We collect as little as we can. There are no ad trackers, no third-party cookies and no tracking in our emails. This page explains, in plain English, what happens to your data when you read the site, create an account or subscribe to the newsletter.
Data controller
Peak State Entertainment GmbH
Am Werfersee 8, 83339 Chieming, Germany
team@peak-state.com
Responsible person: Albert Bozesan.
Hosting and server logs
Scrolletta runs on a server we operate at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit the site, the web server (Caddy) writes an access log entry containing technical data needed to deliver pages and to keep the site secure:
- your IP address
- the date and time of the request
- the page or file requested
- the HTTP response status
- your browser type and version
Access logs are kept for at most 14 days and are then deleted automatically. They are not combined with any other data source. Legal basis: our legitimate interest in operating a stable and secure website, Art. 6 (1) (f) GDPR.
Member account and newsletter signup
The site runs on Ghost, self-hosted on the same server. If you create a member account or sign up for the newsletter, Ghost stores:
- your email address
- your name, if you enter one
- the date your account was created
- your newsletter preference (subscribed or not)
Signing in works by magic link: you enter your email address, we send you a single-use link, and clicking it signs you in. There is no password. That click is also the confirmation of your newsletter signup, so the signup is double opt-in: nobody is added to the list without clicking a link sent to their own inbox.
While you are signed in, Ghost sets two cookies, ghost-members-ssr and ghost-members-ssr.sig. They exist only to keep you signed in. They are strictly necessary for a service you asked for, so no consent banner is required for them. We set no other cookies and use none for tracking or advertising.
Legal basis: performance of a contract, Art. 6 (1) (b) GDPR, for the account itself; your consent, Art. 6 (1) (a) GDPR, for the newsletter.
Newsletter delivery
The newsletter is sent by Listmonk and Postfix, both self-hosted on the same server as the site. No third-party email service is involved. For delivery, Listmonk stores your email address, your name if you gave one, your subscription status, an internal subscriber id and any bounce records returned by your mail provider.
We do not track opens or clicks. Our emails contain no tracking pixels and no rewritten, tracked links. We cannot tell whether you opened an issue or which links you followed.
The sender and bounce mailboxes for scrolletta.com are hosted at Hetzner Webhosting in Germany. Bounce messages, meaning automatic replies from mail servers about undeliverable addresses, are read from that mailbox so that dead addresses can be removed from the list.
Every email carries an unsubscribe link, and you can also change the setting in your account. Both take effect immediately.
Web analytics
We use Umami, self-hosted by us at stats.scrolletta.com on the same server. Umami is cookieless: it sets no cookies and stores no personal identifiers. IP addresses are not retained. No analytics data is shared with any third party, and none of it leaves our server.
Because nothing is stored on your device and no personal identifiers are kept, no consent banner is required. We disclose the measurement here for transparency.
Processors
| Processor | Country | What they do | Agreement |
|---|---|---|---|
| Hetzner Online GmbH | Germany | Hosting of our server, mail and DNS | Data processing agreement in place |
There are no other processors, and no data is transferred outside the EU.
Backups and retention
The site and newsletter databases are backed up daily to the same server and kept for 14 days. Older backups are pruned automatically. Account data stays until you delete your account; once the live record is deleted, copies fall out of the rolling backup window within two weeks.
Fonts and scripts
All typefaces and scripts used by the site are self-hosted and served from our own server. Nothing is loaded from Google Fonts, from a content delivery network or from any other third party, so visiting the site does not tell anyone else that you were here.
Comments
The site has no comment function, so no comment data is collected.
Age requirement
You must be at least 16 years old to create an account or subscribe to the newsletter.
Your rights
Under the GDPR you have the right to:
- request access to the personal data we hold about you (Art. 15)
- request correction of inaccurate data (Art. 16)
- request erasure (Art. 17)
- request restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw your consent at any time (Art. 7 (3)), without affecting processing already carried out
- lodge a complaint with a supervisory authority (Art. 77), in Germany the data protection authority of the federal state where you live
To exercise any of these, write to team@peak-state.com.
Account deletion
To delete your account, email news@scrolletta.com from the address the account uses. The account and its data are deleted within 30 days, and backup copies fall out of the rolling window as described above.
No Data Protection Officer
We are not legally required to designate a Data Protection Officer; for any data protection question, write to the controller named above.
Changes to this policy
We may update this policy as the site evolves. Each version is identified by its date. If a change materially affects your consent, we will ask you to confirm it again.
Current version: 2026-09-05.