Privacy Policy
Protecting personal data is important to us. This privacy policy explains which personal data is processed when using Planetkey.net, for what purposes, and what rights visitors and registered users have.
Planetkey.net is a price comparison portal for computer games, game keys, software, gift cards and other digital products. The website also offers user accounts, wishlists, price alerts and additional information services.
1. Controller
The controller responsible for data processing is:
Planetkey.net
Owner: Stefanie Offermanns
Hammstr. 22A
52222 Stolberg
Germany
Email: see legal notice
Website: https://www.planetkey.net
2. General information on data processing
We process personal data only in accordance with applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Depending on the type of processing, we rely on the following legal bases:
- Art. 6(1)(a) GDPR – Consent
- Art. 6(1)(b) GDPR – Performance of a contract or steps prior to entering into a contract
- Art. 6(1)(c) GDPR – Compliance with legal obligations
- Art. 6(1)(f) GDPR – Legitimate interests
Our legitimate interests include, in particular, the secure and reliable operation of the website, provision of our price comparison service and protection against misuse.
Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations.
3. Hosting and server logs
When our website is accessed, technically necessary information is processed to deliver the requested content and ensure the security of our systems.
This may include:
- IP address of the accessing device
- Date and time of access
- Pages and files accessed
- Browser type and operating system
- Referrer URL, where transmitted
- HTTP status codes and technical connection information
Processing is based in particular on Art. 6(1)(f) GDPR.
Server administration is carried out, among other things, using Plesk. Server logs are stored in accordance with the configured retention and rotation rules and subsequently deleted, unless longer retention is necessary to investigate security-related incidents.
Where log data is evaluated for statistical purposes, we comply with GDPR requirements.
4. Cloudflare
We use Cloudflare for the technical delivery, protection and acceleration of our website.
Cloudflare may be used in particular to defend against attacks, detect automated access and deliver cached content.
In this context, IP addresses, technical connection information, security events and other data necessary for delivery may be processed.
The provider is Cloudflare, Inc., USA.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
Where Cloudflare uses technically necessary cookies or comparable storage technologies, their use is subject to the applicable legal requirements.
Further information: https://www.cloudflare.com/privacypolicy/
5. Cookies and local storage technologies
Planetkey uses cookies and comparable technologies where necessary for certain website functions.
These may include session cookies for logging in, maintaining a user session and security functions.
Strictly necessary storage and access operations may be permitted without consent under Section 25(2) TDDDG.
Where cookies or comparable technologies are additionally used for analytics, advertising or tracking purposes, we comply with the applicable consent requirements.
Users can delete or block stored cookies in their browser settings. This may restrict individual functions.
6. User accounts and registration
Users can create an account on Planetkey to access additional functions.
In particular, we process the data provided during registration, login credentials and settings associated with the account.
Passwords must be protected by appropriate technical security measures.
Processing to provide and manage the user account is based on Art. 6(1)(b) GDPR.
Data is generally stored for as long as the user account exists or further storage is required due to legal obligations or legitimate claims.
Users may request deletion of their account.
7. Wishlists and price alerts
Registered users can save games and other products to a wishlist and set up price alerts.
For this purpose, we process the association with the user, saved products, any specified target prices and necessary notification data.
This information is used to provide the functions requested by the user.
The legal basis is Art. 6(1)(b) GDPR.
When a price alert is deactivated or a user account is deleted, data no longer required for these purposes is deleted in accordance with applicable legal provisions.
8. Price comparison and affiliate links
Planetkey compares offers from independent online retailers.
When users click on an offer, they are redirected to the respective retailer. Affiliate networks may be used to attribute potential referral commissions.
In particular, the following data may be processed:
- Offer accessed
- Time of redirection
- Technical connection data
- Affiliate and offer identifiers
Some redirects may take place through external affiliate networks, such as impact.com.
Redirection to an external retailer takes place as a result of a deliberate action by the user.
Where legally permissible, processing by Planetkey is based on Art. 6(1)(f) GDPR. Our legitimate interest is operating and financing the free price comparison service.
When visiting external retailers and affiliate networks, their privacy notices also apply. Additional data processing and storage technologies may be used there.
9. Umami Analytics
We use Umami Analytics to statistically evaluate the use of our website. This analysis helps us improve our price comparison service both technically and in terms of content.
Umami Analytics is operated on our website without cookies. Umami does not place cookies on visitors' devices.
In particular, the following information may be processed for statistical analysis:
- Page views: Pages visited and time of use
- Technical information: For example, browser, operating system and device type
- Sources and campaigns: Referrer information and, where applicable, campaign parameters from accessed URLs
- IP addresses: Technically necessary IP addresses may be processed during transmission; permanent storage of complete IP addresses in Umami analytics data is not intended.
The evaluations are used to compile usage statistics. We do not use Umami to create individual advertising profiles.
Umami Analytics is operated through our technical service provider emsland.app. The principles regarding technical service providers and data security described in this privacy policy apply to processing.
Legal basis: Where personal data is processed, we rely on Art. 6(1)(f) GDPR. Our legitimate interest is the statistical analysis and improvement of our services. Whether consent is additionally required depends on the actual technical implementation and legal requirements.
Further information about Umami Analytics is available at: umami.is
10. Audience measurement and visitor statistics
We may carry out statistical analyses of the use of our price comparison service, for example to identify frequently visited games, categories and offer pages.
Where existing server logs are used for this purpose, processing is carried out in compliance with data protection requirements.
We prefer exclusively aggregated analyses without permanent identification of individual visitors.
Where personal data is processed on the basis of legitimate interests, this is done in accordance with Art. 6(1)(f) GDPR, taking into account the interests and rights of data subjects.
For tracking technologies requiring consent, appropriate consent is obtained before their use.
11. Newsletter
Where we offer a newsletter, users can subscribe voluntarily.
For delivery, we process in particular the email address provided and the information necessary to document registration.
Registration generally takes place using a confirmation procedure (double opt-in).
The legal basis for sending promotional newsletters is generally Art. 6(1)(a) GDPR.
Consent can be withdrawn at any time with effect for the future, in particular via an unsubscribe link in the newsletter.
After unsubscribing, data used for active delivery is deleted unless statutory retention obligations or legitimate reasons require limited further storage.
Personalised analysis of newsletter opens and link clicks takes place only where a sufficient legal basis exists and any necessary consent has been obtained.
12. Contact
When you contact us by email or through our contact form, we process the information submitted to handle your enquiry.
This may include your name, email address, message content and time of contact.
Depending on the enquiry, the legal basis is Art. 6(1)(b) or (f) GDPR.
The data is deleted as soon as it is no longer necessary to process the enquiry and no statutory retention obligations prevent deletion.
13. Reviews and comments
Where users can publish reviews or comments, we process the information and content necessary for this purpose.
This may include the displayed username, published content, publication time and necessary technical security data.
Processing to provide the respective function is based on Art. 6(1)(b) GDPR and, where applicable, to prevent misuse under Art. 6(1)(f) GDPR.
Publicly posted contributions may be visible to other visitors.
14. AI-assisted search and chat functions
Planetkey may provide AI-assisted features that allow users to search for games, platforms, shops and prices, for example.
To process an enquiry, the message entered, identified search terms, product associations and technical session information may be processed in particular.
Where necessary, enquiries may be transmitted to an external AI service provider.
We use the information transmitted to process the enquiry, provide the chat function and, where applicable, analyse technical errors and prevent misuse.
Depending on the function, processing is based on Art. 6(1)(b) or (f) GDPR.
Users should not enter passwords, payment information or unnecessary sensitive personal data into the chat function.
15. Planetkey Chrome extension
Planetkey offers a browser extension for identifying games and comparing retailer offers.
On supported product pages, the extension may read game titles or other necessary product information and transmit it to Planetkey to provide matching price comparison results.
For manual searches, the search term entered is processed.
For its intended search and offer functions, the extension does not transmit the complete shop page address as a search parameter.
Technically necessary connection data may be processed when accessing Planetkey.
When a user deliberately clicks on a retailer offer, redirection may take place via an affiliate link.
According to its currently described functionality, the extension does not use its own advertising or analytics tracking library and does not create a permanent browsing history.
Processing is carried out to provide the requested functions and ensure secure operation of the service.
16. External links and content
Our website may contain links to external websites, online retailers, review platforms and social networks.
The mere presence of an ordinary external link does not automatically transmit personal data to the destination provider.
When an external website is accessed, its privacy provisions also apply.
Where external content such as videos or review widgets is embedded directly, a connection to the respective provider may already be established when it loads.
Such integrations are implemented in accordance with statutory data protection requirements.
Embedded videos and social media posts
Our website may embed content from external platforms such as YouTube, Instagram, Facebook and X (formerly Twitter). This may include videos, images and posts that supplement our editorial content.
To protect your privacy, this content is not loaded automatically. Instead, we display a placeholder. A connection to the provider's servers is established only after you expressly agree to display the relevant external content.
When external content is loaded, your IP address, browser information, technical connection data and information about the page visited may be transmitted to the provider. Providers may also use cookies or similar technologies and may link data to existing user accounts.
YouTube
We may use YouTube, a Google service, to embed videos. Where technically possible, we use privacy-enhanced mode. Even in this mode, personal data may be transmitted to and processed by Google after you activate a video.
Further information: https://policies.google.com/privacy
Instagram and Facebook
We may use Meta Platforms services to embed Instagram and Facebook posts. After you agree to display a post, personal data may be transmitted to and processed by Meta.
Further information: https://www.facebook.com/privacy/policy/
X (formerly Twitter)
We may embed posts from X. When you activate them, technical connection data and information about the use of the embedded content may be transmitted to the platform operator.
Further information: https://x.com/en/privacy
Legal basis and consent
External content requiring consent is activated on the basis of your freely given consent under Art. 6(1)(a) GDPR and, where applicable, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
You may withdraw your consent at any time with effect for the future. Without consent, the relevant external content will not be loaded. The other functions of our website remain available.
Use of external platforms may involve transfers of personal data to countries outside the European Economic Area, particularly the United States. Further information is provided in the section on recipients and transfers to third countries.
17. Trustpilot
Planetkey may display reviews from Trustpilot or link to its review profile there.
The provider is Trustpilot A/S, Denmark.
When an ordinary link to Trustpilot is accessed, Trustpilot's privacy provisions apply.
Where an external review widget is embedded directly, technical connection data may be transmitted to Trustpilot when it loads. Any access requiring consent takes place only after valid consent has been obtained.
Further information: https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms
18. Recipients and transfers to third countries
Personal data may be transmitted, to the extent necessary, to technical service providers, hosting providers, security service providers and other recipients named in this privacy policy.
Where service providers process personal data on our behalf, the statutory requirements for processing on behalf of a controller are observed.
When transferring personal data to countries outside the European Economic Area, we comply with the requirements of Art. 44 et seq. GDPR.
These may include adequacy decisions by the European Commission or suitable contractual safeguards.
19. Rights of data subjects
Subject to the statutory requirements, data subjects have the following rights in particular:
- Access to personal data processed (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of personal data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to certain processing activities (Art. 21 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
To exercise these rights, data subjects can use the contact options provided in the legal notice.
Information about your right to object under Art. 21 GDPR
Right to object on grounds relating to your particular situation
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you where such processing is based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.
If you object, we will no longer process the personal data concerned unless we demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or unless processing is necessary for the establishment, exercise or defence of legal claims.
Objection to direct marketing
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time without giving reasons. This also applies to profiling insofar as it is related to such direct marketing. Following an objection, your personal data will no longer be processed for direct marketing purposes.
Where to send an objection
Planetkey.net
Owner: Stefanie Offermanns
Hammstr. 22A
52222 Stolberg
Germany
You may also submit your objection using the contact details provided in our legal notice.
20. Right to lodge a complaint with a supervisory authority
Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data violates data protection law.
The following authority is responsible in particular for our registered business location:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Website: https://www.ldi.nrw.de
21. Data security
We use appropriate technical and organisational security measures to protect personal data.
These include, in particular, encrypted HTTPS connections, access restrictions and measures to protect our server infrastructure.
Security measures are reviewed in light of technical developments and existing risks.
22. Changes to this privacy policy
We may amend this privacy policy if our services, technologies used or legal requirements change.
The current version is published on this website.
Privacy when using the Android app “Planetkey - Key Preisvergleich”
These additional privacy notices apply to our Android app “Planetkey - Key Preisvergleich” (package name: de.planetkey.app). The controller and contact for privacy enquiries is the Planetkey operator named in this privacy policy.
Retrieving game information and searching
The app retrieves game information, offers and price histories from Planetkey over encrypted HTTPS connections. In particular, search terms entered, requested game and offer pages and technically necessary connection data, including the IP address, are transmitted to our servers.
Processing serves to provide the requested app functions. The legal basis is Art. 6(1)(b) GDPR insofar as processing is necessary to perform the user agreement. Technically necessary security and log data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our service.
The app uses the same technical infrastructure as the Planetkey website for its server-side functions. Information on hosting, server administration and security service providers can be found in particular in Sections 3 and 4 of this privacy policy.
The same retention and deletion rules apply to server-side data processed through the app as to data processed when using the Planetkey website. This applies in particular to user accounts and server-side access and error logs. Server logs are stored according to the configured retention and rotation rules and then deleted unless longer retention is necessary. Information on recipients and any transfers to third countries can be found in Section 18 of this privacy policy.
Signing in with an existing Planetkey account
Game search and price comparison can be used without signing in. When users sign in voluntarily, the credentials entered are transmitted to Planetkey over HTTPS and processed for authentication. The app does not permanently store the password on the device.
Session cookies are stored in the app's private storage to manage login sessions. The legal basis for processing for account login is Art. 6(1)(b) GDPR.
The provisions of this privacy policy regarding Planetkey user accounts apply to the storage and deletion of server-side account data. Uninstalling the app does not delete the Planetkey account. Requests to delete an account can be submitted using the contact options in the legal notice.
Storage on the device
The app stores the selected language and personal wishlist locally on the device. The wishlist is not synchronised with the Planetkey user account. This data is used solely to provide the selected functions and remains stored until it is removed or the app data is deleted. Local app data is generally removed when the app is uninstalled. Android backups are disabled for this app.
If you use the copy function for a voucher code, the selected code is copied to the device's clipboard.
Opening retailer offers
When you select a retailer offer, the app opens the corresponding link in an external browser. Some offer links contain affiliate identifiers or lead through affiliate networks. The respective retailer and participating networks may process connection data and attribution parameters.
Further information can be found in the “Price comparison and affiliate links” section of this privacy policy. The respective privacy notices of the retailers also apply to subsequent use of their websites.
Analytics, permissions and notifications
The current app version does not contain analytics or advertising SDKs or the Firebase SDK. It does not offer push notifications and does not request access to location, contacts, camera or microphone.
Your rights
The data protection rights described in this privacy policy also apply to the processing of personal data in connection with the app. For requests for access, rectification or deletion and other privacy questions, please contact the privacy contact indicated there.
Last updated: 15 November 2026