1. Who is responsible for your data
This website and the mobile application Punishments Generator are published under the brand NextPlay Studios. The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Lorenz Philipp Zoulek
An der Hachinger Haid 6d
82008 Unterhaching
Germany
Email for privacy inquiries: supportnextplaystudios@gmail.com
Phone: [phone number]
2. Scope of this policy
This policy explains how data is handled in two places:
- this website, including the support and contact form, and
- the app Punishments Generator for iOS and Android, including future apps published under the NextPlay Studios brand.
It does not cover the Apple App Store or Google Play. Apple and Google process data under their own privacy policies when you download, install or open an app.
3. Data processed on this website
Contact and support form
If you send us a message, we process your email address, the selected subject, your message and, if you provide it, your name. The message is stored in the website's database and sent to the studio inbox so that it can be answered. Required fields are your email address, the subject and the message; the name is optional.
Purpose: answering your request. Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries).
Hosting and server data
[the hosting provider, and which server data it records (for example IP address, request time, browser type) and for how long]
Cookies, analytics, advertising
The website as built contains no advertising, analytics, tracking or social media scripts and sets no cookies for those purposes. [confirm that the hosting environment does not set additional cookies, and document any cookie that is added later]
There is no user account, no login and no newsletter on this website.
4. Data processed in the Punishments Generator app
The operator states that Punishments Generator does not require an account and does not ask for personal details such as your name, email address or location.
[verify this against the final published build and every SDK included in it before the policy is treated as final]
[whether any data is stored on your device (for example settings or favourites) and whether it leaves the device]
Permissions
[list the device permissions the app requests (for example push notifications, camera, photo library) and what each one is used for]
Purchases
The operator states that the app contains no in-app purchases and no subscriptions. [confirm before publication]
5. Analytics, advertising and third-party services
[list every third-party service used by the app or the website, for example crash reporting, analytics, advertising networks, push notification providers or cloud databases, together with the provider, its location and a link to its privacy policy]
If no such services are used, state explicitly: “No analytics, advertising or crash reporting SDKs are integrated.”
We do not sell personal data and we do not share data for advertising purposes.
6. Hosting and service providers
This website is hosted on a cloud platform and support messages are delivered by email. These providers process data on our behalf as processors under Art. 28 GDPR.
[name of the hosting provider and its data processing agreement]
[name of the email provider used to receive support messages]
7. How long data is kept
Support and contact messages are kept only as long as needed to handle the request and any follow-up questions.
[concrete retention period for support messages (for example: deleted 12 months after the last reply)]
Data that is required by law to be kept for a longer period is retained for the legally required period and then deleted.
8. Your rights
Under the GDPR you have the right to:
- request information about the data processed about you (Art. 15 GDPR),
- request correction of inaccurate data (Art. 16 GDPR),
- request deletion of your data (Art. 17 GDPR),
- request restriction of processing (Art. 18 GDPR),
- receive your data in a portable format (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21 GDPR),
- withdraw a consent you have given at any time with effect for the future.
To exercise any of these rights, write to supportnextplaystudios@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the operator's place of business is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
[confirm the competent supervisory authority]
9. Security measures
This website is served exclusively over an encrypted HTTPS connection. Access to stored support messages is restricted to the operator, and administrative access is protected by authentication. We keep the amount of collected data as small as possible.
[describe further technical and organisational measures if required (for example backup strategy, access control list)]
10. Children
Our apps are intended for a general audience and are not directed at children. We do not knowingly collect personal data from children.
[age rating of the app as published in the stores]
11. Changes to this policy
This policy is updated whenever the apps or the website change, or the legal situation requires it. The version published on this page is the current one; the date of the last update is shown at the top of the page.
Last updated: 9 November 2026. [update this date with every change]
12. Contact for privacy questions
For any question about this policy, or to exercise your rights, contact supportnextplaystudios@gmail.com. You can also use the support form and select “Privacy inquiry”.