Last updated: October 2026. This page explains which data is processed when you visit mapplebox.com. Short version: this site uses no tracking, no advertising cookies and no analytics tools. The only external service is a spam check by Cloudflare when you comment (see section 4).
1. Controller
Lion Stark (legal name: Lion Glotz), c/o unholy.gg, Rykestr. 24, 10405 Berlin, Germany
Email: contact@lionstark.com
2. Hosting and server log files
The website runs on a server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement is in place with IONOS.
With every request the server automatically stores: IP address, date and time, the page requested, referrer, browser and operating system. This is technically necessary to deliver the site and protect it from attacks (Art. 6(1)(f) GDPR). Log files are deleted or anonymized after 30 days at the latest.
3. Cookies
This site sets no cookies for regular visitors. Technically necessary cookies are only set if you explicitly agree, when commenting, that your name and email are remembered for your next comment (stored for one year), or when you log in to the editing system.
4. Comments
When you write a comment, the comment, your name, your email address (not public) and the time are stored. The legal basis is your consent (Art. 6(1)(a) GDPR). To fight spam we use the Antispam Bee plugin, which checks comments only locally on our server and does not store IP addresses. Comments are kept until you ask for them to be deleted. Profile pictures from external services (Gravatar) are not loaded.
On pages with a comment form and at login we also use Cloudflare Turnstile by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether a human or a bot submits the form, usually without you having to click anything. For this, your browser loads a script from challenges.cloudflare.com and sends technical data to Cloudflare, including your IP address and details about your browser and device. According to Cloudflare, this data is only used to fight spam and bots and not for advertising or tracking. The legal basis is our legitimate interest in a spam-free website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. More in Cloudflare’s Turnstile privacy policy.
5. Embedded videos (YouTube)
YouTube videos only load when you actively click them. Before that, no data is sent to YouTube. After the click, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, processes data such as your IP address; this can include a transfer to the USA (Data Privacy Framework). The legal basis is your consent by clicking (Art. 6(1)(a) GDPR).
6. Affiliate links
Links marked with an asterisk (*) are affiliate links. Simply visiting our site sends no data to retailers. Only when you click such a link can the retailer or affiliate network set cookies on its own website to attribute a purchase to our site. That retailer’s privacy policy applies. We receive no personal data about you, only information about the commission.
We take part in the Amazon Associates Program (Amazon.com Services LLC, 410 Terry Ave N, Seattle, WA 98109, USA). If you click an Amazon link, Amazon may set cookies to see that you came from our site and to attribute the commission. The legal basis is our legitimate interest in funding the site (Art. 6(1)(f) GDPR). Details in Amazon’s privacy notice. As an Amazon Associate I earn from qualifying purchases.
7. Fonts
This site does not load fonts from external servers (such as Google Fonts).
8. Contact by email
If you email me, I process your details to answer your request (Art. 6(1)(b) or (f) GDPR). Emails are deleted once they are no longer needed and no statutory retention periods apply.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time with effect for the future. An email to contact@lionstark.com is enough.
You can also lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.