Skip to content

Privacy Policy

Last updated July 2026

1. Controller

The controller responsible for data processing on this website (Art. 4(7) GDPR) is:
Thomas Kraaibeek
Wilhelmstr. 20
48149 Münster, Deutschland
Email: hello@sixshore.com

See also our Impressum.

2. Hosting and server logs

The site is hosted on a virtual server operated by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), within the EU. To deliver and secure the pages, the web server processes technical connection data (IP address, requested URL, timestamp, referrer, user agent). We keep access logging to a minimum: the visitor IP is not stored, or is shortened/anonymised, and any logs are retained only briefly (target: 7 days) for security and troubleshooting, then deleted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). No hosting data is transferred outside the EU/EEA, and we have a data-processing agreement (AVV, Art. 28 GDPR) with Hetzner.

3. Analytics (cookieless)

We use Plausible Analytics, self-hosted in the EU (Hetzner, Germany). Plausible is cookieless: it sets no cookies and stores no persistent identifiers. To count unique visits it derives a daily-rotating hash from your IP address and user agent; the IP is processed only transiently for this and is not stored. No cross-site or cross-device tracking takes place, and no data leaves the EU. Legal basis: Art. 6(1)(f) GDPR. Because no information is stored on or read from your device beyond what is strictly necessary, no consent banner is required (§ 25(1) TDDDG). You can object at any time (Art. 21 GDPR); see section 8.

4. Cookies and device storage

SixShore sets no cookies at all: no tracking, advertising, or session cookies, and nothing is written to your device's local or session storage. No consent banner is therefore required. The on-site search (Pagefind) runs locally in your browser and stores nothing identifying.

5. Video embeds (YouTube)

Official trailers are embedded via a click-to-load facade. No request is sent to YouTube or Google until you press play. When you do, the video loads from youtube-nocookie.com in privacy-enhanced mode and YouTube (Google Ireland / Google LLC, USA) may then process data and set cookies under its own policy. Legal basis for loading on your click: Art. 6(1)(a) GDPR (your consent, given by pressing play) and § 25(1) TDDDG.

6. Newsletter

If you subscribe to our newsletter, we process your email address to send you GTA 6 updates. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7(2) UWG).

We use a double opt-in: after you enter your address, we send one confirmation email with a link. Your address is added to the list, and you start receiving updates, only after you click that link. If you never confirm, we do not mail you again. As the record of your consent (Art. 7(1) GDPR), we store your email address together with the time you signed up and the time you confirmed.

The address is stored on our EU-based server (Hetzner, Germany). The confirmation and update emails are delivered through Amazon SES in Frankfurt (see section 7). We store only your email plus the sign-up time, the confirmation time, and the sign-up source (data minimisation, Art. 5(1)(c) GDPR). Every email carries a one-click unsubscribe link, and you can unsubscribe at any time, which withdraws your consent with effect for the future (Art. 7(3) GDPR). You can also contact us to have your address deleted.

7. Transfers outside the EU/EEA

Hosting, server logs, our newsletter list, and analytics are all handled within the EU/EEA. Two points involve a company with a US parent, so we set them out plainly:

  • Newsletter delivery. The confirmation and update emails are sent through Amazon SES, operated by Amazon Web Services EMEA SARL (Luxembourg), in the eu-central-1 (Frankfurt) region. The recipient address and the email content are processed on infrastructure in the EU. Because Amazon's ultimate parent is a US company, this is covered by our AWS data processing agreement (Art. 28 GDPR), the EU-US Data Privacy Framework, and EU Standard Contractual Clauses as a safeguard (Art. 44-46 GDPR).
  • Video embeds. A transfer to Google / YouTube (USA) happens only if you click to load a trailer, under Google's own policy. That transfer is likewise covered by the EU-US Data Privacy Framework, with Standard Contractual Clauses as a fallback (see section 5).

8. Your rights

Under the GDPR you have the right to:

  • access (Art. 15), rectification (Art. 16), and erasure (Art. 17);
  • restriction of processing (Art. 18) and data portability (Art. 20);
  • object to processing based on Art. 6(1)(f) at any time (Art. 21);
  • withdraw consent at any time with effect for the future (Art. 7(3));
  • lodge a complaint with a supervisory authority (Art. 77), in particular the data-protection authority of your or the controller's German federal state.

To exercise any right, contact us at hello@sixshore.com. We respond within one month (Art. 12(3)).

9. Retention

Server access logs are minimised (IP not stored or anonymised) and kept only briefly for security (target: 7 days), then deleted. While you are subscribed to the newsletter we keep your email address plus the sign-up and confirmation times. After you unsubscribe, or if your address hard-bounces, we keep your email on a small suppression list so we do not email you again and can show that consent was withdrawn (Art. 7(1) GDPR); ask us at hello@sixshore.com for full erasure. Cookieless analytics stores only aggregate, non-personal counts.

10. Data protection officer

We have not appointed a data protection officer, as we are below the threshold of § 38(1) BDSG and our processing does not otherwise require one under Art. 37(1) GDPR.

11. Advertising

SixShore currently shows no advertising. Before any ads are introduced, we will present a certified consent management platform that blocks all advertising tags until you opt in, obtain your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, and update this policy first.