Privacy.

The controller responsible for data processing on this website is:

Full details can be found in the imprint.

When our website is accessed, our hosting provider automatically captures information and stores it in log files. This data cannot be assigned to specific persons and is not combined with other data sources.

Specifically, we record:

• IP address of the requesting device
• Date and time of the request
• Amount of data transferred and HTTP status code
• Page accessed (URL)
• Referrer URL (previously visited page)
• Browser, operating system and their versions

Purpose

Providing the website, technical stability and security

Legal basis

Art. 6 (1) lit. f GDPR (legitimate interest)

Retention

30 days at most, then automatic deletion

Hosting provider

Vercel Inc.
440 N Barranca Ave #4133, Covina, CA 91723, USA

Our website currently uses no tracking cookies, no analytics cookies and no marketing cookies.

If strictly necessary cookies (e.g. session cookies) are used, they serve solely the operation of the site. The legal basis is Art. 6 (1) lit. f GDPR. Consent is not required under § 25 (2) no. 2 TDDDG.

A small, technically necessary cookie called „cyber-arena-locale“ is set to remember your chosen language (EN / DE) so you don't get redirected on every visit. It contains nothing but the two-letter locale code, no tracking ID.

On this website you can sign up for the Cyber Arena waitlist. We only process the data you provide yourself — primarily your email address.

Data collected

Email address

Purpose

Sending product updates and announcements about Cyber Arena, the Football Manager and upcoming AI tools

Legal basis

Art. 6 (1) lit. a GDPR (consent)

Retention

Until consent is withdrawn

Withdrawal

Anytime via the unsubscribe link in every email or by writing to contact@c-arena.com

The signup itself is logged (timestamp, submitted email, IP address, user agent, referrer) in order to provide evidence under Art. 7 (1) GDPR and to detect waitlist abuse.

After a successful signup you automatically receive a confirmation email with an unsubscribe link. You can opt out anytime via this link, via the List-Unsubscribe header in your mail client, or by writing to contact@c-arena.com.

Storage location. Waitlist entries are stored in a password-protected Google Sheet (Google Workspace, EU-based servers) and/or as a JSON log file on our server. Access is granted exclusively through an internal, password-protected admin interface (HTTPS, HttpOnly session cookies) and is strictly limited to the operator or named authorised persons.

Email delivery. For the technical delivery of confirmation and notification emails, we use the service Resend (Resend.com, Inc., USA). Your email address is transmitted to Resend in the process. Resend is certified under the EU-US Data Privacy Framework. A data processing agreement (AVV) under Art. 28 GDPR is in place.

To protect our waitlist form against automated requests (bots, spam) we use Google reCAPTCHA v3 from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA analyses user behaviour on the form and produces a risk score that is server-side checked against bot attacks.

Data collected

IP address, browser properties, movement and click patterns, cookie data (by Google)

Purpose

Protection against automated spam and abuse

Legal basis

Art. 6 (1) lit. f GDPR (legitimate interest in protecting the service)

Data recipient

Google Ireland Limited (IE) / Google LLC (USA)

Third-country transfer

EU-US Data Privacy Framework (Google is certified)

The reCAPTCHA script is only loaded on the first click into the email field of the waitlist form — not when the homepage first loads. More information can be found in Google's Privacy Policy and Terms of Service.

If you contact us by email, your details (email address, name, content of the message) are stored with us in order to respond to your request. We do not pass this data on without your consent.

Legal basis

Art. 6 (1) lit. b GDPR (pre-contractual measures) or lit. f GDPR (legitimate interest in handling the inquiry)

Retention

Until your request has been completed, at the latest until the expiry of any statutory retention periods

We use the Google Fonts „Inter“, „Space Grotesk“ and „JetBrains Mono“. These are served locally from our website server (self-hosting via next/font). When the website is accessed, no connection to Google or other third parties is established, no IP addresses are transmitted to Google.

We do not use external tracking, analytics or advertising services (e.g. Google Analytics, Meta Pixel, Hotjar). The only functional third parties we use are Google reCAPTCHA and Resend — each only in the context of waitlist signups. Details in sections 04 and 05.

Asset hosting (screenshots, mockups). Project screenshots and mockups shown on this site are either served from the same server as the website itself or via Vercel Blob (Vercel Inc., USA). These are editorial assets without personal context — when accessed, no additional personal data beyond what the technical hosting already produces is transmitted to Vercel. Vercel is certified under the EU-US Data Privacy Framework; a data processing agreement (AVV) under Art. 28 GDPR is in place.

This website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar starts with „https://“ and the lock icon is displayed. Data you transmit to us cannot then be read by third parties.

You have the right at any time to:

• Access the data we process about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of your consent (Art. 7 (3) GDPR) — with effect for the future

To exercise your rights, a simple email to contact@c-arena.com is sufficient.

You have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority about our processing of personal data — without prejudice to any other administrative or judicial remedy.

An overview of the German supervisory authorities can be found at the Federal Commissioner for Data Protection and Freedom of Information (bfdi.bund.de).

We take appropriate technical and organisational measures (Art. 32 GDPR) to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously adapted to the latest technological developments.

We reserve the right to adapt this privacy statement so that it always meets the latest legal requirements or to implement changes to our services — for example when introducing new features. The version current at the time of your visit applies.