Privacy Policy

Last updated: September 2026

The short version: this website doesn't use cookies, analytics or advertising trackers. We only process the technical data needed to show you the page, and YouTube only receives data if you press play on a trailer.

1. Who is responsible

The controller responsible for processing personal data on this website under the EU General Data Protection Regulation (GDPR) is:

Cosmic Stag Games GmbH
Kremmener Straße 2
10435 Berlin, Germany
Managing director: Uli Quasebarth
Email: info@cosmicstag.com

If you have any questions about data protection, just email us at this address.

2. When you visit this website

Whenever you open this website, your browser automatically sends information to the server of our hosting provider. This includes your IP address, the date and time of your visit, the page you requested, the website you came from, and the type and version of your browser and operating system.

We need this data to deliver the website to you and to keep it stable and secure, for example to detect and fend off attacks. The legal basis is our legitimate interest in the secure and reliable operation of our website (Art. 6(1)(f) GDPR). Without this data, the website can't be displayed.

Our hosting provider processes this data only on our behalf and according to our instructions, under a data processing agreement (Art. 28 GDPR). We delete the log data as soon as it's no longer needed for these purposes. If individual entries are needed to investigate a specific security incident, we keep them until the incident has been resolved.

3. No cookies, analytics or tracking

This website doesn't use cookies or similar technologies. We don't use analytics, advertising or tracking tools, and we don't use automated decision-making or profiling.

Fonts, images and all other files are delivered by our own website, so viewing the page doesn't connect your browser to third parties such as Google.

4. YouTube videos

We show our trailers using YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos use YouTube's privacy-enhanced mode (youtube-nocookie.com) and only load when you press play. Until then, no data is sent to YouTube.

When you press play, your browser connects to YouTube's servers. YouTube receives your IP address, information about your browser and device, and which video you're watching. YouTube can also store information on your device, for example in cookies or local storage, and link what you watch to your Google account if you're signed in.

Google may also process this data in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR).

The legal basis is your consent, which you give by pressing play (Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act, TDDDG). You can withdraw your consent at any time with effect for the future by deleting the data YouTube has stored in your browser, for example in your browser's settings for cookies and site data.

You can find more information in the Google Privacy Policy.

5. When you contact us

If you email us, we process your email address, your name if you give it, and the content of your message so we can answer you. If your message relates to a purchase or another contract, the legal basis is Art. 6(1)(b) GDPR. Otherwise, it's our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

We delete your message once your request has been fully dealt with, unless we're legally required to keep it for longer, for example under commercial or tax law.

6. Links to stores, social media and our press kit

This website links to external services such as Steam, the Nintendo eShop, the Xbox Store, Discord, YouTube, Instagram, TikTok, X, Bluesky, Twitch, LinkedIn and our press kit on Notion. These are simple links: no data is sent to these services until you click one. Once you're on their site, the privacy policy of the respective provider applies.

Our links to Steam include campaign tags (UTM parameters) naming this website or the ad campaign that brought you here. These tags don't contain any personal data. Steam uses them to show us summary statistics, such as how many wishlists a campaign led to, and we can't see who clicked.

7. Your rights

You have the right to:

get information about the personal data we process about you (Art. 15 GDPR)
have incorrect data corrected (Art. 16 GDPR)
have your data deleted (Art. 17 GDPR)
have the processing of your data restricted (Art. 18 GDPR)
receive your data in a structured, commonly used and machine-readable format (Art. 20 GDPR)
withdraw any consent you've given at any time, with effect for the future (Art. 7(3) GDPR)

To exercise any of these rights, email us at info@cosmicstag.com.

Right to object

Where we process your data based on our legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing your data, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the EU country where you live. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin, datenschutz-berlin.de.

8. Changes to this policy

We update this policy whenever our website or the legal requirements change. The current version is always available on this page.