Privacy Policy
Version: August 2026 · revision of 22 August 2026 (two-click YouTube solution)
This website is built to need as little of your data as possible: it sets no cookies, loads nothing from third-party domains at page load and runs no analytics.
This English version is provided for convenience; the German version is authoritative.
1. Controller within the meaning of the GDPR
SimulatedFlow UG (haftungsbeschränkt)
Zeller Straße 37 A
77833 Ottersweier
Germany
Represented by: Silvan Teufel
Email: info@teufel-engineering.com
2. General information on data processing
We process users’ personal data only to the extent necessary to provide a functional website and our content. The legal bases are, in particular, Art. 6(1) GDPR (point (b): performance of a contract or pre-contractual measures; point (f): legitimate interest) and — where applicable — consent pursuant to Art. 6(1)(a) GDPR.
Personal data is deleted as soon as the purpose of its storage no longer applies or statutory retention periods expire.
3. Access data and server log files
Each time this website is accessed, our hosting provider automatically collects information that your browser transmits and stores it in so-called server log files. This typically includes: the (truncated) IP address, date and time of access, name of the requested file, volume of data transferred, notice of successful retrieval, browser type and version, operating system and the previously visited page (referrer).
The purpose of this processing is the technical operation of the site, ensuring its security and stability, and analysing system errors. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).
The log files are kept for a limited period for security reasons and then deleted (retention depends on the hosting provider, typically a few days).
4. Hosting
This website is operated on a server of DigitalOcean, LLC (105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA) in a data centre in Frankfurt am Main, Germany. The personal data arising in the process (in particular the access data described above) is processed on this server.
A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. As DigitalOcean is a US company, any transfer of data to the USA takes place on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR).
5. Fonts (self-hosted)
For a consistent appearance we use web fonts that are embedded locally from our own server (self-hosted). When you visit the pages, no connection to third-party servers — in particular not to Google Fonts — is established. Your IP address is not transmitted to third parties for this purpose.
6. Cookies and local storage
We use no cookies, no tracking, analytics or marketing services, and no
browser local storage either. Your preference for reduced motion and
animations is respected directly via the corresponding browser or
operating-system setting (prefers-reduced-motion); nothing is stored on
your device and nothing is transmitted to us for this.
7. Contact
If you contact us by email, we process the data you provide (e.g. email address, name, content of the message) solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (where the enquiry relates to entering into or performing a contract) or Art. 6(1)(f) GDPR. The data is deleted once it is no longer required for this purpose and no statutory retention obligations stand in the way.
8. Newsletter
Signing up for the newsletter is voluntary. We store your email address only once you have confirmed the sign-up via the link in the confirmation mail (double opt-in). We use the address exclusively for development updates. Legal basis: Art. 6(1)(a) GDPR — your consent, revocable at any time via the unsubscribe link in every mail or by a message to the contact details given under section 1.
9. External links and embedded content
When these pages are merely visited, no third-party content is loaded and no personal data is transferred to third parties.
9.1 YouTube video (two-click solution)
The homepage embeds a gameplay trailer from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The video is blocked by default. At first, only a preview image hosted on our own server is displayed; no connection to YouTube or Google is established at this point. Together with the preview image we inform you about which data is transferred when the video is loaded.
Only when you actively click the “Load YouTube content and accept” button is the YouTube player loaded. From that moment YouTube receives the information that you have accessed the page in question. The data transferred includes in particular your IP address as well as browser and device information. This data may also be transmitted to and processed on Google servers in the USA. Google is certified under the EU-US Data Privacy Framework; in addition, the transfer is based on the EU Standard Contractual Clauses (Art. 46 GDPR). If you are signed in to Google at the time, Google can associate the page view with your user account; you can prevent this by signing out beforehand.
The video is embedded in privacy-enhanced mode via the domain youtube-nocookie.com. In this mode, according to its own statements, YouTube does not set cookies for personalised advertising as long as you do not play the video. However, this does not completely rule out cookies or similar technologies being set once playback starts.
The legal basis for loading the video, for the associated access to information on your device and for the transfer of data to Google is solely your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) of the German TDDDG.
Voluntariness and revocation: consent is voluntary; you suffer no disadvantage without it — the website is fully usable without the video. You can revoke your consent at any time with effect for the future. As we do not store your decision, it applies to the current page view only: it is enough to reload or leave the page for the video to be blocked again. The lawfulness of the processing carried out up to the revocation remains unaffected. To have data already transmitted to Google deleted, please contact Google directly.
Further information on the handling of user data can be found in Google’s privacy policy .
9.2 Plain links to external platforms
Beyond that, this website contains plain links to external platforms (including Steam and YouTube). No automatic transfer of data to these providers takes place on our pages. Only when you click such a link and visit the respective site do that provider’s privacy terms apply, over which we have no influence.
10. Your rights as a data subject
With regard to the personal data concerning you, you have the following rights: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21). You may revoke consent you have given at any time with effect for the future.
To exercise your rights, an informal message to the contact details given under section 1 is sufficient.
11. Right to lodge a complaint with a supervisory authority
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW — the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
12. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser’s address bar.
13. Version and changes
We will update this privacy policy whenever changes to our data processing make it necessary. This privacy policy is dated August 2026.