Privacy Policy
1. Scope and controller
This notice covers the DramaGeist app, its creator and administration interfaces, and dramageist.com. Separate competition rules and any supplementary privacy information apply to the Awards service. Controller: Ogulcan Akguezel, trading as DramaGeist, Hans-Böckler-Straße 33, 33334 Gütersloh, Germany. Email: [email protected].
2. Accounts, age and preferences
We process account or guest identifiers, registration email, profile information you provide, authentication information, date of birth or age confirmation, language and viewing preferences. Guest use still creates an identifier; it is not anonymous to our systems. These data provide accounts, age-based access, saved content and settings (Art. 6(1)(b) GDPR). Security and abuse prevention are also based on our legitimate interest in protecting the service (Art. 6(1)(f)). Account details are required for registered features; creator details are required for creator services. Optional fields and permissions can be declined, with corresponding features unavailable.
3. Viewing activity and community
We process series opens, episode starts, viewing progress, watch time, completions, likes, saved series, follows and unlock activity. This supports playback continuity and personal library features (Art. 6(1)(b)), and audience and series performance reports and service improvement (Art. 6(1)(f), our interest in understanding and improving the service). Activity can be associated with your account or guest ID. Comments and public profile information are visible to other users. Reports, feedback and moderation records are used to handle abuse and protect users (Art. 6(1)(f)); legal obligations may require processing under Art. 6(1)(c). Creator-facing reports are intended to show performance totals, not viewers’ contact details.
4. Purchases and creator payments
Apple processes iOS in-app payments. RevenueCat and our backend process app user identifiers, product and transaction identifiers, purchase status and history, refunds, coin balances and episode entitlements to validate purchases and deliver paid access (Art. 6(1)(b)), prevent fraud (Art. 6(1)(f)) and keep required records (Art. 6(1)(c)). We do not receive your full payment-card details from Apple. Creator agreements, acceptance records, earnings and payout records are processed to administer the creator relationship and payments (Art. 6(1)(b) and (c)). Payment details provided for a creator payout are used to arrange that payment.
5. Creator uploads
We process submitted videos, posters, audio tracks, subtitles, titles, descriptions, studio information and rights declarations to store, review, localize and publish content under the creator agreement (Art. 6(1)(b)). Approved published material is available to the relevant audience; private drafts and agreement records are restricted to authorized access. Original media copies may be retained for hosting, production and contractual purposes. Do not upload personal information you are not entitled to provide.
6. Hosting, devices and notifications
Supabase provides authentication, database, storage and backend functions. Cloudflare provides website delivery, protection and video streaming. These services receive technical data such as IP addresses, request times, browser/app/device information, requested resources and error or security logs for delivery and reliability (Art. 6(1)(b) and (f)). If you enable push notifications, we process a device push token, installation identifier, platform, time zone and notification preferences using Expo and Apple notification infrastructure, based on consent (Art. 6(1)(a)). You can turn notifications off in app or device settings. Necessary local storage retains sessions and preferences. The supplied informational website uses no advertising pixels or analytics cookies; its assets are hosted with the site. No cross-company advertising tracking is included in the app code reviewed for this notice.
7. Contact and service providers
We use your email and message content to answer enquiries (Art. 6(1)(b) for contractual requests, otherwise Art. 6(1)(f), our interest in responding). Google Workspace provides email services. Authorized administrators and service providers receive data as needed for their tasks; authorities or advisers may receive data when legally necessary. Provider information: Supabase, Cloudflare, RevenueCat, Expo, Google and Apple. Providers may act as processors or, for their own services and legal obligations, independent controllers.
8. International processing
Some providers operate internationally, including in the United States. Where personal data are transferred outside the EEA, the applicable safeguards depend on the recipient and service: an applicable adequacy decision or contractual safeguards such as EU Standard Contractual Clauses, with supplementary measures where required. You may contact us for information about the safeguards applicable to your data and how to obtain a copy. Provider privacy notices explain their international processing; a European hosting region does not by itself exclude overseas support or other processing.
9. Retention and deletion
Account data, preferences and viewing records are kept while needed to provide the account and service. You can initiate account deletion in Profile → Account & security, or contact us for assistance, including for guest accounts. We delete or anonymize data when the purpose ends unless contractual rights, legal retention duties or justified security and legal-claim needs require limited retention. Purchase, payout and agreement records may need to remain for applicable accounting, tax and claim periods. Uploaded content is handled according to publication status, the creator agreement and applicable rights. Operational logs are retained according to security and troubleshooting needs; backups expire through the relevant backup lifecycle. Deletion may therefore not remove every legally retained record immediately. Contact us for the applicable retention criteria for a particular record.
10. Your rights
Subject to the GDPR conditions, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. You may withdraw consent at any time without affecting earlier lawful processing. Contact [email protected]; we may need to verify your identity. You may complain to a supervisory authority, including the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, or the authority where you live or work. Automated age and entitlement checks control access to content; we do not use these to make decisions with legal or similarly significant effects within Art. 22 GDPR. Contact us if an access decision appears incorrect.
11. Changes
We update this notice when our services or data practices change. Material changes will be communicated appropriately. Last updated: 27 September 2026.