ERNELPLAYER

Privacy

Privacy notice

Version ERNEL-DATENSCHUTZ-DE-2026-09-02-DRAFT-1. This English version is equivalent in substance; the German version is authoritative.

1. Controller

Thomas Neldner, trading as Neldner Software
Gärtnerweg 2
77815 Bühl
Deutschland
Privacy contact: support@neldnersoftware.de

2. Website operation and server logs

The website runs on a virtual server provided by IONOS SE in Germany. Access may generate technical logs containing IP address, time, requested address, transferred volume, status code, referrer and browser/device information. Processing supports delivery, error analysis, login protection, abuse detection and system security (Article 6(1)(f) GDPR). Logs are deleted or anonymised when no longer needed for those purposes; affected data may be retained longer for a specific security incident or legal obligation.

3. Contact form and support

The contact form processes name, email address and message to handle the request (Article 6(1)(b) GDPR for contract-related enquiries, otherwise Article 6(1)(f) GDPR). Messages are not stored permanently in the website database and their content is not intentionally written to normal application logs. Technical access logs described above may still arise. Form delivery becomes active only after secure mail configuration; until then support@neldnersoftware.de is the direct support channel. Support data is deleted when the matter is resolved unless legal retention or evidentiary duties apply. There is no marketing opt-in or newsletter.

4. Basic use, account and login

The player's basic functions can be used without an ERNEL account. An account is required for trial, Premium, purchase and device management. ERNEL then processes email address, verification status, password hash, account, login, session and security data. The legal basis is Article 6(1)(b) GDPR and, for attack and abuse prevention, Article 6(1)(f) GDPR. Passwords are not stored in plain text.

5. Email verification, changes and password reset

The email address is processed for time-limited, single-use verification and reset codes. Codes are not transmitted in URLs. A confirmation is sent after a successful reset. A new address must be verified when changing email; the old address receives a change notice. These are transactional security messages, not marketing.

6. Device binding, trial and Premium

For device binding, the five-device limit, trial and Premium status and abuse prevention, ERNEL may process account/licence assignment, a pseudonymous device identifier, device name, platform, status and timestamps. Processing supports contract performance and device management (Article 6(1)(b) GDPR) and security and abuse prevention (Article 6(1)(f) GDPR). Data is deleted when the account and entitlements end unless legal or security reasons require retention.

7. Transactional emails

Only necessary messages for verification, password reset, email changes and account deletion are active. Payment, contract-confirmation, invoice, refund and cancellation messages required for a later contract are technically planned but are sent only after separate commerce approval. ERNEL sends no newsletter or marketing email.

8. Direct payment through PayPal (prepared, not active)

PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, is intended as payment service provider for the planned direct sale. After activation, ERNEL will process and, where necessary for payment, transmit in particular name, email and billing address, country, product/plan, total, currency and order, account and transaction references. ERNEL relies on Article 6(1)(b) GDPR for contract performance, Article 6(1)(c) GDPR for legal retention and evidentiary duties, and Article 6(1)(f) GDPR for fraud and abuse prevention. ERNEL does not store complete card or online-banking credentials. PayPal processes data for its payment services under its own privacy information and may process it internationally using the safeguards described there. No payment data is sent from the ERNEL website to PayPal before separate activation. Further information: PayPal Privacy Statement.

9. Provider credentials and product boundary

ERNEL does not provide or arrange channels, streams, films, series, IPTV subscriptions or provider access. Customers use their own lawfully obtained compatible sources. Where technically intended, provider credentials are processed locally in the player and are not transmitted to ERNEL. They must not be entered into contact, login or reset forms.

10. Cookies, sessions and tracking

Public pages use no analytics, advertising or marketing cookies. After login, only a technically necessary HTTP-only session is used and is transmitted securely in production. There is no Google Analytics, Meta Pixel or other analytics or marketing tracking. App analytics upload and experiment assignment are also disabled server-side in the pre-launch configuration; only the technically necessary account, security, protocol and support data described here is processed. Strictly necessary sessions do not require consent under section 25(2)(2) TDDDG. Any later change requires a renewed consent and transparency assessment.

11. Account deletion and retention

Users may delete their account after a clear warning. Account, trial and Premium assignment are lost; a new account using the same email does not automatically recover previous rights. Accidental deletion of a lifetime entitlement is restored only through controlled support with proof of purchase. Data is deleted or restricted when no longer needed for contract, security, support evidence or legal duties.

12. Recipients and international processing

Recipients are providers needed for hosting and secure transactional email and, after commerce activation, PayPal as payment service provider. The website host is located in Germany. PayPal describes binding corporate rules for transfers within its group and, for other transfers, in particular adequacy decisions, standard contractual clauses or statutory derogations. The exact controller/processor roles and transfer setup remain subject to specialist legal and Owner review before live approval.