TheOvercity

Privacy Policy

Welcome to The Overcity!

Protecting your data is very important to us. Therefore, we would like to inform you transparently and, hopefully, in an understandable way about how we process your data when you use The Overcity.

1. Controller

The controller responsible for the processing of personal data is:

Oliver Jumpertz
Königstr. 1b
41379 Brüggen
Germany
Email: hey@theovercity.com

(hereinafter “we” or “us”)

2. Processing of Personal Data

We process personal data when you access our website, use The Overcity, or contact us via email.

We process data in order to communicate with you and to provide you with The Overcity.

3. Data Processing When Accessing Our Website and Using The Overcity

To ensure the secure operation and continuous optimization of The Overcity, technical data is processed when you visit the website. Specifically, this can include:

  • Your IP address
  • The date and time of your request
  • The source of the visit (referrer)
  • The requested subpage or file (path)
  • The current page parameters (query), which can contain the class, race, level, talents, Legacy talents, rules, and leveling path of a build, as well as a local save ID when you reopen a saved build
  • The operating system and browser indicated by the “User Agent” transmitted by your browser

This information is transmitted to our hosting provider so the requested page can be delivered. Your IP address and a build URL may be personal data, depending on the circumstances. The Overcity itself does not run a visitor analytics script, assign a visit ID, or offer user accounts. We do not combine these requests with other data sources to build visitor profiles.

We have deliberately designed The Overcity to work without an account. If you choose to save a talent build, the saved build data is stored only locally in your browser. We do not have access to those local saves. The browser-storage and sharing features are described in Section 6.

The legal basis for processing request data for the aforementioned purposes is Art. 6(1)(f) GDPR.

Our legitimate interest lies in the secure operation and continuous optimization of The Overcity. Technical request data enables us and our hosting provider to identify problems and protect the service.

4. Hosting and Technical Monitoring

The Overcity is delivered to you by Cloudflare through Cloudflare Pages. To protect our website against attacks and to identify, analyze, and resolve technical issues, Cloudflare logs technical parameters of your page requests (server logs). These can include personal data such as your IP address.

We do not enrich this data with information from other data sources. The data is deleted by Cloudflare after 30 days.

The legal basis for processing your data for the aforementioned purposes is Art. 6(1)(f) GDPR.

Our legitimate interest lies in the proper operation of The Overcity as well as its optimization.

Details of Processing

Description of the service: Cloudflare provides the service for delivering our website and monitors technical parameters of page requests. This serves to prevent attacks and to identify, analyze, and resolve technical problems.

Processing company: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA

We have concluded a data processing agreement with the provider. This obliges the provider to process data only in accordance with our instructions.

Purpose of processing: Protection of The Overcity against attacks and technical disruptions (analysis, identification, and resolution of technical problems to ensure proper operation and continuous optimization of our offering on the basis of technical data).

Collected data:

  • IP address
  • Information about system configuration
  • Name of the website
  • Date and time of the request
  • Name and URL of the retrieved file
  • Amount of data transferred
  • Status information
  • Device operating system
  • Referrer URL
  • Requesting provider
  • Device type
  • Time of the server request
  • Retrieved and transmitted content

(We do not enrich this data with information from other sources.)

Place of processing: Worldwide, depending on the user’s location.

Storage period: The collected server-log data is deleted after 30 days.

Data from this processing may be transferred to the United States. Appropriate safeguards have been implemented through Standard Contractual Clauses (SCCs) (These Standard Contractual Clauses (SCCs) are model contracts recognized by the EU Commission that ensure an adequate level of data protection for transfers to non-EU countries).

You can find Cloudflare’s privacy policy here.

5. Communication via Email

Our email provider is Proton (ProtonMail).

If you contact us via email, your email address (and, if applicable, your real name if it is part of your email address) and your message will be processed by us as the operator of The Overcity for the purpose of communicating with you. This data is stored only as long as necessary to clarify your request. As a rule, your emails are deleted immediately after receiving or sending the final response from us.

We have concluded a data processing agreement with the provider. This obliges the provider to process data only in accordance with our instructions.

The storage and use of the data contained in emails as well as your contact data takes place to the extent necessary based on our legitimate interest in handling communication with you (Art. 6(1)(f) GDPR). Without processing your personal data, it is not possible to process your request. The use of a general service email address is voluntary.

Details of Processing

Description of the service: ProtonMail provides the infrastructure required to send and receive emails.

Processing company: Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland.

Purpose of processing: Conducting communication with you.

Collected data:

  • IP address
  • Email address
  • If applicable, your real name if it is included in your email address
  • Reply-To address (this is the email address to which replies should be sent when you contact us. It may differ from your actual email address)
  • Return-Path (this is an email address to which so-called non-delivery reports are sent)
  • Date and time of emails
  • Message-ID (a unique identification code for each email)
  • Subject line
  • Information about the email client used

ProtonMail uses end-to-end encryption and cannot access encrypted message content. Messages sent from external email providers without end-to-end encryption may be scanned for spam and viruses before encryption.

Place of processing: Switzerland and Germany.

Storage period: Data possibly logged by Proton as well as deleted emails are permanently deleted after 30 days. We store your emails and the associated data as long as necessary for communication and delete them immediately after the process is completed.

You can find Proton’s and ProtonMail’s privacy policies here and here.

6. Local Browser Storage and Shared Builds

We have deliberately designed The Overcity so that you can plan and save builds without a user account. The calculator runs in your browser. When you choose Save build, the build is stored in that browser’s IndexedDB database. It is not uploaded to us or synchronized between your devices.

Details of Saved-Build Storage

Description of the feature: The local save feature lets you name a talent build, reopen it from the dashboard, update it, copy it, or delete it. The data stored locally includes:

  • The name you give the build
  • The selected class and race
  • The level and talent choices, including any Legacy talent choices
  • The rules and leveling path included in the build URL
  • Point totals for the class talent trees
  • A local save ID and creation or update times
  • The build URL needed to reopen the saved choices

Purpose of storage: To provide the saved-build and dashboard features you request. The information stays on your device. We cannot read your saved builds, recover them if you delete them, or transfer them to another browser for you.

Storage period: A saved build remains in your browser until you delete it in the dashboard or clear this site’s browser data. Clearing browser data, using another browser or device, or blocking IndexedDB can make the saves unavailable. No account or server-side copy exists.

The local save feature accesses browser storage only to provide a function you have requested (Section 25(2) No. 2 TDDDG). If a saved-build name contains personal information, please bear in mind that it remains on your device and can be seen by anyone with access to that browser profile.

The home page stores the ID of the featured class it has shown you in session storage. It uses this value to choose a different featured class during the same browser session. The value is a class ID, not an account or visitor ID. It is stored locally and is removed when the browser session ends or you clear this site’s data.

The calculator places build choices in the page URL so that you can revisit a build or share it with someone else. The URL may contain the chosen class, race, level, talents, Legacy talents, rules, and leveling path. The name of a locally saved build and its local save ID are not included in a copied shared link.

When someone opens a shared link, the URL and its page parameters are sent to Cloudflare as part of the page request and can appear in the technical request data described in Sections 3 and 4. Anyone you give the link to can read or pass on the choices encoded in it. Only share a link if you are comfortable disclosing those choices. We do not create a server-side build record when you copy a link.

7. Cookies

The Overcity currently does not use cookies. The browser storage described in Section 6 is used for the requested save feature and the featured-class display.

8. Your Rights

Right of Access

You have the right at any time to obtain information about the data stored about you.

Right to Rectification

If data about you is incorrect or no longer up to date, you can request its correction.

Right to Erasure and Restriction

You also have the right to request the deletion or restriction of the processing of your data.

Right to Data Portability

You have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format. This data can be transmitted to another controller. We can also transfer this data directly to another controller if this is technically feasible and requested by you.

If you have given us consent to process your personal data for specific purposes, you can withdraw this consent at any time with effect for the future by sending an email to hey@theovercity.com. The lawfulness of the processing of your data until the withdrawal remains unaffected.

Right to Object

You also have the right at any time to object to the processing of your data that is based on a balancing of interests (Art. 6(1)(f) GDPR) or carried out in the public interest, if there are reasons arising from your particular situation. If you object to such processing, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

If you wish to exercise your rights or have general questions about data protection regarding The Overcity, you can contact us at any time (hey@theovercity.com).

9. Right to Lodge a Complaint with a Supervisory Authority

You have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.

The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf. However, you can also contact the data protection authority responsible for your place of residence, which will forward your request to the competent authority.

10. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time if legal or other reasons (such as changes to The Overcity) make this necessary.

The current version of this Privacy Policy can always be found on this website.

Status: September 2026