Privacy Policy
Last updated: June 9, 2026
1. Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
BrotherByte Studio
Owner: Simon Brettkuhn
c/o Autorenglück #51942
Albert-Einstein-Straße 47
02977 Hoyerswerda
Germany
Email: brettkuhn.dev@gmail.com
2. General information on data processing
We process personal data only insofar as this is necessary to provide our website and to fulfil our contractual services towards players of NexFall. No processing beyond this takes place.
3. Data processed when playing NexFall
If you play NexFall via Steam, we process the following data linked to your Steam account:
- SteamID64 — the unique identifier of your Steam account
- Steam persona — the display name you have chosen on Steam
- Game progress — player level, skill points, unlocked cosmetics and powerups, saved deck configuration
- Match history — per match: map, mode, time, placement, number of deaths
Legal basis: Art. 6 (1) (b) GDPR (performance of a contract — the processing is necessary to provide you with the game progress and online features of NexFall).
4. Storage period
We store your data until your game progress is deleted. You can request deletion at any time by email to brettkuhn.dev@gmail.com. Upon receipt of your request, the data will be deleted without undue delay. In automated backup systems, the data may be retained for a further period of up to 30 days before it is permanently overwritten.
5. Website hosting and server log files
This website is hosted on a server operated by netcup GmbH (Daimlerstraße 25, 76185 Karlsruhe, Germany), located in Nuremberg, Germany. When you access the website, server log data is automatically recorded that your browser transmits to us:
- IP address
- Date and time of the request
- User agent (browser and operating system information)
- Requested URL
This data is used exclusively for technical purposes (provision of the website, security) and is not used to create user profiles. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the stable and secure operation of the website).
6. Web analytics (GoatCounter)
To understand how our website is used, we use GoatCounter, a privacy-friendly, self-hosted web analytics tool running on our own server (see section 5). GoatCounter records aggregated, anonymous usage statistics such as the pages visited, the referring website, approximate region (country level), screen size, and browser type.
No cookies are set and no IP addresses are stored. Unique visits are counted using a temporary, non-reversible hash that is discarded at the end of the day, so individual users cannot be identified or tracked across days. For this reason, no consent banner is required.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the statistical analysis of website reach in order to improve our offering).
7. Contact form
If you contact us via the support form on this website, we process the data you provide there (name, email address, subject, and message) for the sole purpose of handling and responding to your request. The submission is transmitted to and stored on our server (netcup GmbH, see section 5).
Legal basis: Art. 6 (1) (b) and (f) GDPR (handling of your enquiry and our legitimate interest in responding to support requests). The data is deleted once your request has been fully processed and no statutory retention obligations apply.
8. Steam integration
NexFall is distributed via the Steam platform operated by Valve Corporation. The use of Steam is subject to Valve's privacy policy, available at https://store.steampowered.com/privacy_agreement/ . We have no influence over the data processing carried out by Valve.
9. Your rights
Under the GDPR, you have in particular the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)
An informal email to the contact address below is sufficient to exercise your rights.
10. Contact for data protection inquiries
For all data protection inquiries, please contact: brettkuhn.dev@gmail.com