Privacy notice
Controller and contact
Henric Steuernagel
Hessenring 16
61200 Wölfersheim
Germany
contact@13delusions.com
Service and data
BunkerVision at bv.13delusions.com offers a shared music video programme, live player, schedule, shows, chat, optional accounts and public profiles, ratings, video submissions, watchlists and show reminders. To serve and secure pages, the server processes IP address, requested URL, time, browser information and technical errors; the host may keep access logs. We also process country codes and audience/presence data for access control and programme statistics.
Accounts, profiles and contributions
Registration and sign-in process username, email address, password hash and session data. Password reset and verification use one-time links and email. You choose a public display name; profile content, images, social links and community contributions may be publicly visible according to the respective function and settings. Chat messages, ratings, shows and approved submissions can show your display name. Guest chat uses the name you enter and a session-based identifier. Guest video submissions store the supplied YouTube link, display name and review status; an approved entry appears with that name.
Without an account: cookies and browser storage
A session cookie is also used for guest chat and security. A long-lived bv_visitor cookie identifies a guest browser so show subscriptions, push preferences and connections can be kept on the server; a temporary bv_visitor_pending cookie can preserve an unfinished transfer to an account. The guest watchlist is stored in this browser’s localStorage, with video IDs, titles, thumbnails and details about their source. It does not sync across browsers or devices. Clearing this site’s browser data removes the local watchlist. On sign-in, guest bookmarks and subscriptions can be imported into the account; a pending import may briefly remain in localStorage until confirmation.
Other browser storage and app technology
LocalStorage also holds language choice, player sound/volume and mini-player state, guest chat name and a local copy of guest show choices. SessionStorage holds the audio-start state for the current browser session. A service worker caches public app files for loading and handles optional push messages; the browser may also cache pages and media. The push subscription itself is stored by the browser. Site storage and service workers can be removed in browser settings, which may reset preferences and disable reminders.
Notifications and email
With browser permission and a show subscription, we store the push endpoint, cryptographic keys, browser information, selected shows and reminder lead time. A browser push provider receives the delivery request and processes what is needed to route it. Show reminders are optional and can be changed in Notifications or disabled in the browser. Account email is used for verification, password reset and any enabled email notifications; delivery can involve the hosting/mail provider.
Embedded media and external services
YouTube videos and livestreams are embedded using the YouTube iframe API; preview images may load from i.ytimg.com. Your browser connects directly to Google/YouTube for these resources, potentially transmitting IP address, device/browser data and usage information; their cookies or storage may apply. Locally hosted video and images are served by this site. External social, donation and other links contact their providers when opened. Their privacy notices apply. Providers may process data outside the EEA; contact us for information about the safeguards applicable to a specific provider.
Country lookup
A country code is taken from a hosting GeoIP header or local GeoIP facility where available. Otherwise our server asks ip-api.com over HTTP using your public IP address, then api.country.is over HTTPS if necessary. This exposes the IP address to the lookup provider. Our fallback cache stores a hash of the IP and a country code for up to 14 days, or one hour if lookup fails. Country codes support aggregate statistics and country access rules; detection can be inaccurate.
Purposes and legal bases
We process data to provide requested viewing, account and community functions (Article 6(1)(b) GDPR where a contract applies), and for secure operation, moderation, abuse prevention and aggregate statistics based on legitimate interests (Article 6(1)(f) GDPR). Where consent is required for optional storage or notifications, Article 6(1)(a) GDPR and Section 25 TDDDG apply; you can withdraw consent for the future in your browser and notification settings. Technically necessary storage falls under Section 25(2) TDDDG. External media can use third-party cookies or storage according to the provider’s own rules.
Retention and controls
Account, guest subscription and community records remain as needed for their functions, until deletion or removal where available, subject to legal duties and legitimate claims. The guest watchlist remains in local browser storage until you remove entries or clear site data. Session cookies expire or are removed at logout; the guest identifier cookie is set for up to one year and may be renewed. Host log retention depends on hosting settings; ask us for its current period. You can edit account and profile details, unsubscribe from shows, disconnect browser push, and delete your account. Chat posts may be edited or marked deleted; moderators can remove them from the active chat store.
Your rights
You can request access, rectification, erasure, restriction, portability where applicable, and object to processing based on legitimate interests. You can withdraw consent for the future. Contact us above. You may complain to a competent data protection supervisory authority.