Privacy Policy

Last updated: October 2026

This privacy policy applies to the Call Me Human websites (call-me-human.com with Devlog, Wiki, Roadmap and Feedback & Bugs) and to the game Call Me Human. The game is a brand of Luneo Entertainment® Development Studio.

1. Privacy at a glance

Personal data is any data that can identify you personally. We deliberately keep it to a minimum:

  • No ad trackers, no Google Analytics, no Meta Pixel, no recording of your mouse movements.
  • Our visitor statistics are our own cookieless count and store no IP addresses.
  • We only set a cookie when you vote on Feedback & Bugs. That is why we don't need a cookie banner.
  • Data you send us yourself (contact form, feedback, waitlist) is only used for that purpose.

2. Controller

Brainwave Entertainment GmbH
Starhembergstraße 7
4020 Linz, Austria

Contact: via our contact form. You'll find all company details in the imprint.

3. Your rights

We process your data in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act and the Digital Services Act. You have the right at any time to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)

Withdrawing consent: You can withdraw any consent you have given (for example for the waitlist) at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

Objection: Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you can object at any time. We will then stop processing it unless we can demonstrate compelling legitimate grounds.

Complaints: You can lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, phone +43 1 52 152-0, www.dsb.gv.at.

For any request about your data, a message through our contact form is all it takes.

4. Hosting and delivery

Our websites run on servers of Hetzner Online GmbH in Germany. In front of them sits Cloudflare (Cloudflare, Inc., USA), which delivers the pages quickly, protects them against attacks and stores our images and wallpaper downloads. Cloudflare is certified under the EU-US Data Privacy Framework. Cloudflare may set a technically necessary security cookie.

When you open a page, the servers automatically process: IP address, date and time, the address requested, referrer URL, browser type and version, and operating system. We delete these server logs after 14 days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

5. Visitor statistics

To see how many people read the Devlog, Wiki and Roadmap, we count page views with our own statistics on our servers, without third parties. It sets no cookies and stores nothing in your browser.

We store: the page viewed, language, time, reading time, device type (computer, phone, tablet), country (from Cloudflare's network), the domain of the page you came from, and campaign tags in the address (utm). We do not store your IP address. To tell visitors of a single day apart, we create a non-reversible check value from your IP address, browser identifier and a random value that changes daily. The random value is deleted the next day, after which the check value can no longer be linked to anyone, and we cannot track you across days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving our websites).

6. Cookies

We don't use analytics or marketing cookies. There are only two cases:

  • When you vote on Feedback & Bugs, we set the cookie cmh_fb_geprueft. It remembers for 30 days that you passed the spam check and prevents duplicate votes.
  • Cloudflare may set a technically necessary security cookie (see section 4).

7. Contact form

When you write to us through the contact form, we store your name, email address, message, language, the section you wrote from, and the time. We only use your email address to reply to you. We publish none of it. Once your request has been handled and no retention obligation applies, we delete the message.

Legal basis: Art. 6(1)(b) GDPR (handling your request) and Art. 6(1)(f) GDPR (legitimate interest in replying).

8. Feedback & Bugs

On feedback.call-me-human.com you can submit ideas, feedback and bug reports and vote on them, without an account and without a name. We store the type, title, text, language and, if you provide them, game version, platform and steps to reproduce. Submissions only appear publicly after we have reviewed them. Please don't include personal details in your text.

To protect against spam and duplicate votes, we store an encrypted check value of your IP address with each submission and vote (pseudonymized, the IP itself is not stored) and, when you vote, the cookie from section 6.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a fair, spam-free board and in improving the game).

9. Spam protection with Cloudflare Turnstile

We protect the contact form and Feedback & Bugs with Cloudflare Turnstile (Cloudflare, Inc., USA). Turnstile uses technical features of your browser to check that a human is using the form. In doing so, data such as your IP address and browser information is transmitted to Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse).

10. Waitlist

On call-me-human.com you can join the waitlist with your email address and first name. We use Klaviyo (Klaviyo, Inc., USA, certified under the EU-US Data Privacy Framework) for this. You are only added once you confirm through the confirmation email (double opt-in). We only write to you about Call Me Human, for example when the game or a campaign launches. You can unsubscribe at any time via the link in every email.

Legal basis: Art. 6(1)(a) GDPR (consent). Storage period: until you unsubscribe.

11. Videos

YouTube: In the Devlog we embed some videos from YouTube (Google Ireland Limited) in privacy-enhanced mode (youtube-nocookie.com). When a video loads, your browser connects to Google. Legal basis: Art. 6(1)(f) GDPR (showing our videos).

12. The game Call Me Human

Call Me Human is in development and has not been released yet. Until release:

  • Steam: We plan to release on Steam. Purchases, your Steam account, saves in Steam Cloud and Steam achievements will then be handled by Valve Corporation (USA) under its privacy policy. We do not receive payment data.
  • Kickstarter: A planned Kickstarter campaign is subject to Kickstarter's privacy policy. We only receive the data we need to deliver backer rewards. We will add the details here before the campaign starts.
  • In the game: The game currently collects no personal data. Before we introduce features such as automatic crash reports or test builds for testers, we will describe here what data they involve.

13. Group of companies

Brainwave Entertainment GmbH is part of the Brainwave group of companies, which includes the subsidiary Brainwave3D Technology GmbH. We keep the waitlist as a separate Call Me Human list in the group's Klaviyo account. We do not share data from the contact form, Feedback & Bugs or the statistics with other companies in the group.

14. Data security

  • Encrypted transmission (HTTPS) on all pages
  • Access to messages and submissions only for our team, with secure sign-in
  • Regular security updates and backups

Data transmission over the internet can still have security gaps. Complete protection is not possible.

15. Changes

When our websites, the game or the law change, we update this privacy policy. The current version is always on this page.