages transmits nothing to these services; only when you choose an option does the respective app or service open, and its privacy policy applies. The link you send contains a generic campaign tag (e.g. “mtm_campaign=pc-link” and the chosen route such as “mail”) so that Matomo can count how often this route is used; it is the same for everyone and contains no information about you.

Calculators, checkers, countdowns and calendar files: the online tools on pages such as refund, Premier, new act or the sens converters (CS2, Apex Legends, Overwatch 2, Fortnite) calculate exclusively locally in your browser. What you type into input fields (e.g. purchase date, points or sensitivity values) is not transmitted to me or third parties and is not stored. Matomo only records which buttons of a tool are used and values you choose in drop-down menus or with sliders (e.g. the days in the refund calculator; see section 4). Calendar files (.ics) for reminders are also generated locally in your browser and saved only on your device. The same applies to result images for sharing (e.g. portrait story images): your browser creates them locally, they are only saved when you download them, and they are not sent to me. If you copy a challenge link, it only goes to your clipboard.

Press & data (CSV download and embed code): if you download the CSV file, this is processed by my host’s server like any other page request (see section 3). The embed code for the statistics card contains only text, formatting and a normal link – no scripts, no images and no tracking pixels. If another website embeds the card, no data about its visitors is transmitted to me; only when someone clicks the link is my website accessed as usual. “Copy” buttons only place text in your clipboard; Matomo only counts the click (see section 4).

Links to third-party sites and programs (e.g. GitHub, Riot Support, manufacturer pages): such links are normal references. Merely visiting my pages transmits nothing to these providers; only when you click a link do you leave my website, and the privacy policy of the respective provider applies (for GitHub: GitHub, Inc., a Microsoft company). If you download a program there, e.g. Deceive, your user relationship exists solely with the respective provider or developer.

11. Your rights

You have the following rights under the GDPR:

• Access to your stored data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of consent with effect for the future (Art. 7 (3))

An informal message to info@valorant-spind.de is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Data that SpindTune or the “Valorant-Spind” app only store locally on your device is not available to me; you can delete it yourself at any time (see sections 8 and 9.3).

12. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.