Privacy Policy

Last updated: 30 August 2026

How wilbo.dev e.U. processes personal data for the Unravel website (unravel.gg) and the Unravel desktop application (“the App”). Unravel is not affiliated with or endorsed by Psyonix LLC or Epic Games.

1. Controller

2. Website

2.1 Delivery

Served through Cloudflare, Inc., which processes connection data (IP address, user agent, requested URL, timestamp) to deliver and secure the site. We keep no separate access logs. Legal basis: Art. 6(1)(f) GDPR.

2.2 Analytics

Cloudflare Web Analytics — cookieless, no device identifiers, no cross-site or cross-session tracking. Aggregate metrics only: page views, referrers, country, browser, load times. Legal basis: Art. 6(1)(f) GDPR.

2.3 Contact

Email to hello@unravel.gg is processed to handle your request. Legal basis: Art. 6(1)(f) GDPR, or Art. 6(1)(b) for (pre-)contractual matters. Kept until the matter is closed and statutory retention periods expire.

2.4 Cookies

The site sets no cookies of its own. Cloudflare may set a strictly necessary security cookie (__cf_bm / cf_clearance).

3. Desktop App

3.1 Local processing

The App parses .replay files locally. Their contents are never uploaded — no server receives them.

3.2 Crash reporting (Sentry)

On a crash or a Rust panic the App sends a diagnostic report to Sentry (EU data region, Germany) — error message, stack trace, App version, operating system, and a memory snapshot of the crash. No file contents, file paths, or account data are included; the machine hostname is stripped. When a replay fails to parse, the App reports the parser’s error message with quoted values such as player names removed, plus the replay’s game version and map; the replay file itself is never sent. Release builds only. Legal basis: Art. 6(1)(f) GDPR. Opt out under Settings → Privacy.

3.3 Downloads and updates

App installers and update checks are served from GitHub Releases (GitHub, Inc.), which receives your IP address and user agent.

3.4 No account

The App has no account or login. If accounts or paid features are added, this policy will be updated before that processing begins.

4. Processors

• Cloudflare, Inc. — website hosting, security, analytics
• GitHub, Inc. — App distribution and updates
• Sentry — App crash reporting (EU data region, Germany)

Art. 28 GDPR data processing agreements are in place where required.

5. International transfers

Cloudflare, GitHub and Sentry are US companies; transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses. Sentry crash reports are stored in the EU.

6. Retention

• Website analytics: aggregate only, held by Cloudflare on a rolling ~6-month basis.
• Crash reports: held by Sentry for 90 days.
• Email: until the matter is closed plus statutory periods (up to 7 years for tax records).

7. Your rights

Access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent. Website analytics data is anonymous and not linked to your identity (Art. 11 GDPR).

Requests: hello@wilbo.dev. Complaints: Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at).

8. Children

Not directed at children under 14; we do not knowingly process their data.

9. Changes

This policy may change as the website or App change. Material changes affecting the App are noted in the release notes.