Privacy policy

1. Controller

Email: akandogames@gmail.com

This notice covers akandostudio.com. The games site, akandogames.com, has its own notice published there.

2. Hosting and DNS

This website runs on a server supplied by Hetzner Online GmbH within the European Union. The domain also uses Hetzner DNS. A request necessarily processes connection data such as the IP address, time, requested resource, and browser information to deliver the site and defend it against attacks. Processing is based on Art. 6(1)(f) GDPR and the legitimate interest in stable and secure operation. General access logging is not enabled; firewall and security logs are limited to what is operationally necessary.

3. No cookies, no advertising, no tracking

This site sets no cookies, uses no advertising or tracking services, and embeds nothing from third-party providers. Fonts, images, video, and scripts are served from our own servers.

One exception: the game thumbnails on the Games and Work pages are loaded from akandogames.com. That is the same server we operate under a different name rather than a third party, and loading them creates the same technically necessary connection data described above.

4. The enquiry form

The form on the contact page sends project enquiries. It processes what you enter: name, email address, optionally a company, the selected topic, your message, and the language of the page.

Nothing is stored. The enquiry is sent straight on as an email to the mailbox named below and is not written to any database or file belonging to this website. What remains is the email in the mailbox, which is deleted when it is no longer needed and no statutory retention duty applies.

The legal basis is Art. 6(1)(b) GDPR for enquiries that precede a contract and Art. 6(1)(a) GDPR for the consent given in the form. Providing the information is voluntary, but without it the enquiry cannot be answered.

To keep automated submissions out, the form contains a hidden field and measures how long it was open. The server additionally limits how many submissions one IP address may make; that address is counted in memory only and is not stored.

5. Email through Gmail

Enquiries are sent and received through akandogames@gmail.com. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, processes the sender details, message content, and technical delivery data. Processing in third countries cannot be ruled out. The legal basis is Art. 6(1)(b) and (f) GDPR.

6. Direct email

If you write to us directly, we process the sender address, content, and technical metadata to handle the request. The legal basis is Art. 6(1)(b) or (f) GDPR depending on the request. Correspondence is deleted when no longer needed and when no statutory retention duty applies.

7. Customer portal and monitoring

Akando Studio provides a protected monitoring area for customer solutions under active operation. A customer account processes the member's name, email address, tenant assignment, password hash, security identifier, and the times of creation, password change, and last sign-in. The password itself is never stored. Sign-in uses a time-limited access token in the browser's local storage and no cookie.

The portal shows only solutions assigned to the member's tenant. The system stores technical health reports from those applications, including status, checks, timings, operational metrics, errors, and timestamps. Health endpoint credentials are encrypted at rest and are never sent to the browser. Health reports are deleted after 90 days.

Processing is based on Art. 6(1)(b) GDPR for performance of the applicable support or operations agreement and Art. 6(1)(f) GDPR for secure authentication, fault detection, and stable operation. Account data is deleted after the customer relationship ends unless legal or contractual requirements require longer retention.

8. External links

This site links to the Unity Asset Store, to client projects, and to akandogames.com. A connection to any of them is made only when you follow the link; nothing is transmitted there beforehand. The operators of the linked sites are responsible for processing on them.

9. Recipients

Recipients of technically necessary data may include Hetzner Online GmbH for hosting and DNS and Google Ireland Limited for email delivery. Data is not sold or used for personalised advertising.

10. Rights and complaints

Subject to the GDPR, rights include access, rectification, erasure, restriction, portability, and objection. Consent may be withdrawn at any time for future processing. Complaints may be made to the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany.

11. Changes

This notice is updated when features, providers, or legal requirements change.