ERNELPLAYER

Privacy

Privacy notice

This English version is equivalent in substance; the German version is authoritative.

1. Controller

Thomas Neldner, trading as Neldner Software
Gärtnerweg 2
77815 Bühl
Deutschland
Privacy contact: support@neldnersoftware.de

2. Website operation and server logs

The website runs on a virtual server provided by IONOS SE in Germany. Access may generate technical logs containing IP address, time, requested address, transferred volume, status code, referrer and browser/device information. Processing supports delivery, error analysis, login protection, abuse detection and system security (Article 6(1)(f) GDPR). Logs are deleted or anonymised when no longer needed for those purposes; affected data may be retained longer for a specific security incident or legal obligation.

3. Contact form and support

The contact form processes name, email address and message to handle the request (Article 6(1)(b) GDPR for contract-related enquiries, otherwise Article 6(1)(f) GDPR). Messages are not stored permanently in the website database and their content is not intentionally written to normal application logs. Technical access logs described above may still arise. Form delivery becomes active only after secure mail configuration; until then support@neldnersoftware.de is the direct support channel. Support data is deleted when the matter is resolved unless legal retention or evidentiary duties apply. There is no marketing opt-in or newsletter.

4. Basic use, account and login

The player's basic functions can be used without an ERNEL account. An account is required for trial, Premium, purchase and device management. ERNEL then processes email address, verification status, password hash, account, login, session and security data. The legal basis is Article 6(1)(b) GDPR and, for attack and abuse prevention, Article 6(1)(f) GDPR. Passwords are not stored in plain text.

5. Email verification, changes and password reset

The email address is processed for verification and time-limited, single-use reset links. A confirmation is sent after a successful reset. A new address must be verified when changing email; the old address receives a change notice. These are transactional security messages, not marketing.

6. Device binding, trial and Premium

For device binding, the five-device limit, trial and Premium status and abuse prevention, ERNEL may process account/licence assignment, a pseudonymous device identifier, device name, platform, status and timestamps. Processing supports contract performance and device management (Article 6(1)(b) GDPR) and security and abuse prevention (Article 6(1)(f) GDPR). Data is deleted when the account and entitlements end unless legal or security reasons require retention.

7. Transactional emails

Only necessary messages for verification, password reset, email changes, cancellation with paid-through date, successful renewal, payment failure, refund and chargeback/dispute suspension are planned. ERNEL sends no newsletter or marketing email.

8. Payments and merchant of record

There is no checkout or payment integration during pre-launch. A merchant of record that has not yet been selected is intended to handle payments, taxes, receipts, subscriptions, refunds and chargebacks later. ERNEL does not store complete card or payment-instrument data. Recipients, international transfers, legal bases and retention will be added for the selected provider before activation.

9. Provider credentials and product boundary

ERNEL does not provide or arrange channels, streams, films, series, IPTV subscriptions or provider access. Customers use their own lawfully obtained compatible sources. Where technically intended, provider credentials are processed locally in the player and are not transmitted to ERNEL. They must not be entered into contact, login or reset forms.

10. Cookies, sessions and tracking

Public pages use no analytics, advertising or marketing cookies. After login, only a technically necessary HTTP-only session is used and is transmitted securely in production. There is no Google Analytics, Meta Pixel or other analytics or marketing tracking. App analytics upload and experiment assignment are also disabled server-side in the pre-launch configuration; only the technically necessary account, security, protocol and support data described here is processed. Strictly necessary sessions do not require consent under section 25(2)(2) TDDDG. Any later change requires a renewed consent and transparency assessment.

11. Account deletion and retention

Users may delete their account after a clear warning. Account, trial and Premium assignment are lost; a new account using the same email does not automatically recover previous rights. Accidental deletion of a lifetime entitlement is restored only through controlled support with proof of purchase. Data is deleted or restricted when no longer needed for contract, security, support evidence or legal duties.

12. Recipients and international processing

Recipients are limited to providers needed for hosting, secure transactional email and, later, the merchant of record. The current website host is located in Germany. International processing by a future email or payment provider will be described specifically only after selection and legal review; it is not presented as active now.