Privacy policy

In short

The pages without sign-in set no cookies, use no tracking and no analytics, and load nothing from third-party servers. There we only receive personal data when you write to us through the form — and then only what you enter yourself.

Authors who work with us can sign in under "Projects" with their one above account and exchange files with us. For that we use the sign-in service Clerk and store what belongs to your projects. The sections on projects below say exactly what.

Controller

The controllers for the processing of personal data on this website are:Matthias Drescher & Jan SchumannOne Above Games (in formation)E-mail: contact@one-above-games.com

We will add a postal address as soon as the company has been founded.

Hosting and server logs

The website and the projects database run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The files in the projects are kept there too — more on this under "Projects: your files".

With every request, the server processes technically necessary data: your IP address, the time, the address requested and your browser's identifier. We use this data solely to run the site securely and reliably, do not combine it with any other data and delete the logs after a short time. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Contact form

When you write to us through the form, we process exactly this information: your name, your e-mail address, your phone number (only if you give it), your message and your consent. We need it to answer your enquiry and — if you want — to prepare working together.

The legal basis is your consent (Art. 6(1)(a) GDPR) and, where a possible collaboration is concerned, steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

Your browser sends the information encrypted to our server, which sends it as an e-mail through the delivery service Brevo (Sendinblue SAS, Paris, France) to our mailbox contact@one-above-games.com, hosted by our e-mail provider Migadu (Switzerland). Brevo processes the e-mail on our behalf only to deliver it. We do not store your enquiry in a database — it is kept only in that mailbox. The EU Commission has found that Switzerland ensures an adequate level of data protection (adequacy decision).

We delete your enquiry twelve months after our last contact. If it leads to an order, we keep the correspondence for as long as statutory retention periods require.

We do not send an automatic confirmation e-mail. The page shows you right after sending that your message has arrived.

You can withdraw your consent at any time — an informal e-mail to contact@one-above-games.com is enough. We will then delete your enquiry unless a retention obligation prevents it. Processing that took place before the withdrawal remains unaffected.

Projects: account and sign-in

Projects are for authors we work with. You sign in there with your one above account — the same one as in the one above arena. The account is kept for us by the sign-in service Clerk (Clerk, Inc., USA). The sign-in form on the projects page comes from Clerk; what you enter there goes straight to Clerk — we never see your password. How Clerk processes your data and safeguards the transfer to the USA is described in the arena’s privacy policy.

So that our server knows who you are, your browser sends a short-lived token from Clerk with every request, valid for one minute. It contains your Clerk ID, your e-mail address and whether it is verified.

As soon as you ask for access, we create an account with us and store: your Clerk ID, your e-mail address (renewed from the token with every request), the state of your access, your storage, whether you want notifications, and when you were last active. We receive an e-mail about your request at contact@one-above-games.com.

The legal basis is carrying out our collaboration and the steps before it that you ask us for (Art. 6(1)(b) GDPR).

Projects: your files

For every project we store its name, and for every file its name, its size, when and by whom it was uploaded (by you or by us), and when you last looked at the project — for the dot on new files. This information is kept in the database on our server at Hetzner.

The files themselves are kept on the disk of the same server at Hetzner in Germany. Your browser sends them there encrypted. Only you and the two of us, Jan Schumann and Matthias Drescher, have access to your files. There are no public links. We open your files only for the job you give them to us for — more on this in the terms of use.

We do not scan files for viruses. Open them as carefully as an e-mail attachment.

Projects: how long we keep data

We delete a project with its files twelve months after your last activity; four weeks before, we send you an e-mail. Whatever you delete or overwrite stays in the trash for 14 days and is then deleted for good. An unfinished upload expires after 24 hours.

We back up the database at Cloudflare (R2). A deleted entry may still be contained in a backup there that is at most about four weeks old.

Copies we have downloaded for the job belong to the correspondence of that job; the twelve months do not apply to them, the rules of the job do.

If you delete your one above account, Clerk tells us so through its service provider Svix: we receive only your Clerk ID and then delete your account with us together with all projects and files. We learn nothing about other accounts this way. You can also write to us at contact@one-above-games.com, and we will delete everything straight away.

Projects: notifications

When we have uploaded something to one of your projects, we send you an e-mail at your address — bundled, with the file names and a link to the project. Four weeks before the deletion date there is also a reminder. The e-mails go through the delivery service Brevo (Sendinblue SAS, Paris, France), which only delivers them on our behalf. If Brevo cannot deliver an e-mail, it tells us; we discard such reports about your address without storing them. You can switch the notifications off under "Projects" at any time.

When you upload something, we receive an e-mail at contact@one-above-games.com — also through Brevo; it is then kept in our mailbox at Migadu (Switzerland).

Protection against abuse

To keep anyone from using the form en masse, the server counts how many requests arrive from the same IP address within a short time. For this, the address is held only temporarily in memory and is not stored. The legal basis is our legitimate interest in a form that is not abused (Art. 6(1)(f) GDPR).

In the projects the server also counts, per account, how many requests arrive within a short time — downloads included. This, too, happens in memory only.

Fonts

We serve the fonts of this site from our own server. Your browser does not connect to Google or any other font provider for them.

Cookies, tracking, analytics

The pages without sign-in set no cookies and use neither tracking nor analytics. The language you choose is kept in the address only, not in a cookie.

On the projects pages, Clerk’s sign-in program runs in your browser. It sets and reads technically necessary cookies on the domain one-above-games.com — the same ones that keep you signed in to the one above arena. Without them the sign-in you ask for there would not work (§ 25(2) no. 2 TDDDG). Our server does not read these cookies: it recognises you only by the token your browser sends.

When you are signed in, your browser also sends Clerk’s cookie when you visit the other pages; we neither read nor use it there.

What the projects pages load from other servers

The pages without sign-in load nothing from third-party servers. The projects pages load Clerk’s sign-in program from clerk.one-above-games.com — a server of Clerk under our domain — and talk to it while you are signed in there. They may show images from img.clerk.com (profile pictures at Clerk). In doing so, Clerk sees your IP address and your browser’s identifier.

When you sign in or sign up, Clerk uses Cloudflare Turnstile (Cloudflare, Inc., USA) to check that a human is filling in the form. For this your browser loads a program from challenges.cloudflare.com, and Cloudflare sees your IP address and characteristics of your browser.

Everything else, your files included, goes only to our own server.

Colour theme

The site follows the light or dark setting of your system. Only when you click the switch at the top does your browser remember your choice in your device's local storage (localStorage, entry "oa-theme" with the value "light" or "dark"). The entry is not sent to us, contains no personal data and only serves to show the site the way you chose. It is strictly necessary for this function you asked for (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

Links to the arena and the studio

This site links to the one above arena (arena.one-above-games.com) and to one-above-games.com. Their own privacy policies apply there. Your browser only connects to these sites once you follow a link.

Your rights

You have the right of access to your data held by us (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Just write to us at contact@one-above-games.com.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one where you live.