Retroable

Privacy policy

Last updated 19 October 2026.

This policy explains how Gnomish Tinkers UG (haftungsbeschränkt) ("Retroable", "we") handles personal data when you use retroable.dev. It is written for the EU General Data Protection Regulation. The company details in the imprint are part of it.

Who is responsible

Gnomish Tinkers UG (haftungsbeschränkt) Christian Göbert-Golle, managing director c/o POSTFLEX PFX-197-574 Emsdettener Straße 10 48268 Greven Germany

Email: gnomishtinkers@gmail.com

What we collect

  • Account. Your name, email address, a profile photo if you add one, and the sign-in data our login provider keeps for your account.
  • Your games. The prompt, a sketch if you upload one, the generated game, the ROM, the pictures, and whether the game is public.
  • Orders. The plan you buy, the payment status and the invoices. Card numbers stay with our payment provider. We do not store them.
  • Cartridge delivery. The shipping address and phone number you enter at checkout, and any address you save in your account. That address is used to send a personal cartridge, or a physical-release sample once that feature is available. A physical-release sample ships only to the USA, Canada, or Europe, and not before March 2026. We keep that address until the sample is sent.
  • Payouts. The PayPal email you save on your account, so we can pay you affiliate commission and, after a physical release, shop sales. We store it. We do not send it to PayPal until a payout is made.
  • Affiliate program. The link code you share, the referral cookie on a visitor's browser, and the commission and payout records for sales that cookie attributes to you. The stats page shows the plan and the amounts. It does not show the referred customer's email.
  • Newsletter. Your email and the record of your consent, only if you subscribe. Confirmation is a separate email, and every edition has an unsubscribe link.
  • Messages. What you send to hello@retroable.dev.
  • Technical data. An IP address and browser data in server logs, and error reports that leave out account details and the contents of your requests.

Why we use it

  • To run your account, make your games, take payment, ship a cartridge or sample you order, apply a referral discount, and pay you affiliate commission or a shop sale. The legal basis is the contract, Art. 6 (1) (b) GDPR.
  • To keep invoices and tax records. The legal basis is a legal duty, Art. 6 (1) (c) GDPR.
  • To keep the service secure, fix errors and count visits without identifying you. The legal basis is our legitimate interest in a reliable service, Art. 6 (1) (f) GDPR. You can object.
  • To send the newsletter. The legal basis is your consent, Art. 6 (1) (a) GDPR. You can withdraw it at any time, and the withdrawal does not affect the time before it.

Public games

A finished game is public unless you switch it to private. Its page shows the game, the prompt and the sketch, and anyone can play it. A Game Boy game is at retroable.dev/gameboy/ and a Game Boy Color game at retroable.dev/gameboy-color/. After a physical release, the same page is also at a subdomain such as name.gb.retroable.dev. Set the game to private in the Share dialog to take it, the prompt and the sketch out of the public library.

Who receives data

These companies process data for us, and only for the purpose named here.

  • Clerk runs login and accounts.
  • Stripe takes payments and issues invoices, and for a cartridge or a physical release collects the shipping address and phone number.
  • Resend sends emails about your games and orders, and the newsletter.
  • Anthropic turns your prompt into the game.
  • OpenAI turns your prompt into the pictures.
  • Sentry receives error reports, without account details or request contents, and only while error reporting is switched on.
  • DigitalOcean provides the servers that host the site, the database and the files.

Visit counts are collected by Umami, which we host ourselves. It does not use cookies and it is not used to identify you.

We do not sell personal data, and we do not use your prompts, sketches or games to train a model of our own.

Countries outside the EU

Some of these providers process data in the United States. Where data leaves the European Economic Area, we rely on the European Commission's standard contractual clauses, or on an adequacy decision such as the EU-US Data Privacy Framework where the provider is certified under it.

How long we keep it

We keep account and game data while your account exists. When you ask us to delete the account, we delete that data or remove the link to you, except records we have to keep. Invoices, payment records, and affiliate commission records stay for as long as German tax law requires, usually ten years. A shipping address from a physical-release presale stays until the sample is sent, which is no earlier than March 2026, and afterwards for as long as that shipment and the tax records need it. Newsletter data is deleted when you unsubscribe. Server logs and error reports are kept only as long as we need them to operate and secure the service.

Cookies

Retroable does not use advertising cookies. Signing in uses a cookie so your session stays yours. That cookie is necessary for the account. A referral link sets a cookie named retro_ref for 30 days. It is used only to apply the referral discount and to attribute the sale. It is not used for advertising. The visit counter does not set a cookie. On the checkout page, Stripe may set cookies of its own to take the payment and to prevent fraud.

Your rights

You can ask for access, correction, deletion or restriction, and for a copy of your data to take elsewhere. You can object to processing that is based on legitimate interest. Where we rely on consent, you can withdraw it. You can also complain to a supervisory authority. The authority for our seat is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, ldi.nrw.de.

Write to gnomishtinkers@gmail.com. We answer within one month. Email is how you use these rights today.

Age

Retroable is not directed at children. You need to be at least 18 to create an account and pay.

Changes

The current version of this policy is always on this page. If a change matters to how we use your data, we email the address on your account.