Privacy Policy

Last updated: 2026-07-07

Cheepr ("we", "us") is operated by Remington Studio (VAT BE 0765.364.048), a company based in Belgium, which is the data controller for this website. This policy explains what data we process when you use cheepr.gg, and is kept deliberately short because we process very little.

What we process

• Standard server and CDN request logs (IP address, user agent, requested URL, timestamp) for security, abuse prevention, and debugging. These are not linked to an identified person and are not used to build profiles.
• Functional cookies only — your chosen region, currency, and theme. Nothing else is stored on your device.
• No user accounts. No advertising, analytics, or tracking cookies. No profiling. We do not sell or share data.

Legal basis

Server logs and functional cookies are processed under our legitimate interest in operating and securing the site (GDPR Art. 6(1)(f)). We do not ask for cookie consent because we set no tracking, analytics, or advertising cookies — only strictly functional ones. If that ever changes, we will add a consent mechanism first.

Cookies

We use functional cookies only: region, currency, and theme. They exist to make the site work the way you set it — not to track you. You can clear or block them in your browser; the site still works, it just forgets your preferences.

Processors and where data is stored

We rely on a small number of service providers to run Cheepr. Some are headquartered in the United States even where the data itself is stored in the EU; for those, transfers are covered by the EU Standard Contractual Clauses (SCCs).

• netcup — application server and database. Stored in the EU (Germany); no international transfer.
• Cloudflare — CDN, DDoS protection, and reverse proxy in front of the site, processing request traffic. US-headquartered provider with EU data processing, under SCCs.
• Backblaze — encrypted off-site database backups, stored in the EU (Amsterdam) region. US-headquartered provider, under SCCs. Backups are encrypted, so the provider cannot read their contents, which are operational catalogue data rather than personal data.

Retention

Server and security logs are kept for a short operational window (on the order of weeks, and no longer than 90 days) unless a longer period is needed to investigate a specific security incident. Encrypted backups follow a rolling daily / weekly / monthly schedule.

Your rights

Under the GDPR you can ask what data we hold about you and request access, correction, erasure, or object to processing. Because Cheepr has no accounts, in practice this concerns log data only. Contact [email protected]. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, gegevensbeschermingsautoriteit.be).

Changes to this policy

We review this policy whenever we change our cookies, add any tracking or analytics, or change our infrastructure or processors — and before any affiliate or commercial activity goes live — to make sure it still reflects how Cheepr actually works. The date at the top shows the last review.