Skip to content

Privacy

As of 13 October 2026. This is a courtesy translation; the German version is legally binding.

Protecting your personal data matters to me. Find Your Main is a private, non-commercial fan project. Here you can find out which data is processed when you visit this website, for what purpose and on what legal basis, and what rights you have. I keep data processing deliberately lean: analytics only runs with your consent, and fonts are not loaded from Google.

Controller

Benjamin Schey
Hofstelle 10
75050 Gemmingen
Germany

Email: findyourmain@pm.me

I have not appointed a data protection officer, as there is no legal obligation to do so.

Hosting and server log files

This website is hosted by Netlify, Inc., 101 2nd Street, Suite 1500, San Francisco, CA 94105, USA and delivered through its global content delivery network. When you visit the website, Netlify automatically processes data that your browser transmits (server log files):

  • IP address
  • date and time of access
  • page or file requested and amount of data transferred
  • referrer URL (the previously visited page)
  • browser type and version, operating system

This data is technically necessary to deliver the website, ensure its stability and security and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in providing the website securely and reliably. Netlify deletes the log files automatically after a short time.

Netlify processes the data under its Data Processing Addendum. Netlify is certified under the EU-US Data Privacy Framework, so an adequacy decision of the EU Commission applies to transfers to the USA (Art. 45 GDPR). More: netlify.com/privacy.

Fonts and images

Fonts, images and all other files are loaded directly from this website. There is no connection to third-party servers such as Google Fonts.

On your first visit, a cookie banner asks whether you want to allow optional features: saving your achievements, Wowhead tooltips and statistics with Google Analytics. Without your consent, none of this is stored or loaded, and no connection to Google or Wowhead is made.

Technically necessary are two cookies:

  • "cc_cookie" stores your choice in the cookie banner (decision and time) so the banner does not reappear on every page view. Lifetime: 6 months.
  • "i18n_redirected" stores the language (German or English) so you are not redirected again on every visit.

The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR (language) or Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent).

Withdrawing or changing consent: use the cookie icon at the bottom left or the "Cookie settings" link in the footer to change your choice at any time with effect for the future. When you withdraw consent, the related data is deleted.

Achievements (local storage)

For fun, you can collect achievements on this website, for example by viewing several class pages or completing the class quiz. Without consent, your achievements only last for the current visit. If you allow "Save achievements", they are stored in your browser's local storage (localStorage, entry "fym_achievements"): which achievements you earned and when, plus simple counters such as the number of random classes rolled. This data stays on your device and is not transferred to me or third parties.

The legal basis is your consent under § 25(1) TDDDG. You can withdraw it at any time in the cookie settings; the entry is then deleted. You can also remove it via your browser settings.

Google Tag Manager

If you have consented to statistics, I use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Tag Manager is a tool I use to embed and control services such as Google Analytics on the website. It does not set cookies itself, but your IP address is transmitted to Google when it loads. This may include a transfer to Google LLC in the USA.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without consent, Tag Manager is not loaded.

Google Analytics 4

With your consent, I use Google Analytics 4, a web analytics service from Google, to understand how the website is used and improve it. It records in particular:

  • pages viewed, time on page and scroll depth
  • use of features, such as battles started, quizzes completed, random rolls and achievements earned
  • where the visit came from (e.g. search engine or referring website)
  • technical information such as device type, browser, operating system and screen resolution
  • approximate location (country, region, city), derived from the IP address

Google Analytics 4 does not store full IP addresses: the IP address is only used to determine location and then discarded. To recognize returning visitors, Google Analytics sets the cookies "_ga" and "ga*" with a lifetime of 2 years. The data is processed in pseudonymous form and is not combined with your name. Google signals and personalized advertising features are disabled.

The data is processed on Google servers, including in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR). Google's data processing terms for Google advertising products apply. The data is deleted automatically after the retention period set in Google Analytics, at most 14 months.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you can withdraw at any time via the cookie settings. I also use Google Consent Mode, so Google services automatically follow your choice. More: policies.google.com/privacy.

Wowhead tooltips

Abilities in the texts are linked to the Wowhead database. These are simple links: only when you click one are you taken to Wowhead.

If you allow "Wowhead tooltips" in the cookie banner, I additionally load a script from Wowhead (wow.zamimg.com) that shows the original ability tooltip when you hover over a link. This transfers your IP address, browser information and the page you are viewing to Wowhead. Wowhead is operated by ZAM Network LLC (Fanbyte), 12777 West Jefferson Blvd, Building E, Los Angeles, CA 90066, USA. The data is processed in the USA. I cannot reliably determine whether ZAM Network is certified under the EU-US Data Privacy Framework; the transfer is therefore based on your explicit consent (Art. 49(1)(a) GDPR).

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without consent, the script is not loaded. You can withdraw your consent at any time in the cookie settings.

Contact by email

If you send me an email, I process your information (email address, possibly your name and the content of your message) to reply to you. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in answering your message. I delete your message once it has been dealt with, at the latest after 12 months without further contact.

My inbox is hosted by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. An adequacy decision of the EU Commission applies to Switzerland (Art. 45 GDPR).

This website contains links to other websites. These are simple links: only when you click one are you taken to the respective site, and its operator receives data from you. The privacy policy of the respective provider applies there.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by "https://" in your browser's address bar.

Your rights

You have the following rights regarding your personal data:

  • access to stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to findyourmain@pm.me is enough to exercise your rights.

Right to object under Art. 21 GDPR

If I process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation. I will then no longer process your data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR. The authority responsible for me is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Website: baden-wuerttemberg.datenschutz.de

Obligation to provide data and automated decisions

You are neither legally nor contractually obliged to provide me with personal data. No automated decision-making, including profiling under Art. 22 GDPR, takes place.

Changes to this privacy policy

I update this privacy policy when the website, the services used or the legal situation change. The version published here applies; the date at the top shows the current status.