Skip to content

Privacy Policy

Last updated July 2026

1. Controller

The controller responsible for data processing on this website (Art. 4(7) GDPR) is:
Thomas Kraaibeek
Wilhelmstr. 20
48149 Münster, Deutschland
Email: hello@sixshore.com

See also our Impressum.

2. Hosting and server logs

The site is hosted on a virtual server operated by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), within the EU. To deliver and secure the pages, the web server processes technical connection data (IP address, requested URL, timestamp, referrer, user agent). We keep access logging to a minimum: the visitor IP is not stored, or is shortened/anonymised, and any logs are retained only briefly (target: 7 days) for security and troubleshooting, then deleted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). No hosting data is transferred outside the EU/EEA, and we have a data-processing agreement (AVV, Art. 28 GDPR) with Hetzner.

3. Analytics (cookieless)

We use Plausible Analytics, self-hosted in the EU (Hetzner, Germany). Plausible is cookieless: it sets no cookies and stores no persistent identifiers. To count unique visits it derives a daily-rotating hash from your IP address and user agent; the IP is processed only transiently for this and is not stored. No cross-site or cross-device tracking takes place, and no data leaves the EU. Legal basis: Art. 6(1)(f) GDPR. Because no information is stored on or read from your device beyond what is strictly necessary, no consent banner is required (§ 25(1) TDDDG). You can object at any time (Art. 21 GDPR); see section 8.

4. Cookies and device storage

SixShore sets no cookies at all: no tracking, advertising, or session cookies, and nothing is written to your device's local or session storage. No consent banner is therefore required. The on-site search (Pagefind) runs locally in your browser and stores nothing identifying.

5. Video embeds (YouTube)

Official trailers are embedded via a click-to-load facade. No request is sent to YouTube or Google until you press play. When you do, the video loads from youtube-nocookie.com in privacy-enhanced mode and YouTube (Google Ireland / Google LLC, USA) may then process data and set cookies under its own policy. Legal basis for loading on your click: Art. 6(1)(a) GDPR (your consent, given by pressing play) and § 25(1) TDDDG.

6. Newsletter

If you subscribe, we process your email address to send you GTA 6 updates, on the basis of your consent (Art. 6(1)(a) GDPR, § 7(2) UWG). Your address is stored on our EU-based server infrastructure (Hetzner, Germany). You can unsubscribe at any time, which withdraws your consent with effect for the future; contact us and we will delete your address. We store only your email plus the time and source of the sign-up (data minimisation, Art. 5(1)(c)).

7. Transfers outside the EU/EEA

Hosting, server logs, the newsletter, and analytics are all handled within the EU, so they involve no third-country transfer. The only transfer to a US company happens if, and only if, you click to load a trailer: Google / YouTube then receives data under its own policy. That transfer is covered by the EU-US Data Privacy Framework adequacy decision, with EU Standard Contractual Clauses as a fallback safeguard (Art. 44-46 GDPR).

8. Your rights

Under the GDPR you have the right to:

  • access (Art. 15), rectification (Art. 16), and erasure (Art. 17);
  • restriction of processing (Art. 18) and data portability (Art. 20);
  • object to processing based on Art. 6(1)(f) at any time (Art. 21);
  • withdraw consent at any time with effect for the future (Art. 7(3));
  • lodge a complaint with a supervisory authority (Art. 77), in particular the data-protection authority of your or the controller's German federal state.

To exercise any right, contact us at hello@sixshore.com. We respond within one month (Art. 12(3)).

9. Retention

Server access logs are minimised (IP not stored or anonymised) and kept only briefly for security (target: 7 days), then deleted. Newsletter data is kept until you unsubscribe or object. Cookieless analytics stores only aggregate, non-personal counts.

10. Data protection officer

We have not appointed a data protection officer, as we are below the threshold of § 38(1) BDSG and our processing does not otherwise require one under Art. 37(1) GDPR.

11. Advertising

SixShore currently shows no advertising. Before any ads are introduced, we will present a certified consent management platform that blocks all advertising tags until you opt in, obtain your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, and update this policy first.