Last updated: 21 October 2026
1. Who is responsible
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Frog Milk GbR
Represented by the partners Anne Görgner, Everett Messamore, Tom Koch
Dossestr. 21
10247 Berlin, Germany
Email:
See also our imprint.
2. The short version
This is a static website. We don’t use analytics, tracking or advertising cookies, and we don’t build profiles. Fonts are served from our own host, not from Google. Personal data is only processed where it’s technically necessary to deliver the site, or when you contact us yourself.
3. Hosting and server logs
This site is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you visit a page, your browser automatically sends information that Netlify records in server log files: IP address, date and time of the request, the page requested, referrer URL, browser type and operating system.
We need this data to deliver the website securely and reliably. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure, working website). We have a data processing agreement with Netlify (Art. 28 GDPR). Netlify is certified under the EU–US Data Privacy Framework, so transfers to the USA are based on the European Commission’s adequacy decision (Art. 45 GDPR). Log data is deleted by Netlify after a short period.
4. Contacting us
If you email us or use our contact form, we process the data you send us (for example your name, email address and message) to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract, and Art. 6 (1) (f) GDPR otherwise (legitimate interest in responding to messages). We delete the data once your enquiry is resolved, unless we’re legally required to keep it.
Submissions to the contact form are received and stored by Netlify (see section 3) on our behalf.
5. YouTube videos
Some game pages show trailers hosted on YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Videos are embedded in privacy-enhanced mode (youtube-nocookie.com) and only load after you click play. Only then does your browser connect to YouTube’s servers, and YouTube may process your IP address and set cookies or similar technologies. The legal basis is your consent by clicking play, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Data may be transferred to Google LLC in the USA, which is certified under the EU–US Data Privacy Framework. More information: Google privacy policy.
6. Links to other websites
We link to stores (such as itch.io and Steam) and social networks (such as Bluesky, Mastodon, Discord and YouTube). These are plain links: no data is sent to these services until you click them. After that, the privacy policy of the respective service applies.
7. Your rights
You have the right to:
- access the personal data we hold about you (Art. 15 GDPR),
- have it corrected (Art. 16) or deleted (Art. 17),
- restrict its processing (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interests (Art. 21),
- withdraw any consent you’ve given, with effect for the future (Art. 7 (3)).
To exercise these rights, just email us. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.
8. Changes
We’ll update this policy when the website changes, for example if we add new features. The current version is always available on this page.