Privacy Policy — suitefish.com

Last updated: 2026-07-28

1. Controller

Jan-Maurice Dahlmanns
Kattowitzerstraße 2b
41065 Mönchengladbach
Germany

E-mail: requests@bugfish.eu
Phone: +49 2161 902 26 31

2. Scope of this policy

suitefish.com is a private, login-only collaboration tool (based on EspoCRM) used for coordinating game development and related projects. There is no public self-registration — accounts are created manually by the operator for invited collaborators only. This policy explains what data is processed and why.

3. What data we process

Account data: name, e-mail address, username, password (stored hashed).
Project data: any content you or other collaborators enter into the system (tasks, notes, files, comments, project-related information).
Server log data: IP address, timestamp, browser/user agent, requested page — collected automatically by the web server for security and stability.

We do not collect data through cookies for tracking, analytics, or advertising. The only cookie used is a technically necessary session cookie required to keep you logged in.

4. No external services

This site loads no external libraries, fonts, scripts, trackers, or advertisements. All code and assets are hosted locally on our own server. No data is transmitted to third-party services (e.g. Google, CDNs, ad networks) when you use the site.

5. Purpose and legal basis (GDPR)

Providing the collaboration platform and managing your account — Art. 6(1)(b) GDPR (performance of an agreement between collaborators).
Server log data for IT security and to ensure stable operation — Art. 6(1)(f) GDPR (legitimate interest).

6. Who has access to your data

Your data is only accessible to:

The site operator (see Section 1), and
Other collaborators, to the extent necessary for the shared project(s) you work on together.

We do not sell, rent, or share your data with any other third party. The only external parties involved are our infrastructure providers (Section 7), which host the virtual server and do not access the content of your data.

7. Hosting and infrastructure

This site runs on a virtual server (vServer) that we administer ourselves. The virtual server is provided to us by:

i-make.media – Magnus Brühl
Wilhelm-Elfes-Straße 46
41065 Mönchengladbach
Germany
E-mail: info@i-make-media.de

i-make.media operates the host system on which our virtual server runs and acts as a processor under Art. 28 GDPR. The application and the data within it are administered by us; i-make.media has no access to the content of your data beyond what is technically unavoidable for operating the host system.

The underlying dedicated hardware is rented by i-make.media from:

Hetzner Online GmbH
Industriestr. 25
91710 Fürth
Germany

Hetzner acts as a sub-processor and provides the data centre and physical server only. All servers are located in Germany.

8. Data retention

Account and project data is kept as long as your account is active or as long as needed for the relevant project. Server logs are rotated/deleted after a short period (typically within 30 days).

9. Your rights

Under the GDPR you have the right to access, correct, restrict, or object to the processing of your data, and the right to data portability.

To request deletion of your data, create a task in the Tasks section addressed to the operator. Requests will be processed without undue delay.

You also have the right to lodge a complaint with a data protection supervisory authority.

10. Automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

11. Changes

This policy may be updated if the service or legal requirements change. The current version always applies.