Legal
Privacy Policy
Data Controller
The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Dyadic Games GmbH
Mariahilferstraße 1
8020 Graz, Austria
Email: info@linobox.com
Phone: (+43) 720 519600
Website: https://dyadicgames.com (opens in new tab)
A Data Protection Officer has not been appointed pursuant to Art. 37 GDPR, as the conditions for mandatory appointment are not met.
Overview of Data Processing
We only process personal data of our users insofar as this is necessary to provide a functional website as well as our content and services. The following overview summarises the types of data processed, the purposes, and the legal bases.
Legal Bases for Processing
We process personal data on the following legal bases:
- Performance of a contract (Art. 6(1)(b) GDPR): Processing necessary for the performance of a contract or pre-contractual measures (e.g., account creation, provision of the platform).
- Consent (Art. 6(1)(a) GDPR): Processing based on your express consent (e.g., newsletters, optional analytics). You may withdraw your consent at any time with effect for the future.
- Legitimate interests (Art. 6(1)(f) GDPR): Processing based on our legitimate interests, provided your interests do not override them (e.g., IT security, abuse prevention).
- Legal obligation (Art. 6(1)(c) GDPR): Processing necessary to comply with a legal obligation (e.g., tax retention requirements).
Hosting and Infrastructure
This website and the Linobox platform are hosted on servers in Germany. All personal data is exclusively processed and stored on servers within the European Union. No transfer to third countries takes place in the context of hosting.
Legal basis: Art. 6(1)(b) and (f) GDPR (performance of contract and legitimate interest in secure, performant operation).
Server Log Files
When you access our website, your browser automatically sends information to our server. This information is temporarily stored in server log files:
- IP address of the requesting computer (anonymised/truncated)
- Date and time of access
- Name and URL of the accessed file
- Website from which access is made (referrer URL)
- Browser used and operating system
- Name of your access provider
Purpose: Ensuring a smooth connection, system security and stability, error analysis.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and stability of our service).
Retention period: Server log files are automatically deleted after 30 days.
Cookies
Technically Necessary Cookies
We exclusively use technically necessary cookies that are required for the operation of the website:
| Cookie | Purpose | Retention |
|---|---|---|
linobox-locale | Stores your language preference (de/en) | 1 year |
Technically necessary cookies do not require consent under Section 165(3) of the Austrian Telecommunications Act (TKG 2021).
No Analytics or Advertising Cookies
We do not use any analytics cookies, advertising cookies, or tracking mechanisms. No data is transmitted to third parties for advertising purposes.
Early Access Notifications (Newsletter)
On our website you can sign up with your email address for early-access notifications to be informed about the launch of Linobox and product news.
Data processed: Email address, time of sign-up and of confirmation.
Purpose: Information about the product launch, early access, and Linobox product news.
Legal basis: Art. 6(1)(a) GDPR (consent).
We use a double opt-in process: after signing up you receive a confirmation email, and your address is only added to the mailing list once you click the confirmation link it contains. Sign-up and confirmation are logged so that consent can be demonstrated (Art. 7(1) GDPR).
We use Brevo (Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France) as our processor for managing the mailing list and sending these emails; data is processed on servers within the EU.
Retention: Until you withdraw your consent. You can unsubscribe at any time via the unsubscribe link in every email or informally by contacting info@linobox.com.
To protect against automated abuse, the sign-up form uses a self-hosted, cookie-less captcha solution (ALTCHA); no data is transmitted to third parties.
Registration and Use of Linobox
When registering for our service, we collect:
| Data | Required/Optional | Purpose |
|---|---|---|
| Email address | Required | Account creation, communication, password recovery |
| Name | Optional | Personalisation of the platform |
| Password | Required | Authentication (stored encrypted/hashed) |
| School affiliation | Optional | Context-specific features |
The educational games you create and their content are stored on our servers in Germany.
Legal basis: Art. 6(1)(b) GDPR (performance of contract).
AI-Assisted Features
Linobox offers AI-assisted features to support game creation. In this context, content you enter (e.g., topic, questions, learning content) may be transmitted to AI service providers for processing.
Important notes:
- No personal data of students is transmitted to AI service providers.
- AI-generated content may be inaccurate or incorrect. You are responsible for reviewing and approving the content.
- No automated decision-making within the meaning of Art. 22 GDPR takes place (no decisions with legal or similarly significant effect are made solely by automated means).
Legal basis: Art. 6(1)(b) GDPR (performance of contract as part of the service).
No Data Collection from Players
We do not collect any personal data from students or other persons playing games created with Linobox. Specifically:
- No user accounts are created for players
- No cookies are set on players' devices
- No tracking mechanisms are used
- IP addresses are only recorded in anonymised form in server log files
- No data is transmitted to third parties
Recipients and Data Processors
We only share your personal data where this is necessary for the purposes described in this privacy policy:
| Category | Purpose | Location |
|---|---|---|
| Hosting provider (Hetzner Online GmbH) | Platform operation, data storage | Germany / EU |
| Email service provider (Brevo SAS) | Sending transactional and early-access emails | EU |
| AI service providers | AI-assisted game creation features | See section "Data Transfers to Third Countries" |
| Payment service provider | Payment processing (for paid plans) | EU |
Data processing agreements pursuant to Art. 28 GDPR are in place with all processors.
Data Transfers to Third Countries
Where AI service providers based outside the EU/EEA are used, data transfers are made on the basis of:
- an adequacy decision by the European Commission (e.g., EU-US Data Privacy Framework), or
- appropriate safeguards in the form of Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
No data transfers to third countries take place in the context of hosting and the platform's core services.
Data Retention Periods
| Data Category | Retention Period |
|---|---|
| Account data (email, name) | Duration of the contractual relationship; deletion within 30 days of account deletion (unless statutory retention obligations apply) |
| Created educational games and content | Duration of the contractual relationship; deletion within 30 days of account deletion |
| Billing and payment data | 7 years after the end of the calendar year (Section 132 BAO, Section 212 UGB — Austrian tax law) |
| Server log files | 30 days |
| Communication (support enquiries) | 3 years |
| Early-access sign-up (email) | Until consent is withdrawn (unsubscribe) |
Cookie linobox-locale | 1 year (renewable) |
After the retention period expires, your data is deleted or effectively anonymised.
Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR) — You may request information about the data we hold about you.
- Right to rectification (Art. 16 GDPR) — You may request the correction of inaccurate data.
- Right to erasure (Art. 17 GDPR) — You may request the deletion of your data, provided no statutory retention obligations apply.
- Right to restriction of processing (Art. 18 GDPR) — You may request that the processing of your data be restricted.
- Right to data portability (Art. 20 GDPR) — You may receive your data in a commonly used, machine-readable format.
- Right to object (Art. 21 GDPR) — You may object to the processing of your data, particularly where processing is based on legitimate interests.
- Right to withdraw consent (Art. 7(3) GDPR) — Where processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected.
To exercise your rights, please contact us at: info@linobox.com
We will generally respond to your request within one month (Art. 12(3) GDPR).
Right to Lodge a Complaint with the Supervisory Authority
You have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR):
Austrian Data Protection Authority (Datenschutzbehörde / DSB)
Barichgasse 40–42
1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at (opens in new tab)
Data Security
We employ technical and organisational measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. These include:
- Encryption of data in transit using TLS/SSL
- Encryption of personal data at rest
- Access control and authentication mechanisms
- Regular security reviews
- Hosting exclusively in certified data centres within the EU
Our security measures are regularly reviewed and adapted to reflect the current state of the art.
Youth Protection
Linobox is designed for the creation of educational content by adults (teachers and parents). Under Section 4(4) of the Austrian Data Protection Act (DSG), the age limit for independent consent to data processing by information society services in Austria is 14 years.
We do not knowingly process data of persons under 14 years of age without the consent of their legal guardians. If we become aware that data of a person under 14 has been collected without the consent of a legal guardian, we will delete it without delay.
Provision of Personal Data
Providing your email address and password is contractually required for the use of Linobox. Without this information, registration and use of the platform are not possible. Providing your name and school affiliation is voluntary and has no impact on the usability of the service.
Changes to This Privacy Policy
We reserve the right to amend this privacy policy as necessary to reflect changes in the legal situation or changes to the service. The current version is always available on this page. Registered users will be informed of material changes by email.
Contact
For questions about data protection, please contact us at:
Dyadic Games GmbH
Mariahilferstraße 1
8020 Graz, Austria
Email: info@linobox.com
Phone: (+43) 720 519600
Last updated: July 2026