TRANSPARENCY & CONTACT
Website privacy
Last updated: 27 September 2026
Controller and contact
The controller responsible for personal data processing on this website is Jeruyaan Yogarajah, Birkenweg 34, 42929 Wermelskirchen, Germany, using the studio name JTSR Bits and Bytes Lab. For privacy enquiries, contact contact@jtsr-lab.com.
Scope
This notice covers visits to the jtsr-lab.com studio website and enquiries sent to our contact mailbox. Separate app privacy information, linked below, explains local data processing in Luma & Leaves. The game’s offline design does not mean that website visits or emails involve no personal data processing.
Providing and protecting the website
When you request a page, your browser sends the web server information including your IP address, the requested address and technical request details. The server needs connection data to deliver the page. We process this information to provide the website, diagnose faults and prevent abuse under Article 6(1)(f) GDPR. Our legitimate interest is a functioning and secure studio website. The connection is encrypted using HTTPS.
Hosting and server logs
The website runs on the operator’s own Raspberry Pi using Apache. We do not retain a continuous access log for this website. Error logs may include the time, error message, IP address, requested address and technical connection details. The operator and authorised administrators have access. The website’s error log rotates daily; we keep the current file and no more than seven daily archives. General server errors may also appear in Apache’s system-wide error log. This keeps up to 14 archive files, rotating daily when entries exist and deleting archives when that number is exceeded. Excerpts needed to investigate a specific security incident may be retained until the investigation ends or for the necessary protection of legal claims. Release backups created for this website contain static website files and configuration, without visitor logs or emails. IONOS manages the domain and DNS records; page content is delivered by the operator’s own server.
Cookies, browser storage and external content
The current website code sets no cookies and uses neither localStorage nor sessionStorage. It has no analytics, advertising or login services, fingerprinting or Firebase. It uses device fonts; images, CSS and JavaScript are supplied with the website. There are no embedded videos, maps or social media widgets. Automatic language selection reads your browser language; the selected language then appears in the URL and is not persistently stored on your device.
Contact by email
If you write to us, we process your email address, any name you provide, your message, attachments and technical transmission data as needed to handle and answer your enquiry. General enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is appropriate communication and support. Where an enquiry concerns a contract with you or pre-contractual steps you request, Article 6(1)(b) GDPR applies. Article 6(1)(c) GDPR applies only where a specific legal obligation exists. Sending an enquiry is not treated as blanket consent.
Information you need to provide
Contacting us is voluntary. To respond, we need a reachable address and enough information about the issue; without these, we may be unable to handle your request. A device model, Android and app version, and a description of the issue usually suffice for a bug report. Screenshots are optional. Remove private information and do not send passwords, identity documents or complete private game saves. An email link opens your own email application; the website has no contact form.
Email provider and recipients
The contact mailbox contact@jtsr-lab.com uses Mail Basic 1 from IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes mailbox data on our behalf under a data processing agreement included in the contract. For Mail Basic, IONOS lists 1&1 Mail & Media GmbH for email services and Open-Xchange GmbH for webmail as subprocessors in Germany. The operator handles enquiries personally and confirms that there is no active connection to Yahoo Mail or another email app and no forwarding to another service.
IONOS data processing agreement (German) · IONOS subprocessors (PDF, German)
Email retention and deletion
We delete resolved support enquiries and their attachments no later than six months after closure, including copies we manage and the trash folder. If specific data remains necessary for a concrete purpose or a statutory obligation, we limit further retention accordingly and delete it afterwards. Automatic deletion after six months is not configured; the operator implements this policy personally. IONOS specifies deletion of email data within seven days of the customer’s deletion action and retention of its own email logs for no more than 28 days after creation.
IONOS service description and retention periods (PDF, German)
Processing outside the European Economic Area
The website embeds no external analytics or media services. For Mail Basic, IONOS lists the subprocessors in Germany named above. Its data processing agreement generally provides for processing in the EU or European Economic Area. Where a transfer to another country is exceptionally required to provide the service, the agreement requires IONOS to comply with Articles 44 et seq. GDPR. This is not a blanket assurance that every technical processing step takes place exclusively in Germany. The agreement and the list of subprocessors and safeguards are linked above. You may also request information about safeguards applicable to your data at contact@jtsr-lab.com.
Testing and automated decisions
This website currently has no tester registration, public sign-up, newsletter or active participation link. Any Google Play standard reports concern app distribution and are not visitor statistics for this website. Any later registration or collection of test reports will be explained separately in advance. The current website code does not profile you or make automated decisions with legal or similarly significant effects on you.
Access, rectification, erasure and restriction
Subject to the applicable legal conditions, you may request access to your personal data and a copy (Article 15 GDPR), correction of inaccurate data or completion of incomplete data (Article 16), erasure (Article 17), or restriction of processing (Article 18). Erasure may be limited, in particular, by necessary statutory retention or the protection of legal claims. Contact contact@jtsr-lab.com to exercise these rights.
Portability and withdrawal of consent
Subject to its conditions, Article 20 GDPR gives you the right to receive data you provided in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller. This applies to automated processing based on consent or a contract; server logs based solely on legitimate interests are outside that scope. Where processing relies on your consent, you may withdraw it at any time for the future. This does not affect the lawfulness of earlier processing. The current website code does not request consent.
Your right to object
You may object at any time to processing under Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21 GDPR), for example by emailing contact@jtsr-lab.com. We may then continue processing the affected data only if we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or if the processing serves to establish, exercise or defend legal claims. You may object to direct marketing at any time without such particular grounds; it is not currently part of this website.
Complaints to a supervisory authority
If you suspect a data protection violation, Article 77 GDPR allows you to complain to a supervisory authority, particularly where you habitually live, work or believe the infringement occurred. For this private studio website operated from North Rhine-Westphalia, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW) is the likely competent authority. You do not have to contact us before making a complaint.