Nothing hiding
in the woods.

Who is responsible?

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

No data protection officer has been appointed.

Opening this website

When you open riverwood.town, the web server must process technical request data so it can send the page to your device and keep the service secure. Depending on the server configuration, access logs may contain:

• your IP address;
• the date and time of the request;
• the requested address, HTTP method and response status;
• the amount of data transferred;
• the referring page, if your browser sends it; and
• browser and operating-system information contained in the user-agent header.

Purpose

Delivering the website, maintaining availability, diagnosing faults, and detecting attacks or misuse.

Legal basis

Article 6(1)(f) GDPR. The legitimate interests are the secure, reliable, and technically correct operation of this website.

Hosting

The website is self-hosted by the controller in Germany.

Log retention

20 days; data connected with a security incident may be retained longer where needed to investigate it or establish, exercise, or defend legal claims.

The page assets are served by Riverwood’s own web host. The site does not load fonts, scripts, analytics, or media from Google or another third-party content network.

Day and night preference

When you use the day/night switch, the page saves the key riverwood-theme with the value light or dark in your browser’s local storage. This setting stays on your device until you change it or clear this site’s browser data. It is not an identifier, is not sent to Riverwood’s server, and is not used to follow you across websites.

Access to this browser setting is necessary to provide the display mode you expressly request. It is therefore used under Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). To the extent that the setting could constitute personal data, the legal basis is Article 6(1)(f) GDPR; the legitimate interest is remembering the presentation preference you selected. You can remove it at any time through your browser’s site-data settings.

No consent banner is shown because this page does not use non-essential cookies, tracking technologies, or comparable storage.

When you contact Riverwood

If you contact the operator by email, the contact details and message content you provide are processed to answer your request. The legal basis is Article 6(1)(b) GDPR where the message concerns registration, membership, or another contractual matter, and Article 6(1)(f) GDPR for other enquiries. The legitimate interest is responding to messages about Riverwood.

Messages are deleted when the request has been resolved and no further storage is needed, unless statutory retention duties apply or the message is required to establish, exercise, or defend legal claims.

Mastodon, Matrix, and external links

This privacy policy covers the informational website at riverwood.town. The Mastodon service at social.riverwood.town, the Matrix homeserver at matrix.riverwood.town, and its Sable web client at chat.riverwood.town process account, federation, and communication data under service-specific notices.

Riverwood does not contact these services merely because you open this landing page. Your browser connects to them only after you follow one of those links. The same applies to links to official legal sources.

Recipients and international transfers

The landing page is self-hosted by the controller in Germany. No hosting provider processes its access logs on the controller’s behalf. Connection data is disclosed only where required by law, needed to protect legal claims, or necessary to investigate misuse.

The landing page does not intentionally transfer personal data outside the European Union or European Economic Area. This statement does not cover Matrix federation; those transfers are explained in the Matrix privacy policy.

How long data is kept

Server logs are kept for the period stated under “Opening this website.” Contact messages are kept only as described above. The theme preference remains in your own browser until you overwrite or delete it. Riverwood does not create visitor profiles.

Your data protection rights

Where the legal requirements are met, you have the right to request access to your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), and data portability (Article 20). You may also lodge a complaint with a data protection supervisory authority (Article 77).

Your right to object

If processing is based on Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, under Article 21 GDPR. Riverwood will stop that processing unless compelling legitimate grounds override your interests, rights, and freedoms, or the processing is required for legal claims.

No automated decision-making or profiling takes place on this landing page.

The competent supervisory authority is the Sächsische Datenschutz- und Transparenzbeauftragte, Maternistraße 17, 01067 Dresden.

Last revised: 16 September 2026 · Legal references: Article 13 GDPR · Section 25 TDDDG.