This English version is provided for convenience. The German version (Datenschutzerklärung) is legally binding.
1. Controller
IMMO-MEDIA
Ernst Hindelang jun.
Ohmstraße 12
85757 Karlsfeld, Germany
Email: info@immo-media.de
2. Hosting
This website is hosted by ALL-INKL.COM — Neue Medien Münnich, Owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Details on data processing by All-Inkl: all-inkl.com/datenschutzinformationen.
We have concluded a data processing agreement (DPA) with the hosting provider. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the reliable provision of this website).
3. Server Log Files
The hosting provider automatically collects and stores information in server log files that your browser transmits automatically: browser type and version, operating system, referrer URL, hostname of the accessing device, IP address, and time of the server request. This data is not merged with other data sources. Collection is based on Art. 6 (1) (f) GDPR (legitimate interest in the technically error-free presentation and optimization of the website).
When someone requests an address that does not exist, we log the requested address, the referring page and the browser identifier — without the IP address — to fix broken links, and delete these entries after 90 days at the latest. If a script error occurs in the browser, we store the error message, page path and browser identifier, also without the IP address.
When you use the site search or the quick search (Ctrl+K), we count the search term per day, language and selected game, and whether a result was clicked, so we can spot missing or unhelpful content. The term is stored without any link to you, your IP address or your browser and deleted after 90 days at the latest. Please do not enter personal data into the search field.
4. Cookies and Consent Management
Without your consent, this website sets no tracking or advertising cookies. A cookieless, anonymous audience measurement is always in place (see section 5); Google Analytics is only loaded if you agree (see section 6). During a live stream we embed the Twitch player, which may set cookies of its own (see section 7).
There are no public profiles; an account for visitors is strictly private (see below). When our editorial team logs in to the editorial area, a strictly necessary session cookie ("raiddex_admin") set to keep the login active during the session. It contains nothing but a random session identifier, expires when the browser is closed or after prolonged inactivity, and is not evaluated for any other purpose. After a successful login we also set the cookie "raiddex_team" (value "1", valid for one year) so that visits by the editorial team are not counted in the visitor statistics and – if consented there – are marked as internal traffic and excluded in Google Analytics. Anyone who chooses “Remember this device for 90 days” during two-factor login also receives the cookie "raiddex_2fa" (random identifier, valid for 90 days) so that no code is needed at every login on that device. Legal basis: Art. 6 (1) (f) GDPR; strictly necessary cookies do not require consent (§ 25 (2) no. 2 German TDDDG).
On your first visit, a cookie banner asks whether you agree to analysis with Google Analytics. We store your decision (“accepted” or “declined”) in your browser's local storage (entry “raiddex_consent”) so that we do not have to ask again on every page. How often the banner was accepted or declined is counted as a plain total per day and game section, without any link to you. Legal basis: Art. 6 (1) (f) GDPR, § 25 (2) no. 2 German TDDDG. You can change your decision at any time via the “Cookie settings” link at the bottom of every page. We do not use advertising services.
Checklists, your own lists and saved pages (“My profile”) are kept exclusively in your browser's local storage (entries starting with “w3-”, “dw-” or “rdx-”). This covers what you check off, collect or save, your settings (e.g. your own level) and, once you use one of these features, a list of recently viewed pages for “Pick up where you left off”. This information does not leave your browser and is not transmitted to us. You can delete it at any time under “My profile” for each game or via your browser settings. The storage is necessary to provide the feature you requested (§ 25 (2) no. 2 German TDDDG).
With an account (“My account”) you can additionally back up this progress with us and keep it in sync between your devices. For this we store your email address, a hash of your password (we do not know the password itself), the chosen language, the time of registration and of last use, and the progress itself (checklists, your own lists, saved pages, settings). The list of recently viewed pages stays in your browser. The account is not public; others cannot view it. We send emails to confirm your address and to reset your password, and, if you ask for it, a weekly overview of new content for the games you selected in your account (you can unsubscribe in your account and via the link in each of these emails). When you sign in we set the strictly necessary cookies “raiddex_user” (random session identifier, valid for 180 days, extended on use), “rdx_u” (content “1”: tells the page that an account is signed in) and, for the forms, “rdx_csrf” (protection against forged requests). Legal basis: Art. 6 (1) (b) GDPR (providing the account you requested), for the cookies § 25 (2) no. 2 German TDDDG. Under “My account” you can download your data at any time and delete the account together with everything stored in it. Unconfirmed accounts are deleted after seven days.
Community builds: With an account you can publish your own builds in the build planner. The account itself stays private; only the title of the build, the name you freely choose for it and the build itself (abilities, gear) are public – not your email address. We store which account created a build. You can change or delete each of your builds at any time; if you delete your account, your builds are deleted as well. If you mark a build with “Like”, we store that with your account; only the number is public. The editors may remove builds that break the rules. Legal basis: Art. 6 (1) (b) GDPR (publication at your request).
Using the “Report build” form you can point us to a community build, even without an account. We store the reason you choose, your optional note and – to recognise repeated reports – a non-reversible hash of your IP address, formed with a random value that changes daily; we do not store the IP address itself. If you are signed in, we note your account with the report. For the form we set the strictly necessary cookie “rdx_csrf” (protection against forged requests). Legal basis: Art. 6 (1) (f) GDPR (protection against abuse), for the cookie § 25 (2) no. 2 German TDDDG.
5. Audience Measurement (Visitor Statistics)
We operate our own cookieless audience measurement to statistically evaluate the use of our website (e.g. number of page views, popular pages, approximate visitor countries). This sets no cookies and stores no IP addresses.
To distinguish visits, an irreversible pseudonymous hash is derived from the IP address and browser identifier using a random value (salt) that rotates daily and is then deleted. Recognition beyond a single day or any re-identification of your person is therefore impossible. Country assignment uses a local, offline GeoIP database (DB-IP Lite); the IP address is used only briefly in memory and is not stored.
To tell automated access (bots) apart from visits, your browser briefly reports back to our server once after a page has loaded. This report contains no additional data; it merely notes on the pseudonymous daily value that a real browser opened the page.
This measurement of our own transmits no personal data to third parties. The anonymous statistics are deleted automatically after no more than 14 months. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in data-minimizing, anonymous audience measurement). As no information is stored on or read from your device, no consent under § 25 German TDDDG is required.
Clicks on tool buttons (such as “Copy link”, “Open in planner” or the PoB export) are counted as plain totals per day, button and game, without a pseudonymous hash, IP address or browser identifier.
6. Google Analytics
With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your agreement in the cookie banner the service is not loaded; in that case no cookies are set and no data is transmitted to Google.
Google Analytics sets cookies (“_ga” and “_ga_<ID>”, valid for up to two years) that recognize your browser across visits, and records, among other things, the pages viewed, time spent, the previously visited page, approximate location, browser, operating system and device type. Your IP address is used during collection (among other things for the approximate location) but is not stored by Google Analytics 4. The consent signals for advertising (Google Consent Mode) are set to “denied”; no advertising cookies are set.
The purpose is the statistical evaluation of usage in order to improve our website. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) German TDDDG). You can withdraw it at any time with effect for the future via “Cookie settings” at the bottom of every page; the Google Analytics cookies are deleted when you do.
Google processes the data on our behalf (data processing under Art. 28 GDPR). Data may also be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission exists (Art. 45 GDPR). The user and event data stored at Google is deleted after no more than 14 months. Further information: Google's privacy policy.
7. Twitch Live Stream
When a live stream is running on our Twitch channel, we show this next to the logo. Our server asks Twitch whether the channel is live; your browser does not connect to Twitch for this. The live badge is an ordinary link to Twitch.
During a live stream we additionally embed the Twitch player on larger screens (768 pixels wide and up); it is provided by Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA. The player is loaded directly from Twitch's servers. Twitch then receives your IP address, details about your browser and device and the address of the page the player runs on, and may set cookies and store information in your browser. If you are logged in to Twitch, Twitch can associate the request with your account. The data may also be processed in the USA. Outside a live stream and on smaller screens nothing is loaded from Twitch.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in showing our live stream on the website). You can close the player with the cross; it then stays hidden until you close the browser tab, and no further data is sent to Twitch. For this your browser remembers the closing in its session storage (entry “raiddex_twitch_closed”, not a cookie). Further information: Twitch's privacy notice.
8. Fonts
This website uses web fonts that are hosted locally on our server. No connection to Google or other third-party servers is established; your IP address is not transmitted to third parties.
9. SSL/TLS Encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by "https://" and the lock symbol in your browser bar.
10. Your Rights as a Data Subject
Under the GDPR you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 (3) GDPR)
To exercise your rights, an informal email to info@immo-media.de is sufficient.
11. Right to Lodge a Complaint
In the event of data protection violations, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
12. Validity of this Privacy Policy
This privacy policy is effective as of October 2026. Further development of the website (e.g. introduction of advertising services) may require updates. The current version can always be found on this page.