Privacy policy

Effective September 23, 2026

The German version of this policy is authoritative.

1. Controller

The controller for data processing on this website is Sebastian Grunow, prodigy.solutions. The postal address and contact details are in the legal notice. You can reach us at info@prodigy.solutions.

2. In brief

This website sets no cookies, uses no analytics or tracking tools and loads nothing from third-party servers. Fonts and icons are served from our own server.

3. Hosting and server logs

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. When you visit it, the hosting provider processes technically necessary data in server log files: IP address, date and time of the request, the page requested, the amount of data transferred, the referrer URL, and browser and operating system.

This processing is necessary to deliver the website and keep it secure and stable. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after 90 days. A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

4. Contact by email

If you contact us by email, we process the information you provide (such as your name, email address and the content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps, and Art. 6(1)(f) GDPR otherwise. We delete the data once it is no longer needed for this purpose and no statutory retention obligations apply.

5. Booking a call

To book an intro call, we link to meetergo GmbH, Hauptstrasse 44, 40789 Monheim am Rhein. Data is only transferred to that provider once you follow the link, and its privacy policy applies there. The provider is based in Germany; its privacy policy lists server locations and sub-processors. A data processing agreement under Art. 28 GDPR is in place with the provider. We process the details you enter when booking to prepare and hold the meeting, on the basis of Art. 6(1)(b) GDPR.

6. Games newsletter and play test

Using the "Games newsletter" and "Play test for Vial & Error" forms, you can sign up with your email address (for the play test: the email address of your Google account) for news about our games and for access to the internal play test. The forms and the sending of the emails are handled by Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany; parent company Brevo SAS, France). Data is only transferred to Brevo once you follow the link to the form, and Brevo's privacy policy applies there. A data processing agreement under Art. 28 GDPR is in place with Brevo.

We process your email address and, at confirmation, technical data (time, IP address) as proof of your consent. Sign-up uses a double opt-in: the address is only added to the list after you click the confirmation link in the email. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for example via the unsubscribe link in every email or by writing to info@prodigy.solutions.

After you confirm, your email address is passed to a service we run on our own server, which notifies us. We then add the address to the game's tester list in the Google Play Console. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company Google LLC, USA) is therefore a recipient and uses it to grant you access to the play test. This disclosure is necessary for taking part in the play test (Art. 6(1)(a) GDPR). A transfer to the USA relies on the EU-US adequacy decision (Data Privacy Framework); Google's privacy policy applies. The data is deleted once you unsubscribe or the purpose ceases.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). To exercise them, write to info@prodigy.solutions.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.