Privacy Policy

1. Privacy at a Glance

This privacy policy refers to the Macro Deck website (macro-deck.app) and the Macro Deck documentation (docs.macro-deck.app). The website serves to provide information about the Macro Deck software and to offer it for download; the documentation explains how to install and use Macro Deck and how to develop plugins for it. Personal data is processed only to a minimal extent.

Both sites set no cookies, use no local storage and contain no analytics or tracking services. Your browser only connects to our own domains; content from other services, such as the GitHub and Discord figures on the website, is fetched by our servers and does not reveal your IP address to those services. The Macro Deck accounts, the Store and the Creator Portal, the desktop app and the companion app are covered by their own privacy policies, which you can open with the tabs above.

2. Controller

Responsible for data processing:

Macro Deck, Owner Manuel Mayer
Porzer Straße 142A
53859 Niederkassel
Germany

Email: legal@macro-deck.app

3. Data Collection on the Website

3.1 Hosting by Cloudflare

The website and the documentation are hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers the pages from its worldwide network and protects them against attacks and misuse. For every request, Cloudflare processes:

• IP address of the requesting device
• Date and time of the request
• Requested address
• Browser type and version and the operating system used
• Referrer URL (the previously visited page)

Cloudflare acts as our processor under a data processing agreement (Art. 28 GDPR). Browsers may also send reports about failed connections to Cloudflare (Network Error Logging), which contain the same kind of technical data. We use these data solely for technical purposes, in particular to ensure the stability and security of the sites, and do not merge them with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the technical provision and security of the website).

Requests to the few website addresses under /api/ are handled by a program on Cloudflare's network (a Cloudflare Worker), which fetches the brand assets list, the GitHub figures and the Discord member count (see section 4). When you open an English page that is also available in other languages without coming from another page of this website, the Worker reads the language settings your browser sends (Accept-Language) and forwards you to the page in your language if there is one. It does not store this information, and the Worker does not keep logs.

3.2 Cookies and Local Storage

This website does not set any cookies and does not store any data in your browser's local or session storage. Accordingly, no consent banner is required and no consent pursuant to § 25 TDDDG is obtained.

3.3 Web Analytics

This website does not use any web analytics or tracking services. Your usage behaviour is not analysed and no usage profiles are created.

4. External Services and Content

Some parts of the website show information from other services. Our Cloudflare Worker (see section 3.1) fetches this information itself and passes it on to your browser, so these services only receive requests from Cloudflare and never your IP address or other data about you:

• GitHub: the star count of the Macro Deck repository and the download link and version of the latest Macro Deck 2 release, from the GitHub API (api.github.com).
• Discord: the member count of our Discord server, from the public Discord invite API (discord.com).
• Macro Deck assets: the list of brand assets on the branding page, from assets.macro-deck.app. The logo previews on that page are loaded by your browser from assets.macro-deck.app directly, which is also delivered by Cloudflare (see section 3.1).

4.1 Twitch (only on the Twitch authentication page)

The page /twitchauth is used exclusively to connect a Twitch account with the Macro Deck Twitch plugin. When this page is called up, connections are established to services of Twitch (Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA, a subsidiary of Amazon). The authorisation is carried out via the official Twitch OAuth procedure; the resulting access token is processed in your browser and is not stored by us. This page is only called up when you actively start the connection process. Further information: Twitch Privacy Notice

4.2 External Links

This website contains links to external third-party websites (e.g. GitHub, GitHub Sponsors, Discord, Google Play, the App Store and Ko-fi). We have no influence on the data processing of those providers. Data is only transmitted to them when you actively click on the respective link. Please refer to the privacy policies of the linked sites.

4.3 Third Country Transfers

Cloudflare (section 3.1) and Twitch (section 4.1) are based in the USA, and Cloudflare may process data in data centres outside the European Union. Cloudflare is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the adequacy decision of the European Commission (Art. 45 GDPR); in addition, our data processing agreement with Cloudflare contains the standard contractual clauses of the European Commission (Art. 46 para. 2 lit. c GDPR). Twitch processes your data under its own responsibility when you use the Twitch authentication page.

5. Data Security

All data is transmitted in encrypted form (HTTPS/TLS) to prevent unauthorised access. Cloudflare protects the sites against attacks and misuse.

6. Storage Duration

We do not keep our own logs of page requests. Cloudflare processes request data only as long as necessary to deliver the pages and to protect its network.

7. Legal Basis for Processing

The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR). The relevant legal basis is:

• Art. 6 para. 1 lit. f GDPR – Legitimate interest (hosting and protection of the sites by Cloudflare, section 3.1; Twitch authentication page, section 4.1)

8. Rights of Data Subjects

You have the right to:

• Request information about the stored personal data (Art. 15 GDPR).
• Request correction of inaccurate data (Art. 16 GDPR).
• Request deletion of your data (Art. 17 GDPR).
• Request restriction of processing (Art. 18 GDPR).
• Object to data processing (Art. 21 GDPR).
• Lodge a complaint with a data protection supervisory authority.

To exercise these rights, please contact us using the contact details given under 2.

9. Contacting the Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you can contact the competent data protection authority:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de/

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy if necessary. The current version is always available on this website. Last updated: 8 October 2026.