Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. General

Protecting your data is important to me. This website is intentionally built to be data-minimal: there is no login, no user accounts and no cookies. Only the data-minimising, self-hosted Matomo is used for anonymous reach measurement (see section 4). Otherwise, only the data that is technically necessary to operate the site is processed (see Hosting).

3. Hosting & server log files

This website is hosted by the following provider:

When you access the website, the provider automatically collects and stores information in so-called server log files that your browser transmits. This is usually: IP address, date and time of access, the requested file/address, the amount of data transferred, notification of successful retrieval, the browser and operating system used, and the previously visited page (referrer). This data is used exclusively for the technically error-free, secure and stable operation of the website and is not merged with other data sources.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and functional operation of the website). A data processing agreement (DPA) pursuant to Art. 28 GDPR exists with the host. The log files are stored only for as long as necessary for these purposes or to defend against attacks.

4. Cookies & web analytics with Matomo

This website does not set any cookies. For the statistical analysis of website usage (reach measurement), I use the open-source software Matomo, which I operate myself on my own server (at ALL-INKL, server location Germany). No data is transmitted to third parties.

Matomo is configured to be particularly data-minimising: no cookies are set (cookieless tracking), visitors' IP addresses are shortened (anonymised) before any storage, and no cross-device or cross-site recognition takes place. Only anonymous, aggregated information is collected, such as pages visited, approximate location at country level, referring page (referrer), browser/device type, triggered downloads, anonymous interactions with interactive tools (e.g. opening a simulator or using a calculator) and the approximate active time spent on a page. It is therefore not possible to draw conclusions about individual persons.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a statistical, privacy-friendly analysis of reach to improve the service). Since no cookies are set and no personal data is processed, no consent (cookie banner) is required for this.

Objection (opt-out): You can object to the anonymous reach measurement at any time. To do so, activate your browser's "Do Not Track" function or use the following opt-out option:

5. Fonts (web fonts)

This website does not embed any external font services (e.g. Google Fonts). The fonts used are served locally or system fonts are used. No connection to third-party servers is established and no IP address is transmitted to third parties.

6. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption (recognizable by "https://" and the padlock symbol in the address bar). As a result, the data transmitted between your browser and the server cannot be read by third parties.

7. Contact & feedback form

If you contact me by e-mail or via the feedback/bug form on this website, I process the information you submit exclusively to handle your request: the type of request, your message text, optionally your e-mail address (only if you provide it – for a reply) and any images you attach. No IP address is stored in the process. Submissions are sent to me by e-mail via my host's mail server (ALL-INKL); no disclosure to any other third parties takes place.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in handling enquiries and preventing abuse) or Art. 6 (1) (b) GDPR where a usage relationship is involved. This data is deleted as soon as your request has been conclusively dealt with and no statutory retention obligations apply. Providing your e-mail address is voluntary; without it, however, I cannot reply to you directly.

8. The "Valorant-Spind" app

The app processes your game data on your own device and displays it exclusively to you. To retrieve skin names, images and prices as well as your game data (inventory, rank, matches), the app calls the official servers of Riot Games and the public database valorant-api.com, using the access token already present locally in the Valorant client. To convert the skin value into Euros, your account country may additionally be queried from Riot (solely to determine the appropriate price rate). No data is transmitted to me (the developer) or to any other third party; there is no additional login and no request for credentials. You can find details on the homepage under "Security & transparency".

9. Embedded images, embedded video, streamer page & security badge

Game images (Riot/valorant-api, wsrv.nl): The guide pages display Valorant images such as agent, map, skin and rank icons. These are loaded partly directly from the public database valorant-api.com (media.valorant-api.com) and via the image optimisation service images.weserv.nl (wsrv.nl). The homepage additionally embeds the "Approved" badge of the software directory SaaSHub (cdn-b.saashub.com). When these images are loaded, your device's IP address is technically transmitted to the respective service. No cookies are set and no further personal data is transmitted. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an appealing, fast-loading presentation).

Ability videos (Riot Games): On the agent guide pages, a short video clip is shown for each agent ability. These clips are loaded directly from Riot Games' servers (cmsassets.rgpub.io) when the page is opened. For technical reasons, your device's IP address is transmitted to Riot Games in the process; a transfer to countries outside the EU (including the USA) is possible. We do not set any cookies and no further personal data is transmitted. The provider is Riot Games, Inc., 12333 W. Olympic Blvd., Los Angeles, CA 90064, USA. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an illustrative presentation of the game content). The voice lines in the soundboard, by contrast, are hosted on our own server; no data is transmitted to third parties in that case. Further information on Riot Games' data processing is available at riotgames.com/en/privacy-notice.

Embedded video (TikTok, two-click solution): The homepage embeds an introductory video provided via the TikTok service. For data-protection reasons it is implemented as a "two-click solution": when you open the page, only a local preview (a placeholder with a play button) is shown at first – no connection to TikTok is established and no data is transmitted to TikTok. Only when you actively click the play button is the TikTok player loaded. This establishes a connection to TikTok's servers and, for technical reasons, transmits your IP address (among other data) to TikTok; TikTok may set its own cookies and may also transfer data to countries outside the EU (including the USA). The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland (part of the ByteDance group). The legal basis for this loading is your consent pursuant to Art. 6 (1) (a) GDPR, which you give by clicking the play button; you can refuse it by simply not starting the video. Further information on TikTok's data processing is available at tiktok.com/legal/privacy-policy.

Streamer page (Twitch): On the "Popular German Valorant streamers" page we show names, profile pictures and the live status of individual Twitch channels. Both the live status and the profile pictures are retrieved exclusively server-side, via our own server, from the official Twitch API and delivered through our domain. Therefore, simply visiting the page transmits no IP address and no data from your device to Twitch. Only when you actively click a streamer link (twitch.tv) do you leave our website; the privacy policy of Twitch (Twitch Interactive, Inc., 350 Bush Street, San Francisco, CA 94104, USA) then applies.

Security badge (VirusTotal): On the homepage we display, for transparency, the result of a virus scan of the app via the VirusTotal service. This query is made exclusively server-side, via our server; no data from your device is transmitted to VirusTotal.

10. Your rights

You have the following rights under the GDPR:

• Access to your stored data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing (Art. 21)

An informal message to info@valorant-spind.de is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority.

11. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.