GHOSTSCREEN
Privacy

Privacy Policy

Datenschutzerklärung. We keep this short because we collect as little as possible: no cookies, no ads, no account, no cross-site tracking, and we never sell data. That is also why you see no cookie banner.

Who is responsible (Verantwortlicher)

Lukas Leitner, Vienna, Austria — [email protected]. This is the controller for data processing on https://ghostscreen.app under Art. 4 (7) GDPR (DSGVO). See also our Impressum.

Server logs & hosting

When you open the site, our hosting infrastructure processes the technical data your browser sends: your IP address, the date and time, the page requested, the referring page and your browser/device type. This is necessary to deliver the page and keep the service stable and secure. Legal basis: Art. 6 (1)(f) GDPR (our legitimate interest in operating and securing the site). These logs are stored only briefly and then deleted.

The site is self-hosted and operated on servers of netcup GmbH, Germany, acting as a processor under a data-processing agreement (Art. 28 GDPR).

Content delivery & security (Cloudflare)

The site is delivered through Cloudflare, a content-delivery and security network. Cloudflare processes your IP address and request metadata to route traffic, cache content and protect the site against attacks. Legal basis: Art. 6 (1)(f) GDPR. The provider is Cloudflare, Inc. (USA); transfers to the USA are safeguarded by the EU Standard Contractual Clauses and Cloudflare’s certification under the EU–US Data Privacy Framework. Details: cloudflare.com/privacypolicy.

Analytics (self-hosted Umami)

To understand roughly how many people visit and which scenes are popular, we use Umami — a privacy-friendly, cookieless analytics tool that we host ourselves. It sets no cookies, does not track you across other websites, and stores only aggregated, non-identifying statistics (for example page URL, referrer, browser, operating system and country). Your IP address is used only transiently to derive an approximate country and is not stored. This data stays on our own infrastructure and is not shared with any third party. Legal basis: Art. 6 (1)(f) GDPR.

Search engines (Google Search Console)

The site is registered with Google Search Console so we can see anonymous, aggregated search statistics (which search terms show the site, and the number of clicks and impressions). This data is generated by Google’s search engine itself — there is no Search Console tracking script running on these pages, so it does not collect anything from your visit here.

Embedding scenes

Scenes may be embedded elsewhere (for example as an OBS browser source or an <iframe> on another page). When a scene is embedded, the same minimal processing described above (server log and Cloudflare) applies; we still set no cookies.

Your rights

Under the GDPR you have the right to:

  • access your data (Art. 15) and receive a copy;
  • rectification (Art. 16) and erasure (Art. 17);
  • restriction of processing (Art. 18) and data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21).

To exercise any of these, email [email protected].

Right to complain

If you believe your data is processed unlawfully, you can lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, [email protected], dsb.gv.at.

Changes

We may update this policy as the site evolves; the current version always lives at this address. Last updated: 5 July 2026.