Website privacy

Website privacy

This notice covers visits to oleksiy-havryliuk.de and correspondence with its developer. Processing inside Quiet Camp is covered by the separate game privacy policy.

Last updated:

privacy@oleksiy-havryliuk.de
In this notice
  1. The person responsible
  2. Delivering the website
  3. Cookies, analytics and external content
  4. Messages and privacy requests
  5. Recipients and transfers
  6. Retention and deletion
  7. Your rights
  8. Security and changes

Identity confirmed · hosting and retention verification pending

Remaining operational checks

The developer has confirmed legal/public name spellings, postal address and working privacy/support mailboxes. The actual hosting/mail contracts, log retention, transfer safeguards and practical correspondence deletion still require verification. This notice must not be represented as fully cleared until those account-specific checks are complete.

01The person responsible

The controller is Oleksii Havryliuk, publicly known as Oleksiy Havryliuk, an independent developer in Germany trading as Kruty1918 Games. The Ukrainian full name is Олексій Гаврилюк Олександрович. The developer confirms the passport/Google Play spelling Oleksii Havryliuk and the public/German spelling Oleksiy Havryliuk. Kruty1918 Games is a brand, not a separate registered company.

Postal address: Kapitänspromenade 6, 23966 Wismar, Germany. Privacy: privacy@oleksiy-havryliuk.de. See the legal notice.

02Delivering the website

Your browser must send connection and request information to the hosting service to retrieve these pages and images. This includes the IP address, requested URL, request time and browser or protocol information transmitted with the request. The current domain is served through Vercel. STRATO is the domain registrar; that does not establish who hosts the mailboxes.

The purpose is to deliver the requested pages and protect the website against misuse and technical failures. The proposed legal basis is Article 6(1)(f) GDPR: the operator’s legitimate interest in running a functional, secure public website, limited to necessary connection and security processing. The actual Vercel account logging settings and contractual arrangements must still be checked; no fixed log-retention period has been verified.

03Cookies, analytics and external content

The website code sets no cookies, uses no localStorage or other persistent browser storage, and includes no visitor analytics, advertising, external fonts or embedded social content. All page assets are served from this domain. The optional image viewer keeps its current image only in memory; page text, navigation and original image links work without JavaScript.

There is no website tracking-consent switch because no optional website tracking is implemented. This does not control consent inside the game. When you follow a link to GitHub, the game guide, another project site or a provider’s documents, your browser connects to that external service under its own privacy terms.

04Messages and privacy requests

When you email the developer, the email address, message, attachments and correspondence metadata are processed to answer the request. General messages go to oleksiy.havryliuk@gmail.com, using Google’s Gmail service. Quiet Camp support uses support@oleksiy-havryliuk.de, and privacy requests use privacy@oleksiy-havryliuk.de. The developer confirms these two domain mailboxes are working and personally managed. Public MX records identify STRATO mail infrastructure; account-specific contractual and retention settings remain to be checked. Email links open your mail application; there is no contact form.

Ordinary enquiries are handled under Article 6(1)(f) GDPR, for the legitimate interest in responding to correspondence. Article 6(1)(b) applies where a message is necessary for a contract or steps you request before a contract. Handling statutory privacy rights and applicable legal duties relies on Article 6(1)(c). Please include only information needed for the request.

05Recipients and transfers

Recipients are the developer, the hosting provider and the email provider needed to handle the communication. Hosting or email processing may involve providers or subprocessors outside the EEA. No sale of visitor data or advertising disclosure is implemented by the website code.

Vercel publishes a privacy policy, a data processing addendum and a subprocessor list. Google explains its email-service data handling in its privacy policy. The operator must verify the actual contracting entities, applicable agreements, processing locations and transfer safeguards, such as applicable standard contractual clauses or another lawful mechanism. Publication of a provider’s terms alone is not proof that the operator has completed that verification.

06Retention and deletion

The website does not maintain a visitor account or a separate visitor database. Necessary request processing and any host logs are subject to the actual hosting setup; its log and backup retention has not been verified. No invented retention limit is promised.

The intended correspondence schedule is deletion 12 months after case closure, unless a specific legal duty or necessary retention for legal claims applies. Implementation across the actual mailboxes and backups still needs confirmation. To request deletion, write to the privacy address and identify the relevant correspondence. An email address alone may not identify a hosting record; proportionate verification may be needed. Do not send an identity document by default.

07Your rights

Depending on the applicable conditions, you may request access, correction, erasure, restriction and data portability, and object to processing based on legitimate interests. If future processing relies on consent, you may withdraw that consent without affecting earlier lawful processing; reading this notice is not consent.

Contact privacy@oleksiy-havryliuk.de. Requests are normally answered within one month; any legally permitted extension will be explained. You may complain to a supervisory authority, particularly where you live, work or believe a breach occurred. The German authority directory lists the state authorities.

08Security and changes

The current domain uses HTTPS. The prepared website uses local assets, restrictive content-security headers and read-only static pages. These measures reduce exposure but do not guarantee absolute security. Account access, hosting settings and mailbox security also require the operator’s ongoing attention.

Material changes to hosting, communication or tracking must be reflected in this notice and its translations. The updated date identifies the current version. For processing inside the game, read the Quiet Camp privacy policy.