Legal & Compliance

1. Data Controller (Verantwortlicher)

The responsible person for data processing on this website is:
Anthony Hofmeister
c/o Amethyst Platform Project
E-Mail: contact@anthonyhfm.dev
Additional details are available in our Imprint.

2. Hosting & Technical Infrastructure

Our platform uses privacy-conscious, modern infrastructure to deliver files securely and reliably:

• Cloudflare Pages & CDN: The frontend application is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare caches static assets, provides TLS encryption, and protects against DDoS attacks. Data transfer is safeguarded under the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs).
• Backend API & Storage: The backend and SQLite database are hosted on a dedicated Virtual Private Server (VPS) located in a German data center operated by IONOS SE (Montabaur, Germany). Data stored on the server remains within the European Union.

Legal Basis: Art. 6 (1) (f) GDPR (our legitimate interest in ensuring system security, attack defense, and reliable availability).

3. Data Collected & How It Is Used

a) Server Log Files: When you access our platform, our servers automatically log technical request data (client IP address, browser user-agent, operating system, requested URL, timestamp, and HTTP status code). These logs are processed solely to ensure network security and prevent denial-of-service abuse.

b) Account Registration & Authentication: When registering, we store your chosen username, display name, optional email address, and an irreversible cryptographic hash of your password generated using the Argon2id hashing algorithm. Plaintext passwords are never stored or logged.

c) Uploaded Project Content: When you publish a project, your package file (.zip, .rar, .ame), thumbnail, description, YouTube link, and project metadata are publicly displayed and associated with your public artist profile.

d) Views, Likes & Downloads: We track anonymous view counts and download metrics using one-way salted hashes to prevent duplicate counting and abuse without tracking individual user browsing histories.

4. Cookies & Local Storage

We do not use profiling, advertising, or cross-site tracking cookies. We only store strictly necessary technical tokens (e.g. your active session token in secure local storage/cookies) required to keep you signed in and preserve your interface preferences.

5. Data Retention & Self-Service Erasure

Your account information and published projects remain stored for as long as your account is active. You have full self-service control over your personal data:

• Export Data: In your Account Dashboard under "Data & Privacy", you can export a complete machine-readable copy of your profile and data (Art. 20 GDPR).
• Account Deletion: You can permanently delete your account and all associated projects directly in the Account Dashboard (Art. 17 GDPR - "Right to be forgotten").

6. Your Rights under the GDPR

You have the following rights at any time, free of charge:

• Right of Access (Art. 15 GDPR): Inquire about what personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete profile details.
• Right to Erasure (Art. 17 GDPR): Request deletion of your personal data.
• Right to Restriction of Processing (Art. 18 GDPR): Restrict the processing of your data.
• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, common format.
• Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority for data protection (such as the State Commissioner for Data Protection and Freedom of Information in Germany).

To exercise your rights, you can use the built-in self-service tools in your Account Dashboard or email contact@anthonyhfm.dev.