Version 1.0 — Last updated: March 23, 2026
1. Introduction
Proof of Taste GmbH ("Company", "we", "us") operates District ("Application"), a virtual reality DJ application. This Privacy Policy explains how we collect, use, and protect your personal data when you use the Application.
We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).
2. Data Controller
Proof of Taste GmbH
Brunnenstr. 28
10119 Berlin, Germany
Email: privacy@district.berlin
3. Data We Collect
3.1 Account Data (collected automatically via Steam authentication)
| Data | Purpose |
|---|---|
| Steam ID | To identify your account and authenticate you |
| Account creation date | To manage your account |
3.2 Gameplay Data (generated through your use of the Application)
| Data | Purpose |
|---|---|
| Login timestamps | Session management and daily login rewards |
| In-game currency balance (CD) | To track your virtual currency |
| Game settings and preferences | To remember your control and display preferences |
| DJ equipment configuration | To save your deck setup |
| Digital asset ownership | To track content you own in the Application |
| Gameplay milestones and progression | To manage the progression system |
| Tutorial completion status | To track onboarding progress |
3.3 Optional Data (only if you choose to use these features)
| Data | Purpose |
|---|---|
| Avatar provider account link | To enable custom avatar integration |
3.4 Data We Do NOT Collect
- We do not collect your email address, real name, or physical address
- We do not collect payment or financial information (all purchases are handled by Steam)
- We do not use cookies or tracking technologies in the Application
- We do not use analytics or telemetry services
- We do not share your data with advertising networks
4. Legal Basis for Processing
We process your data based on the following legal grounds under GDPR Article 6(1):
| Legal Basis | Data | Explanation |
|---|---|---|
| Contract performance Art. 6(1)(b) | Steam ID, CD balance, asset ownership, game settings, deck settings, milestones, tutorial status | Necessary to provide the Application's core functionality |
| Legitimate interest Art. 6(1)(f) | Login timestamps, session management | Necessary for security, fraud prevention, and daily reward systems |
| Consent Art. 6(1)(a) | Avatar provider account link | Only processed if you choose to link an avatar provider |
5. Data Sharing
We do not sell, rent, or share your personal data with third parties, except:
- Steam / Valve Corporation: Your Steam ID is used for authentication. Steam's own privacy policy governs data collected by Steam. See: store.steampowered.com/privacy_agreement
- Hosting provider: Our backend is hosted on Railway (Railway Corporation). They process data on our behalf as a data processor under a data processing agreement.
- Legal obligations: We may disclose data if required by law, regulation, or legal process.
6. Data Storage and Security
- Your data is stored on servers operated by our hosting provider.
- We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS) and access controls.
- Access to user data is restricted to authorized personnel only.
7. Data Retention
- Active accounts: We retain your data for as long as your account is active.
- Inactive accounts: If your account is inactive for more than 24 months, we may delete your data after notifying you (where possible).
- Deleted accounts: Upon account deletion request, we permanently delete all your personal data within 30 days.
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Right of access Art. 15 | Request a copy of all personal data we hold about you |
| Right to rectification Art. 16 | Request correction of inaccurate data |
| Right to erasure Art. 17 | Request permanent deletion of your data ("right to be forgotten") |
| Right to restrict processing Art. 18 | Request that we limit how we use your data |
| Right to data portability Art. 20 | Request your data in a structured, machine-readable format |
| Right to object Art. 21 | Object to processing based on legitimate interest |
| Right to withdraw consent Art. 7(3) | Withdraw consent at any time (for consent-based processing, e.g., avatar linking) |
How to Exercise Your Rights
Send your request to privacy@district.berlin. Please include your Steam ID so we can identify your account. We will respond within 30 days as required by GDPR.
If you believe we have not handled your request appropriately, you have the right to lodge a complaint with the supervisory authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin, Germany
www.datenschutz-berlin.de
9. International Data Transfers
Your data is processed within the European Union. If any data transfer outside the EU becomes necessary in the future, we will ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
10. Children's Privacy
The Application is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will delete that data promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted at district.berlin/privacy-policy/game with an updated "Last updated" date and version number. If changes are significant, we will notify you through the Application.
Your continued use of the Application after changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may request deletion of your account.
12. Contact
For any questions about this Privacy Policy or your personal data:
Proof of Taste GmbH
Brunnenstr. 28
10119 Berlin, Germany
Email: privacy@district.berlin