Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Uygar Altin, trading as Sensito
Auchtertstraße 6, 73278 Schlierbach, Germany
Email: support@sensito.pro

2. Hosting

Our website and web app are hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, on servers located in Europe. When you visit our website, the server automatically records technical data in log files: IP address, date and time of access, page requested, browser type, operating system and referring URL. This is necessary to deliver the website securely and stably (Art. 6(1)(f) GDPR). Log files are deleted after 30 days at the latest. We have concluded a data processing agreement with Hostinger.

3. User account

To use Sensito, you need an account. We process your email address, a securely hashed password and your purchases (product, date and payment status) in order to provide the service (Art. 6(1)(b) GDPR). We store this data until you delete your account; billing records are kept as described in section 5.

Each account gets a permanent Sensito ID. You give it when you open a support ticket on our Discord server, so we can find your account.

If you log in with Discord, Discord Inc., USA, sends us your Discord user ID, your Discord display name and, if Discord has verified it, your email address. We store this data with your account until you delete it (Art. 6(1)(b) GDPR).

We send emails to confirm your email address and to reset your password. These emails are sent via our hosting provider Hostinger (see section 2).

To protect accounts against attacks, we record the email address entered and your IP address for every registration, login, password reset and contact form attempt (Art. 6(1)(f) GDPR). These records are deleted after 24 hours.

4. Sensitivity analysis

For an analysis, you upload screenshots and enter your in-game sensitivity and mouse DPI. To evaluate the screenshots, we transmit them together with the values you entered to Anthropic, PBC, San Francisco, USA, which processes them on our behalf using its AI models (Art. 6(1)(b) GDPR). Anthropic does not use data submitted via its commercial API to train its models.

Data is transferred to the USA on the basis of the EU Standard Contractual Clauses in our data processing agreement with Anthropic (Art. 46(2)(c) GDPR).

Screenshots are deleted immediately after the analysis is completed. Your sensitivity, DPI and analysis results are stored in your account until you delete it.

If you buy Pro Setup, the coach who holds your 1:1 session sees your Valorant gameplay and settings, including your report, in order to provide the session (Art. 6(1)(b) GDPR). We contact you by email to arrange the date.

Please only upload screenshots of your own gameplay and make sure they do not show personal data of other people (e.g. usernames, chat messages).

5. Payments

Payments are processed by Whop, Inc., USA. When you make a purchase, Whop processes your payment details, name, email address and billing address. We do not receive your full payment details; we only receive the information necessary to manage your purchase (e.g. email address, plan, payment status). The legal basis is Art. 6(1)(b) GDPR. Whop's privacy policy applies to the processing by Whop. Data transfers to the USA are based on appropriate safeguards pursuant to Art. 44 et seq. GDPR.

We retain billing records for as long as required by German tax and commercial law (up to 10 years).

6. Cookies and consent

We use technically necessary cookies to keep you logged in and to store your cookie settings (Section 25(2) TDDDG, Art. 6(1)(f) GDPR). All other cookies and similar technologies are only used if you consent via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the cookie settings link in the footer.

7. Google Analytics

If you consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyse how visitors use our website, for example pages visited, time spent and device type. IP addresses are not stored by Google Analytics 4. [NICHT ANGEGEBEN: Google-Analytics-Measurement-ID (G-…); bis dahin lädt Google Analytics nicht]

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has issued an adequacy decision (Art. 45 GDPR). Data is deleted after 14 months.

8. Newsletter

If you subscribe to our newsletter, we use your email address to send you news about Sensito. The newsletter is sent via Hostinger's email marketing service (provider as in section 2). We use the double opt-in procedure: you will only receive the newsletter after confirming your subscription via a link sent to you by email. We log the time of subscription and confirmation. [PRÜFEN: Newsletter-Anmeldung gibt es noch nicht]

The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every newsletter. We then delete your email address from the mailing list.

9. Discord

Our website links to our Discord server. No data is transferred to Discord when you visit our website. If you join our server, Discord Inc., USA, processes your data in accordance with its own privacy policy.

If you choose "Log in with Discord", you are forwarded to Discord and log in there. Section 3 describes the data we receive from Discord.

10. Contacting us

If you contact us by email or via the contact form, we process your message and contact details to answer your enquiry (Art. 6(1)(b) or (f) GDPR). We delete this data once your enquiry has been resolved, unless statutory retention periods apply.

11. Fonts

Fonts are hosted on our own server. No connection to external font providers is established.

12. Minimum age

Sensito is intended for users aged 16 and over. We do not knowingly process personal data of children under 16.

13. Your rights

You have the right to:

• access your data (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw your consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, email support@sensito.pro.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

14. Security

Our website uses TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.

15. Changes

We may update this privacy policy if our services or the legal requirements change. The current version is always available on our website.