Privacy policy

This English version is provided for your convenience. Only the German version (Datenschutzerklärung) is legally binding.

Short and honest

This website sets no cookies, uses no tracking and no analytics tools. Fonts and images are hosted on our own server. Data only goes to third parties when you actively click something, for example a YouTube video or a link to another service. The details are below.

1. Controller

2. Hosting and server log files

This website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary data, in particular your IP address, date and time, the page requested, the referrer and information about your browser and operating system. This is necessary to deliver the site and to protect it against attacks (e.g. DDoS).

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and reliably. We have a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses also apply. More information: Cloudflare privacy policy.

3. Twitch live status

On the homepage we show whether a livestream is currently running. Our server, not your browser, requests this from a public service (DecAPI). No data about you is transmitted to Twitch or third parties.

4. YouTube videos (two-click solution)

On some pages you can play videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As long as you don't click, no connection to YouTube is established; the preview image is hosted on our server.

Only when you click on a video is it loaded in privacy-enhanced mode via youtube-nocookie.com. In the process, data such as your IP address is transmitted to YouTube/Google, and YouTube may store cookies or similar technologies on your device. A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework.

The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). More information: Google privacy policy.

5. Links to social networks

Links to YouTube, Twitch, Instagram, TikTok, Discord, WhatsApp, Facebook and X are simple links. No plugins or scripts from these providers are loaded. Only when you click a link are you taken to the respective provider's site, where its privacy policy applies.

6. Affiliate and partner links

Some links are affiliate or partner links (marked with *), for example to Amazon, MAD Gaming or HOLY. If you buy something there after clicking, I receive a commission. Nothing is stored or tracked on this website for that purpose. So that the partner can attribute the purchase, it processes data on its own website after the click (for example via cookies or a code in the link). The respective partner is responsible for this.

BastelNerd is a participant in the affiliate program of Amazon Europe Core S.à r.l. As an Amazon Associate I earn from qualifying purchases.

7. Contact by email

If you email us, we process your details (email address, name, content) to handle your request. The legal basis is Art. 6(1)(b) GDPR if it concerns a contract or steps prior to entering into one, otherwise Art. 6(1)(f) GDPR (answering inquiries). Our mailbox is operated via Google Workspace (Google Ireland Limited). We delete the data once it is no longer needed and no statutory retention obligations apply.

8. Local storage in your browser

On the deals page, your browser remembers the sort order you chose in local storage (localStorage). It contains no personal data, never leaves your device and only serves the convenience you asked for (§ 25(2) no. 2 TDDDG). You can clear this storage in your browser at any time.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future. Just write to [email protected].

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Last updated: October 2026