Your Privacy, Our Commitment: A Transparent Framework
We believe gaming should be a sanctuary for play, not a surveillance state. This policy outlines how we collect, use, and protect your data to keep MarkVex focused on discovery, not intrusion.
Jurisdiction
Governed under German Data Protection Act (BDSG)
Core Principle
Data minimization by design
Key Terms, Plainly Spoken
1 Personal Data
Information that can identify you, like your email address. We don't request your real name or address unless you explicitly provide it (e.g., for a purchase receipt).
2 Behavioral Data
Patterns in how you use the site (pages visited, time spent). This helps us improve curation—like showing more indie titles if you avoid AAA games.
3 Third-Party Processors
External services we rely on for essential functions (e.g., email delivery, analytics). We contractually require them to protect your data as we do.
4 Retention Period
The length we keep data. Account data is stored while your profile is active; analytics are anonymized and aggregated after 90 days.
5 Anonymization
The process of stripping direct identifiers so data can't be traced back to you. This is our default for research and performance metrics.
How We Handle Data: The Method, The Safeguards
Our approach is grounded in proportionality. We only collect what serves a clear purpose: improving your game discovery experience or fulfilling a service (like sending a newsletter you subscribed to).
Method Note: Evaluation Framework
Every new data point is evaluated against three criteria: necessity, user benefit, and legal compliance. If a feature requires sensitive data without a clear user upside, we don't build it. Our risk assessment favors privacy-preserving techniques (like client-side processing) even when they're technically more complex for our developers.
A concrete limit: We do not use device-level advertising identifiers for profiling. Our analytics stack is server-side, which reduces data leakage but requires careful performance tuning.
Your Rights & Controls: Practical Steps
Access & Portability
You can request a copy of your personal data in a structured, machine-readable format (JSON). We'll provide this within 30 days of verification.
Example: A user migrating to a new device could request their bookmarked games and preferences.
Correction & Deletion
Spot an error in your profile data? We'll correct it. You may also request full deletion of your account and associated data, subject to legal retention requirements (e.g., for invoicing).
Objection & Restriction
Object to processing for marketing purposes at any time via your account settings. You can also request a temporary restriction while we verify a dispute.
How to Exercise Your Rights
Send a clear, specific request to privacy@markvex.online. Include "Privacy Request" in the subject. We verify identity to prevent unauthorized disclosure.
- Use the registered email address.
- Specify the right you wish to exercise.
- We do not charge fees for standard requests.
Important Limitation
We cannot delete data that is anonymized or aggregated, as it no longer relates to an identifiable individual. This is a technical and legal necessity for operational analytics.
In Practice: A User's Journey
Discovery
Sarah, a casual gamer, visits MarkVex looking for a new puzzle game. She doesn't create an account. Our analytics track her session path (pages viewed) but no personal identifiers.
Engagement
She clicks on a developer note. This event is logged as "interaction with Developer Note" to improve content relevance, but her IP is anonymized after 24 hours.
Subscription
Impressed, she subscribes to the newsletter. We store her email (Personal Data) in our secure system. She can unsubscribe at any time via the link in every email.
Feedback
Later, she contacts support about a broken link. This exchange is kept for 12 months to track resolution quality, then purged.
This scenario illustrates our tiered approach: anonymous behavior data for improvement, identifiable data only for direct service, and clear retention timelines.
Quick Reference: What We Do & Don't Do
✓ We Collect
- Email address (for newsletters only)
- Anonymous usage patterns (for curation)
- Support correspondence (for resolution)
✗ We Never Collect
- Real names or physical addresses
- Payment details (handled by Apple/Google)
- Precise location data
Purpose of Collection
To deliver relevant game recommendations, improve site performance, and provide support. No secondary data sales.
Third-Party Sharing
Only with essential processors (e.g., email service). We have contractual DPA agreements. No sharing with advertisers.
Questions or Concerns?
Our Data Protection Officer is available to address your privacy inquiries.
Policy last updated: December 15, 2026
We may update this policy. Significant changes will be communicated via email or a prominent site notice.