Privacy
Last updated: 30 September 2026
This privacy notice explains how we process personal data when you visit engamo.studio or contact us.
1. Controller and contact
The controller responsible for processing personal data on this website is:
Sieger GbR · Engamo Studio
Represented by Michael Sieger and Carola Sieger
Grund 3
42653 Solingen
Germany
Email: support@engamo.studio
Telephone: +49 (0)212 2531309-3
You can also use this email address for privacy enquiries.
2. Scope
This notice covers the German and English studio website at engamo.studio. We introduce games, apps and creative tools and provide ways to contact us. The public website currently has no customer accounts, ordering or payment facilities, contact form or newsletter subscription.
Using Cuddles Playground, Make a Life: Together, Meine Farbwelt, the der-künstlershop app, Cayow or Splitterkristall involves separate processing. You can find each app’s privacy information on its product page.
3. Website access and server logs
When you open a page, your browser sends information including your IP address, the requested address, the time of access and browser details. Depending on your browser, this may also include operating system details and the previously visited page (referrer). The web server creates access and error logs, which may also contain response codes and the amount of data transferred.
We use this information to deliver the website, investigate errors and protect it against misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interests in providing a secure and reliable service. The website cannot be delivered without the necessary connection data.
Website logs are rotated daily. Plesk retains seven archived versions of each log. This is rotation-based retention, rather than deletion exactly seven days after each event. Where a specific security incident occurs, necessary evidence may be retained for longer while it is needed for investigation or legal action. This rule covers website access and error logs; it is not a general retention period for all server system and email logs.
4. Hosting, backups and server statistics
The website and our email and support systems run on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in Falkenstein, Germany. Technical services are provided by SiMa Design – Michael Sieger, Grund 3, 42653 Solingen, Germany. Sieger GbR remains the controller.
Data processing agreements are in place with SiMa Design and between SiMa Design and Hetzner. These service providers may access the data necessary for operation, maintenance and support within the scope of their services. Within our organisation, access is limited to people who need it for their work. See Hetzner’s privacy information for further information about the provider.
Backups
A Hetzner Storage Box in Falkenstein, Germany, is configured for daily server backups. The backup plan covers configuration, files, databases and email and provides for retention of one week. Website logs are excluded from this full backup. Backups allow recovery after data loss or service interruptions. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in secure, reliable operation. Deletion from a live system and the expiry of a backup copy are separate processes.
Server statistics
AWStats is configured in Plesk for engamo.studio. It analyses server logs, including requested pages, access counts, response errors, and browser and operating system details. The configuration also includes statistics about accessing hosts or IP addresses; we therefore do not describe all of this data as anonymous. Statistics are generated on the server and access is protected. No analytics script or additional statistics cookie is used in your browser for this purpose.
The statistics support technical operation, error investigation and capacity planning. The legal basis is Article 6(1)(f) GDPR and our interest in keeping the website reliably available. Statistical reports are stored separately from the original logs; daily log rotation with seven archived versions does not automatically delete these reports.
Web and traffic statistics reports have a retention period of two months.
The public pages do not embed Google Analytics, Matomo, social media tracking or advertising pixels.
5. Contact and support
If you contact us by email or telephone, we process your contact details and the information you provide to respond to your enquiry. App support may involve the product name, app version, device, a description of the problem and attachments you choose to send. Please send only information needed for your enquiry.
The legal basis is Article 6(1)(b) GDPR for contractual enquiries and Article 6(1)(f) GDPR for other enquiries, reflecting our interest in responding appropriately. Documents subject to statutory retention obligations are processed under Article 6(1)(c) GDPR.
Providing information is voluntary. Without a way to contact you or the necessary description, we may be unable to answer. We handle and store support enquiries by email and in our own ticket system within our business management software (WaWi). This system also runs on the Hetzner server in Falkenstein described above.
How long we retain enquiries
- Routine support: Completed enquiries are deleted or reliably anonymised twelve months after closure. This is our own retention rule, not a statutory minimum.
- Records subject to statutory retention: Where the statutory requirements apply, business correspondence is generally retained for six years and accounting vouchers for eight years, calculated from the end of the relevant calendar year. This applies to the records that must be retained, not automatically to the entire support enquiry.
- Specific disputes: Necessary evidence is retained for as long as it is needed to establish, exercise or defend legal claims. We review whether continued retention is necessary.
These rules apply to email and tickets. Copies within server backups are also subject to the backup plan described in section 4.
6. Cookies and language selection
The language of the public website is determined by the page address (/de/ or /en/). We do not set a language cookie. Visiting the main address starts the website in German. A pll_language cookie left by an earlier version is no longer used to select the language; you can delete it in your browser.
Separate login, session and settings cookies are used when authorised people sign in to the WordPress administration area. These support authentication, secure access and interface preferences. Their duration depends in particular on whether a persistent login is selected. WordPress uses session cookies or a login lasting up to 14 days by default; settings cookies may last up to one year. Visitors do not need these administration functions to view public product pages.
Storage or access that is strictly necessary for a function expressly requested by the user falls under Section 25(2), no. 2 of the German TDDDG. Other access generally requires consent under Section 25(1) TDDDG. Any associated processing of personal data also requires a GDPR legal basis. For necessary administrative access, this is our legitimate interest in secure operation under Article 6(1)(f) GDPR.
You can view, delete or block cookies in your browser. Blocking login cookies may prevent you from signing in.
7. Fonts, images and external links
The Inter font, logo and product images are delivered from our own web server. Loading this font does not send requests to Google Fonts servers. The public pages do not embed maps, videos or social media feeds.
Links to stores and other websites are ordinary links. You access those services only when you open a link. Their operators then receive the connection data needed to deliver their services and may process further data as described in their privacy notices. This also applies to separate products such as Meine Farbwelt, Cayow and the Künstlershop. This distinction does not exclude Sieger GbR’s responsibility for its own services.
8. Other recipients, international processing and security
Disclosure may be necessary to comply with a legal obligation or deal with legal claims, for example to competent authorities or legal advisers. Section 4 names the service providers and storage locations used for hosting, email and backups. The website, email and ticket system, and regular server backups run on the infrastructure in Germany described there.
The website uses HTTPS to encrypt data in transit. Administrative access is restricted through access controls. The studio website described here does not make decisions based solely on automated processing that have legal or similarly significant effects under Article 22 GDPR.
9. Your rights
Subject to the legal requirements, you may request access, rectification, erasure, restriction of processing and data portability under Articles 15–18 and 20 GDPR. You may withdraw consent at any time for the future, without affecting the lawfulness of processing before withdrawal.
Right to object: You may object to processing based on legitimate interests on grounds relating to your particular situation under Article 21(1) GDPR. Where data is processed for direct marketing, you may object without giving a reason under Article 21(2) GDPR.
Contact support@engamo.studio to exercise these rights. If we have reasonable doubts about your identity, we may request the additional information needed to identify you.
10. Right to complain
You may lodge a complaint with a data protection supervisory authority under Article 77 GDPR, particularly in the country where you live or work or where the alleged infringement occurred. The authority for our location in North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Contact and complaints information for LDI NRW
11. Changes
We update this information when the website or the processing of your data changes.