Quest Helper
Start free trial

Legal

Privacy Policy

Last updated: November 11, 2026

This privacy policy applies to the website quest-helper.com and to the Quest Helper app at app.quest-helper.com. We keep the website to a minimum: we only process what is technically necessary to show you the site.

Draft. Sections 6 to 8 describe the app and payment. They are not yet legally reviewed. Points in [brackets] are open.

1. Privacy at a glance

  • The website sets no cookies and stores nothing in your browser.
  • No visitor statistics, no analytics, no ad trackers, no social media plugins, no embedded third-party content.
  • Our fonts are hosted on our own server. Your browser does not connect to Google for them.
  • Our servers are in the EU.

2. Controller

Brainwave Entertainment GmbH
Starhembergstraße 7
4020 Linz, Austria

Contact: via the Luneo Entertainment contact form. You'll find all company details in the legal notice.

3. Hosting and delivery

Our website runs on a server of Hetzner Online GmbH in Germany. In front of it sits Cloudflare (Cloudflare, Inc., USA), which delivers the site quickly and protects it against attacks. To make this work, Cloudflare processes your IP address and technical connection data. Cloudflare is certified under the EU-US Data Privacy Framework.

Cloudflare may ask your browser to report connection errors to Cloudflare (Network Error Logging) and, if it suspects an attack, set a technically necessary security cookie.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

4. Server logs

With every request, our server automatically logs: date and time, the address requested, the status code and the amount of data transferred, the referrer URL, and the browser identifier (browser type and version, operating system). Your IP address is not in these logs: all requests come through Cloudflare, so our server only sees the address of the Cloudflare server.

The logs are deleted automatically, usually after seven days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

5. Fonts

The fonts on this site (Fredoka, Nunito Sans, Caveat) are hosted on our own server and load from there. There is no connection to Google or any other font provider.

6. Account and app (draft)

To use the app you create a Luneo account (login service of Luneo, shared with other Luneo products such as Terra Engine). We process your email address, your password in encrypted form and the data of your account. In the app we store the projects you create (plans, quests, covers, logos) on servers in the EU (Hetzner, Germany) in a separate storage area per account. Legal basis: Art. 6(1)(b) GDPR (performance of the contract). The app uses [technically necessary session cookies to keep you signed in: to be confirmed]. You can export your data at any time. If you delete your account, your project data is deleted as well [period for backups: to be confirmed].

7. Purchase and payment (draft)

Subscriptions are paid through our payment provider Stripe (Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., USA). The buttons for subscriptions open a Stripe checkout page. There, Stripe processes your payment data, name, email address and billing address under its own privacy policy, and we receive the order data we need for the invoice and your subscription. Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(c) GDPR (retention duties under tax law). [Data processing agreement and Stripe details: to be confirmed before sales start.] Until sales start, no data is transmitted to Stripe.

8. Agent connection (draft)

With the agent add-on you connect an agent of your choice through the API. Which agent you use, and what it receives from your plan, is your decision. The provider of your agent is responsible for how it processes the data you send to it. [Details on the API and data flows: to be confirmed.]

9. Links to other websites

We link to other websites, for example rpg-engine.com, call-me-human.com and luneo-entertainment.com. Your browser only connects to them when you click a link. From then on, that website's privacy policy applies.

10. Your rights

We process your data in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act. You have the right at any time to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)

Objection: Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you can object at any time. We will then stop processing it unless we can demonstrate compelling legitimate grounds.

Complaints: You can lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, phone +43 1 52 152-0, www.dsb.gv.at.

For any request about your data, a message through the contact form is all it takes.

11. Data security

All pages are transmitted encrypted (HTTPS). Data transmission over the internet can still have security gaps. Complete protection is not possible.

12. Changes

When our website, the app or the law changes, we update this privacy policy. The current version is always on this page.