Last updated: June 2026
Protecting your personal data is very important to us. We process data solely on the basis of the applicable legal provisions (the GDPR, the Austrian Telecommunications Act, and — where relevant — international standards such as CCPA/COPPA and the policies of Google Play, the Apple App Store, Steam, and Epic Games). This policy applies to all of the websites listed below that are operated by Ostrong Studios (Mathias Oysmüller), as well as to all games and applications („apps“) published under the Ostrong Studios name or its brands.
ostrongstudios.de · ostrong.net · ostronggames.net · thyrathar.de · thyratharlegends.de · thyratharlegends.eu · limbustales.de · limbustales.eu · elyravalen.de · evlnk.de
Note on structure: Exactly which data is processed depends on the service you use. Parts 1–3 apply generally, Part 4sets out the framework for apps/games with online features, and Part 5 covers the current Spieglein family (purely local, with no data transfer to us).
1. Controller
Oysmüller Mathias (Ostrong Studios)
Altwaldhäusl 55
3662 Münichreith-Laimbach
Austria
Email: office@ostrongstudios.de
Website: www.ostrongstudios.de
2. Your rights
You have the right at any time to:
- Access the data we hold about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16)
- Erasure — the „right to be forgotten“ (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Withdraw consent you have given (Art. 7(3))
To exercise your rights, simply contact office@ostrongstudios.de — no particular form is required.
Right to lodge a complaint: You have the right to complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna; phone +43 1 52 152-0; email dsb@dsb.gv.at; web https://www.dsb.gv.at).
No automated decision-making: We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
3. Processing on the website
Server/access data: When you visit the website, the hosting provider processes technically necessary data (e.g. IP address, date/time, page accessed, browser type). This serves the technical operation, stability, and security of the site (Art. 6(1)(f) GDPR).
Contacting us: If you contact us by email or a form, we process your details in order to handle your request (Art. 6(1)(a)/(b) GDPR). We keep the request only as long as necessary, and at most 3 years.
Cookies & third-party content: Where the website uses cookies or embedded third-party content (e.g. videos), we obtain your consent via a consent banner where required. Technically necessary cookies are set without consent.
4. Apps & games — general framework
This part applies insofar as an app or game uses online features (e.g. leaderboards, cloud save states, advertising). For the current Spieglein family, Part 5 applies instead, since those apps work purely locally.
4.1 Automatically collected data: When you access a service, technical information such as your IP address, device type, OS version, and store ID (e.g. Google Play ID, Apple IDFA/IDFV) may be processed for the technical operation, stability, and security of the service.
4.2 Identifiers:
- Device IDs: to identify the device for cloud saves and to sync game progress.
- Advertising IDs: only if you explicitly agree (e.g. via Apple’s ATT dialog or the Google Advertising ID), in order to show ads.
4.3 Distribution platforms (data sharing with third parties): To provide the games and social features (leaderboards, achievements), third-party services may be used:
- Google Play Services — features for Android users
- Apple Game Center — features for iOS/macOS users
- Steamworks (Valve) — authentication, cloud saves, and multiplayer on Steam
- Epic Online Services (Epic Games) — authentication and social features in the Epic Games Store
In doing so, data (such as your account ID on the relevant platform) is transferred to these providers. Details can be found in the respective privacy policies of Google, Apple, Valve, or Epic.
4.4 International data transfers: Since some distribution partners are based in the USA, data may be processed outside the EU. We ensure an adequate level of data protection through Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.
4.5 California notice (CCPA): We do not sell your personal information.
4.6 Children’s policy (COPPA / GDPR-Kids): Our apps are not specifically directed at children and do not knowingly collect children’s personal data without parental consent. In Austria, consent under data protection law for information-society services is valid from the completed age of 14 (§ 4(4) DSG); in other countries this threshold ranges between 13 and 16 depending on national rules. If we become aware of data from children below the applicable age limit that was provided without parental consent, we delete it immediately.
4.7 Security: We use SSL/TLS encryption for our web communication and modern security standards within our apps.
4.8 Data erasure & retention: We store data only as long as needed to provide our services. You can request deletion of your data (e.g. high scores, linked platform IDs, or app data) at any time by emailing office@ostrongstudios.de. We delete within the statutory period unless retention obligations prevent it. This process meets Apple’s and Google’s account-deletion requirements.
4.9 Platform-specific compliance:
- Google Play Data Safety: All data is encrypted in transit (HTTPS/TLS); users can request deletion directly through us.
- Apple App Store (App Privacy): We declare in the App Store which data is collected; tracking only occurs after explicit consent (App Tracking Transparency).
- Steam (Valve): Where a game uses Steamworks, we process Steam data such as your SteamID, your public persona name, and your avatar solely to provide core features (e.g. save states, leaderboards, achievements, multiplayer). Persona name and avatar are publicly available via the Steam API in any case. Within each game we tell you which Steam data is stored and in which countries (per Valve’s Steamworks requirements).
- Epic Games: Epic Online Services are used only to provide core features (authentication, social features).
4.10 Distribution via app stores (Microsoft Store, Google Play, Steam): Our apps and games are distributed through app stores — currently the Microsoft Store and Google Play, and possibly Steam in future. This applies regardless of whether an app uses online features; even purely local apps (e.g. the Spieglein family) are distributed and updated through these stores.
When you buy, download, or update, the respective store processes your account and transaction data as an independent controller under its own privacy policy (Microsoft Store: privacy.microsoft.com; Google Play: policies.google.com/privacy; Steam/Valve: store.steampowered.com/privacy_agreement). From the stores we essentially receive aggregated or statistical data (e.g. download numbers, regions) and publicly visible reviews. Ostrong Studios does not carry out any further independent processing of personal buyer data — unless you contact us yourself.
5. The Spieglein family (current apps)
The Spieglein apps mirror screen content between devices on the same local network. All data transfer happens exclusively locally, within the same Wi-Fi/LAN. No content or metadata is transmitted to external servers — or to Ostrong Studios, Apple, Microsoft, Google, or any third party. No cookies, no tracking, no analytics/telemetry tools, and no advertising are used. The general framework in Part 4 therefore does not apply to these apps.
5.1 Spieglein (Windows/PC — receiver for Apple/AirPlay): „Spieglein“ is a Windows application that receives AirPlay streams (screen, audio, video) from Apple devices (iPhone, iPad, Mac) and displays them on the PC. Processed exclusively locally on your device:
| Type of data | Storage location | Purpose |
|---|---|---|
| Configuration (device name, optional PIN, language, audio mode) | LocalCache (settings.json) | Restoring your settings |
| Diagnostic log (technical messages) | LocalCache (uxplay.log) | Troubleshooting; only visible locally |
| Audio/video stream from the Apple device | Transient, in memory | Playback of the AirPlay stream |
| Hostnames / device identifiers of connected devices | Transient, in memory | Displaying the connection name |
Network (local only): mDNS/Bonjour (UDP 5353), AirPlay control (TCP 7000, 7001, 7100), RTP audio/video (UDP 6000, 6001, 7011). No internet connection is actively established; updates run via the Microsoft Store mechanism. Open-source components (run locally): UxPlay (GPL v3), mDNSResponder (Apache 2.0), GStreamer (LGPL), Microsoft .NET 8 / Windows App SDK (MIT). Source code: https://github.com/OstrongStudios/spieglein
5.2 Spieglein (Android sender) & Spieglein (Android) (PC receiver): The Android app „Spieglein“ captures your Android device’s screen and internal audio and sends them over Wi-Fi to the Windows receiver app „Spieglein (Android)“. Processed exclusively locally on your device:
| Type of data | Storage location | Purpose |
|---|---|---|
| Settings (resolution, language) | App’s own storage (SharedPreferences) | Restoring your settings |
| Screen content (video) and internal playback audio | Transient, in memory | Live transmission to the connected PC |
Permissions: screen capture (MediaProjection, started by you); microphone (RECORD_AUDIO — technically required to capture the internal playback audio via AudioPlaybackCapture, not the microphone itself); foreground service (keeps the transmission running); WAKE_LOCK (keeps the screen on); INTERNET (only for the local connection to the PC, no access to external servers). Network (local only): mDNS (UDP 5353) for discovery, TCP (local port) for the stream connection. No recordings are stored. Open-source components: AndroidX and Material Components (Apache 2.0); no code under copyleft licenses.
5.3 Spieglein TV (Android): „Spieglein TV“ belongs to the Spieglein family and follows the same principle: screen mirroring exclusively on the local network, with no transmission of content or metadata to external servers, no tracking, and no advertising. The details in section 5.2 apply accordingly.
5.4 Legal basis for the Spieglein family: Because the Spieglein apps do not transmit any personal data to Ostrong Studios or process any such data there, no data-protection-relevant processing takes place on our side. If you actively contact us (e.g. for support), we process your request on the basis of Art. 6(1)(a)/(b) GDPR and only for as long as necessary, at most 3 years.
6. Newsletter
6.1 Sign-up and double opt-in: On our website you can subscribe to our free newsletter, through which we keep you informed about our apps, games, and books. Sign-up uses the double opt-in procedure: after you register, we send an email to the address you provided asking you to confirm via a link. Only after this confirmation do we add you to the mailing list. If you don’t confirm, we send you nothing; unconfirmed sign-ups are deleted once no longer needed. This prevents someone from signing up with an email address that isn’t theirs.
6.2 Data processed: For sending the newsletter we process your email address. As proof of sign-up, we also log the times of registration and confirmation and the IP address used during registration. No further details are required.
6.3 Purpose and legal basis: The legal basis for processing is your consent under Art. 6(1)(a) GDPR. Logging the sign-up serves as proof of consent (Art. 7(1) GDPR) and is based on our legitimate interest in legally compliant mailing (Art. 6(1)(f) GDPR).
6.4 Withdrawal and unsubscribing: You can withdraw your consent at any time with future effect and unsubscribe. Just click the unsubscribe link in any newsletter email, or write to us informally at office@ostrongstudios.de. The lawfulness of processing carried out before withdrawal is unaffected.
6.5 Retention period: We store your data for as long as you are subscribed. After you unsubscribe, we remove your email address from the active mailing list. To prove the consent given and to prevent unwanted re-sending, we may retain the details in a limited form beyond that until you object to further storage.
6.6 Sending and disclosure: Our newsletter is sent via the email server of our provider STRATO AG (Pascalstraße 10, 10587 Berlin, Germany; smtp.strato.de). STRATO processes the transmitted data solely for the purpose of sending, on our behalf as a processor, on the basis of a data processing agreement under Art. 28 GDPR. Processing takes place within the European Union. We do not use any external newsletter or tracking service, and we do not share your data with third parties for advertising purposes.
7. Status and changes
This privacy policy is dated June 2026. We reserve the right to adapt it if our services change or legal requirements change. The current version is always available at https://ostrongstudios.de/privacy-policy.
© 2026 Ostrong Studios