Last updated: 18/08/2026
I am a computer scientist with a PhD specializing in innovative multimodal human-computer interaction and AI-driven interface design. Tiltility is the result of ongoing research and development in immersive input technologies for entertainment and gaming.
This privacy policy informs you about the processing of personal data when using my website and software. I take the protection of your personal data seriously and comply with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
The controller for the processing of your personal data in accordance with Article 4(7) GDPR is:
As a solo developer, I do not currently appoint a separate Data Protection Officer.
I process your personal data only when permitted by law. The relevant legal bases include:
My website is hosted by Netcup GmbH, based in Germany. When you access the website, the following data is automatically stored in server log files:
This data is stored for 14 days for security and troubleshooting purposes. The legal basis is Art. 6(1)(f) GDPR.
I use Matomo, an open-source web analytics platform, to analyze website usage. Matomo is self-hosted on the same server as the website (Netcup GmbH, Germany). No data is transmitted to third parties.
I have configured Matomo without cookies. The following anonymized data may be collected:
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the website).
You can opt-out of the data collection by Matomo at any time, after which no data is recorded about your usage of the website anymore. Your opt-out is stored in your web browser in the form of two cookies:
MATOMO_SESSID (first-party session cookie, deleted when you quit your browser)matomo_ignore (first-party persistent cookie with a duration of 30 years)These cookies are necessary to enable the functionality of remembering your opt-out.
To keep you signed in, we use a combination of short‑lived access tokens and a refresh token stored in a secure, HttpOnly browser cookie. The access token is kept in application memory only and is not persisted in LocalStorage. We do not store sensitive personal data in LocalStorage.
You can revoke access at any time by logging out in your account. This clears the session cookie and ends your authenticated session.
Tiltility offers optional sign-in with Google and Steam for the website account area. These sign-in methods are provided only as a convenience for website authentication and account access. They are not required to browse the public website.
When you choose Google sign-in, Tiltility requests the Google OpenID Connect scopes openid, email, and profile.
Depending on the information returned by Google, I may process the following data:
sub)This data is used to create or access your Tiltility website account, associate your Google identity with that account, and maintain secure website authentication. The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.
When you choose Steam sign-in, Tiltility uses Steam OpenID to verify your Steam identity.
Depending on the information available from Steam, I may process the following data:
Steam does not provide your email address to Tiltility in this sign-in flow.
This data is used to create or access your Tiltility website account, associate your Steam identity with that account, and maintain secure website authentication. The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.
If the email address returned by Google matches an existing Tiltility account, direct sign-in may require that the provider first be linked from the existing account instead of creating a second account automatically.
Provider identity records are stored for as long as your Tiltility account exists or as long as necessary to provide account access, enforce security, and comply with legal obligations. If you want a linked provider removed or your account deleted, you may contact support@tiltility.com.
When you sign in with Google or Steam, you are temporarily redirected to that provider's own pages. Those providers may use their own cookies, session technologies, or similar tracking mechanisms under their own privacy policies. I do not control those provider-side technologies.
If you contact me via email or form, I process your personal data to respond to your inquiry. This includes:
The legal basis is Art. 6(1)(b) GDPR.
Purchases made directly through my website are handled by Lemon Squeezy, LLC, which acts as the Merchant of Record. Lemon Squeezy processes payment data independently and in accordance with their own privacy policy.
For direct purchases fulfilled with Steam keys, I also process the purchaser’s email address, the Lemon Squeezy order identifier, and the assigned Steam key metadata so the purchase can be delivered by email and shown inside the customer’s Tiltility account.
When purchasing via Steam or Microsoft Store, those platforms handle payment and user account data. I do not receive sensitive payment information from these platforms.
For purchases made on Steam or Microsoft Store, users should consult the respective platform’s privacy policy for details on their payment and platform-account data handling. This purchase-related statement does not limit the separate Steam sign-in disclosures described in Section 7 above.
If my software collects or processes personal data (e.g. for licensing or updates), this will be clearly disclosed within the application or during installation. No personal data is collected without your consent or a legal basis.
My website may contain links to external platforms (e.g. Steam, Microsoft Store). I am not responsible for the privacy practices of these third-party sites.
You have the following rights under the GDPR:
To exercise these rights, contact me at support@tiltility.com.
This privacy policy may be updated to reflect changes in legal requirements or services. The latest version will always be available on my website.