Privacy policy

Data controller

Dennis Tjebben, Hans-Böckler-Straße 3, 26603 Aurich, Germany.
Email: [email protected]

Rynvado is a project by Loyftwa.de, operated by a private individual.

Website access and hosting

Rynvado is hosted on a privately operated Raspberry Pi in Germany, with public access routed via Cloudflare Tunnel. Technical connection details, potentially including IP address, request time, requested URL and browser data, may be processed by Cloudflare and the server infrastructure to deliver and protect the site. Specific log retention depends on the configuration.

Purpose and expected legal basis: secure delivery and operation of the website (GDPR Art. 6(1)(f), legitimate interests). Cloudflare may process data outside the EEA. See the Cloudflare Privacy Policy.

Sign-in with Twitch

Twitch OAuth is used for authentication. Rynvado receives and processes the Twitch ID, login name, display name and profile-image URL to identify streamer accounts and operate approvals and dashboards. Rynvado does not receive your Twitch password.

Expected legal basis: providing the requested account functionality (GDPR Art. 6(1)(b) where a user relationship applies, otherwise Art. 6(1)(f)). Twitch has its own Privacy Notice.

Character registration and verification

Rynvado stores the linked Twitch identity, character name, WoW edition (Forever, Retail or Classic), ruleset or realm, challenge code, approval/verification statuses and potentially review timestamps. Administrators may review submitted screenshots as one-time evidence of character ownership.

Screenshot image data is intended to be deleted from the active database immediately after successful verification. This has been implemented and tested locally on Windows, but has not yet been fully verified on the public Raspberry Pi installation. Until that update is deployed, screenshots may remain stored there longer. Pending or rejected evidence may be retained for review.

Expected legal basis: verifying claims and preventing unauthorized registration (GDPR Art. 6(1)(b) or (f)). Approved streamer-to-character associations may be distributed as an addon registry and can then be accessible to its recipients.

Session cookies and preferences

An essential session cookie supports sign-in and CSRF protection. Your German/English language preference may be saved in a cookie for up to one year. According to the current setup, Rynvado does not use additional advertising or visitor-tracking tools. Infrastructure providers such as Cloudflare may process technical information as part of their services.

Depending on the function, personal-data processing is based on GDPR Art. 6(1)(b) or (f); technical storage is subject to applicable German TDDDG rules.

Administrative actions and logs

Approvals, rejections and other administrative actions may be recorded with the administrator’s Twitch ID, affected record, action and timestamp for security and traceability (GDPR Art. 6(1)(f)).

A maintenance function to purge audit records after 90 days and managed backups after 30 days has been tested locally. Automatic execution on the public Raspberry Pi has not yet been confirmed, so these periods are not represented as an established production guarantee.

Retention and erasure

Streamer and character information is generally retained while required for participation and approval. Requests for access, correction or erasure may be sent to the email address above; legal requirements and applicable security or retention grounds will be evaluated.

Backups may temporarily retain information after deletion from the active database. A complete production retention and backup process is still being finalized and verified.

Your data protection rights

Subject to legal requirements, you may request access (GDPR Art. 15), correction (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and object to processing based on legitimate interests (Art. 21). You may also lodge a complaint with a competent data protection supervisory authority (Art. 77).

Privacy enquiries: [email protected].