Privacy Policy

Last updated: August 2026

General Information

This privacy policy explains how we collect, use, and protect personal data when you visit https://gentleland.gg

We handle your data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant EU laws.

Data Controller

Gentleland
Owner: Jaqueline Martin
c/o flexdienst – #11705
Kurt-Schumacher-Straße 76
67663 Kaiserslautern, Germany

Email: privacy@gentleland.gg
Website: https://gentleland.gg

Data Collection on This Website

a) Server Log Files (Hostinger)

Our hosting provider Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus) automatically processes certain technical data when you access the site:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Host name of the requesting computer
  • Date and time of the request
  • Requested URL/resource
  • IP address

This processing is based on Art. 6 (1)(f) GDPR (legitimate interest in ensuring security and stability).

b) Cookies and Consent Management

We use cookies and local-storage technologies to operate core functions and measure traffic.
Before non-essential cookies (e.g. analytics, embeds) are set, we ask for your consent (Art. 6 (1)(a) GDPR).
You can revoke or adjust your consent any time through your browser settings.

c) Contact and Communication

If you contact us by email or form, we process your data to respond to your request.
Legal basis: Art. 6 (1)(b) GDPR (contract initiation) or Art. 6 (1)(f) GDPR (legitimate interest in communication).
We keep correspondence only as long as necessary to fulfill the purpose or statutory retention periods.

3. Integrated Services and Third-Party Tools

a) WordPress

Our website is built on WordPress, which may set technically necessary cookies and use anonymised telemetry for performance.
Processing is limited to hosting environment; no personal data is shared with WordPress.org.

b) Discord Integration

We maintain an official community on Discord, operated by Discord Inc., 444 De Haro St, San Francisco CA 94107 USA.
When you join, Discord processes your account information under its own policy:
https://discord.com/privacy

We only access data you make public within our server (e.g. username, messages in public channels).

c) Gentle Analytics

We use Gentle Analytics, our internal first-party analytics system, to analyse visitor behaviour, improve our website and services, and process technical security information.

For analytics purposes, data is processed only after you have given your consent. IP addresses are anonymised before analytics data is stored. The legal basis for this processing is Art. 6 (1)(a) GDPR.

Independently of analytics consent, Gentle Analytics also processes technically necessary server and security logs where required to operate, secure, troubleshoot, and protect our systems against misuse and attacks. Such logs may include IP addresses, request timestamps, requested URLs, HTTP status information, user-agent information, referrer information, and other technical request data.

This security-related processing is based on our legitimate interest in maintaining the security, integrity, availability, and proper operation of our systems pursuant to Art. 6 (1)(f) GDPR and does not depend on analytics consent.

You can withdraw your consent to analytics processing at any time through our cookie preferences. Withdrawal of analytics consent does not disable technically necessary security and server logging.

d) YouTube Embeds

We embed videos from YouTube (Google Ireland Ltd.).
When you load a page with a YouTube video, your IP address and possibly cookies are processed by Google.
This happens only after you grant consent (Art. 6 (1)(a) GDPR).
You can revoke consent through your cookie settings.

e) Unity Technologies

If you interact with Unity WebGL, WebGL2, WebGPU builds, or other Unity-based features that are embedded, provided as standalone applications, or otherwise integrated into our Services, certain technical and usage data may be collected and processed by Unity Technologies in accordance with Unity’s own privacy policy.

A. Personal Information You Provide

Account & Contact Details
This may include your name, username, email address, and country of residence. If you create an account or profile within a Unity-powered product, Unity may process credentials (such as username or password) necessary for login and account security.

Social Network Information
If you connect a social media account (e.g., Discord, Google, or other OAuth providers) to a Unity-based service, certain data such as your username, profile image, or friends list may be shared, depending on your privacy settings. Any such sharing is subject to both this Privacy Policy and the privacy policy of the respective social media provider.

User-Generated Content
When using Unity-based products or tools, you may upload assets, text, or media for publication or collaboration. Please note that any content shared publicly (e.g., through multiplayer, community, or showcase features) may be visible to other users or the general public.

Community Interactions
If you participate in community features, Unity may collect information such as chat logs, usernames, and communications to provide moderation, safety, or gameplay services.

B. Information Automatically Collected

Device & Technical Data
Unity automatically collects data about your device and how you interact with their services. This may include device identifiers, IP address, browser type, operating system, hardware settings, app version, crash reports, and diagnostic data.

Log & Usage Data
Unity may log information such as session IDs, authentication tokens, event data (e.g., gameplay or monetization events), and interactions within the game. This helps improve performance, detect bugs, and enhance gameplay analytics.

Cookies & Similar Technologies
Unity and its partners may use cookies, SDKs, or other tracking technologies to remember user preferences, improve performance, and deliver relevant advertising. You can manage these preferences through your browser settings or Unity’s cookie policy.

Demographic & Regional Data
Unity may estimate non-identifiable demographic information (e.g., region, device language, or general age group) to better understand player engagement and technical compatibility.

Third-Party Sources
Unity may combine data collected from your device with information provided by third parties (such as marketing partners, analytics services, or platform providers) to improve their services.

C. Sensitive Information

Gentleland and Unity do not request or intentionally collect sensitive data such as racial or ethnic origin, political opinions, religious beliefs, health information, or trade union membership. Please refrain from submitting such information when using our services.

D. Aggregated or Anonymized Data

Unity may anonymize or aggregate data collected from users to generate non-identifiable insights and statistics. This data is used to analyze trends, measure engagement, and improve the overall experience but does not personally identify any individual user.


Unity Privacy Policy: https://unity.com/legal/privacy-policy

f) Notion

We use Notion Labs, Inc., 2300 Harrison St, San Francisco, CA 94110, USA, for internal knowledge bases, project management, and databases related to Gentleland services.
Notion processes data entered by us and authorised collaborators.
This includes contact details, project notes, or documentation that may occasionally include personal data.
Processing is based on our legitimate interest in efficient internal operations (Art. 6 (1)(f) GDPR).
Data transfers to the USA are governed by Standard Contractual Clauses (SCCs).

Privacy Policy: https://privacycenter.notion.so/policies

6. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, destruction, or misuse.

These measures include, where applicable:

  • SSL/TLS encryption for data transmitted between your device and our Services.
  • Secure one-way password hashing, meaning account passwords are not stored in readable plaintext form.
  • Multi-factor authentication (2FA) and additional authentication safeguards for protected areas and administrative access.
  • Role-based access controls to limit access to systems and personal data to authorised users and administrators.
  • Brute-force and automated attack protection, including monitoring and restriction of suspicious authentication attempts.
  • Security and server logging to detect abuse, attacks, technical errors, and unauthorised access attempts.
  • Firewall and application-level security measures designed to identify and block malicious or suspicious requests.
  • Regular software and security updates for our applications, server components, plugins, and supporting systems.
  • Regular backups to help protect against accidental data loss, corruption, or technical failure.
  • Access restrictions for databases, administration interfaces, and internal systems.
  • Data minimisation, meaning we aim to collect and retain only information necessary for the relevant purpose.
  • IP anonymisation or pseudonymisation where full IP addresses are not required for the relevant processing purpose.
  • Separation of analytics and security processing, so optional analytics processing can be disabled without preventing technically necessary security measures.
  • Monitoring of unusual or potentially malicious activity in order to protect our infrastructure, users, and Services.
  • Security measures provided by our hosting and infrastructure providers, including measures intended to protect servers, networks, and stored data against unauthorised access and technical failures.

Our security measures are reviewed and adapted where appropriate to account for technological developments, changes to our Services, and identified security risks.

No method of electronic transmission or storage can guarantee absolute security. However, we take reasonable measures appropriate to the nature of the data and the risks associated with its processing.

7. Dispute Resolution Information

We are neither obliged nor willing to participate in dispute-resolution proceedings before a consumer arbitration board.
The former EU Online Dispute Resolution (ODR) platform was closed on 20 July 2025 under Regulation (EU) 2024/3228.
For information on consumer rights within the EU, please visit:
https://consumer-redress.ec.europa.eu/index_en

8. Changes to This Policy

We may update this Privacy Policy to reflect new legal requirements or technological developments. The latest version will always be available on this page.

Gentleland
Owner: Jaqueline Martin
c/o flexdienst – #11705
Kurt-Schumacher-Straße 76
67663 Kaiserslautern, Germany

Email: info@gentleland.gg
Website: https://gentleland.gg