Broken Pony Studios

We take the protection of your personal data seriously. This Unified Privacy Policy explains how Broken Pony Studios UG (haftungsbeschränkt) collects, processes, and protects your data across our entire ecosystem: our Website, PC Games (Steam), Mobile Apps, and Business Software (SaaS).

Data Controller

Broken Pony Studios UG (haftungsbeschränkt)
Zollernweg 3, 78628 Rottweil, Germany
business@brokenponystudios.com

1. Website & Communication

When you visit brokenponystudios.com, we apply a "No Bloat" philosophy. We do not use third-party analytics pixels (like Google Analytics) or advertising trackers on our website.

A. Server Log Files

Our servers automatically collect technical data to ensure stability and security (Art. 6(1)(f) GDPR). This includes:

IP Address (anonymized where possible)
Browser type and operating system
Time of access and referrer URL

B. Contact Forms ("Send Scroll")

When you use our contact form, we process the data you enter (Name, Email, Subject, Message) solely to answer your request (Art. 6(1)(b) GDPR). This data is transmitted securely via SMTP and stored in our business email archives.

C. Cookies

We only use strictly necessary cookies for technical operation. See our Cookie Policy for details.

2. PC & Console Games

Applies to: Pumpkin Hop, Nodes of Ruin

When you play our games on platforms like Steam, we process minimal data to provide gameplay features.

Steamworks Data

We use Valve's Steamworks API to handle authentication, achievements, and cloud saves. We do not see your credit card details; all payments are handled by Valve Corporation.

Telemetry & Bugs

To fix crashes, our games may automatically send anonymous crash reports (e.g., Unity Analytics) containing your hardware specs and stack trace. This helps us patch the game.

3. Mobile Games

Applies to: Rune Weaver Lines

Our free-to-play mobile games may use third-party services to support development costs.

A. Advertising (AdMob)

We use Google AdMob to display ads. AdMob may use your device's Advertising ID (GAID/IDFA) to show personalized ads based on your interests.

Legal Basis: Consent (asked upon first launch via CMP).
Opt-Out: You can reset your Advertising ID in your phone settings (Settings > Google > Ads).

B. Google Play Services

We use Google Play Services for leaderboards, achievements, and cloud saves. This is governed by the Google Privacy Policy.

4. Business Software (SaaS)

Applies to: Belegtresor, Custom Client Solutions

For our business applications (e.g., Belegtresor), we act as a Data Processor for your business data.

A. Account & Hosting

We use industry-standard secure cloud providers to host your data:

Authentication: Google Firebase (Secure Login).
Database & Storage: Microsoft Azure (Encrypted at rest).

B. Invoicing Data

If you use Belegtresor to generate invoices (ZUGFeRD), we store the data you input solely for the purpose of generating and archiving the document for you (Contractual Necessity, Art. 6(1)(b)). We do not sell this data.

5. Merchandise

When you purchase physical goods (e.g., Books, Figures), we may share your shipping address with our Print-on-Demand partners solely to fulfill your order. We do not store payment details; transactions are processed by the merchant of record (e.g., Stripe, PayPal, or the Store Platform).

6. Your Rights (GDPR)

Regardless of which service you use, you have the following rights:

Right to Access: Request a copy of your stored data.
Right to Rectification: Correct wrong information.
Right to Erasure: Request deletion of your account/data.
Right to Restriction: Pause data processing.

To exercise these rights, please email us at business@brokenponystudios.com. You also have the right to lodge a complaint with a supervisory authority (e.g., LfDI Baden-Württemberg).

Children's Privacy

Our Services are not directed to persons under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that your child has provided us with personal information, please contact us so we can delete it.