The controller responsible for data processing on this website is:
Power of the Cookie, owner Moritz Mantel
Ringstraße 53, 76355 Weingarten, Germany
Email: cookie@thepowerofthecookie.gg
We process personal data only to the extent necessary to provide a functional website and our content. This website informs about our studio and our games. It contains no contact forms, no analytics or tracking tools, and sets no cookies for analytics or marketing purposes.
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you access the pages, the host automatically collects and stores information in so-called server log files that your browser transmits. These typically include: IP address, date and time of access, the file requested, amount of data transferred, notification of successful access, browser type and version, operating system, and the previously visited page (referrer).
This processing is based on our legitimate interest in a technically flawless presentation and the security of our website pursuant to Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.
If you contact us by email, we process the data you provide (your email address and the content of your message) in order to handle your request. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding) or Art. 6(1)(b) GDPR where the request concerns the initiation or performance of a contract. We delete this data once it is no longer required for the purpose and no statutory retention obligations prevent deletion.
This website uses locally hosted fonts. No data is transferred to third parties (such as Google Fonts) for this purpose.
Under the GDPR you have, among others, the following rights:
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).
The following sections apply specifically to our mobile game Riftwardens (the "App"), available on the Google Play Store and the Apple App Store. They supplement the website policy above.
The controller responsible for data processing in the App is:
Power of the Cookie, owner Moritz Mantel
Ringstraße 53, 76355 Weingarten, Germany
Email: cookie@thepowerofthecookie.gg
1. Account and authentication data. When you first open the App, a guest account is created automatically so you can play immediately. You may optionally link your account to Sign in with Google or Sign in with Apple to secure your progress and play across devices. In that case we process a unique account identifier and, where you sign in via Google or Apple, the identifier those services provide to us. We do not receive or store your Google or Apple password. The legal basis is the performance of our contract with you (provision of the game) pursuant to Art. 6(1)(b) GDPR.
2. Game progress and profile data. To save your progress and enable online features, we process data such as your account identifier, chosen player name, game state and progress (for example level, resources, heroes, inventory), alliance membership, chat messages you send in the game, and leaderboard scores. The legal basis is Art. 6(1)(b) GDPR (performance of the contract).
3. In-app purchases. Purchases in the App (for example rune packages) are processed exclusively by the Google Play Store or the Apple App Store. We do not receive or store any payment information such as card numbers or bank details. We only receive confirmation from the store that a purchase was completed, so we can grant the purchased content to your account. Payment processing is governed by the privacy policies of Google and Apple respectively. The legal basis for granting purchased content is Art. 6(1)(b) GDPR.
4. Technical data. When the App connects to our servers, technical connection data (such as your device's IP address) is processed as a necessary part of establishing the connection. This is based on our legitimate interest in providing a functional and secure online service pursuant to Art. 6(1)(f) GDPR.
5. Advertising and analytics. The App contains no advertising and no third-party analytics or tracking tools. We do not create user profiles for marketing purposes.
The App's online features (account, progress synchronisation, alliances, chat, leaderboards) are provided using the Nakama game server, operated on our behalf as a managed service by Heroic Labs. The server infrastructure used for our App is located in the United States. This means your data described above is transferred to and stored on servers in the USA.
This transfer to a third country is safeguarded by the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR, agreed with the provider. You may request a copy of these safeguards using the contact details above. The legal basis for the transfer, which is necessary to provide the online features you use, is Art. 6(1)(b) GDPR in conjunction with Art. 44 et seq. GDPR.
The App is distributed through the Google Play Store (Google Ireland Ltd.) and the Apple App Store (Apple Distribution International Ltd.). When you download and use the App, these stores process data as independent controllers under their own privacy policies. We have no influence over this processing. Please refer to Google's and Apple's respective privacy policies for details.
The App is not directed at children. If we become aware that a child has provided us with personal data without appropriate consent, we will delete that data.
We store your account and game data for as long as your account exists. You can request deletion of your account and the associated data at any time by contacting us at cookie@thepowerofthecookie.gg. We will delete the data unless statutory retention obligations require otherwise. Purchase records may be retained where required by tax and commercial law.
The rights listed in section 6 above (access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with a supervisory authority) apply equally to data processed through the App.
Last updated: July 15, 2026