Privacy policy

Last updated: October 29, 2026

This policy explains what personal data we process when you visit this website or interact with the social media accounts we operate, why we process it, and what rights you have.

Who is responsible

This website

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers located in Germany. When you visit a page, the server processes your IP address, the date and time, the page requested and your browser’s user agent. We need this to deliver the page and to keep the server secure (Art. 6 (1) (f) GDPR). Log entries are deleted after 14 days at the latest.

This website uses no cookies, no analytics or tracking tools, and loads no fonts, scripts or other content from third parties.

Our social media accounts

We operate accounts for virtual characters on Instagram, TikTok and YouTube, as well as related Facebook Pages. When you interact with these accounts, for example by commenting, sending a direct message or mentioning an account, we process:

• your username and the public profile information the platform shows us,
• the content of your comments and messages, and
• the time and context of the interaction.

We also receive aggregated statistics from the platforms, such as reach, views and the approximate age, gender and location distribution of our audience. These statistics do not identify individual people.

We use this data to moderate our accounts, to respond to you, and to understand which content works. The legal basis is our legitimate interest in running and improving our accounts (Art. 6 (1) (f) GDPR).

The platforms process your data under their own privacy policies, which we do not control. For statistics about our Instagram accounts and Facebook Pages, we and Meta Platforms Ireland Limited are joint controllers under Art. 26 GDPR, based on Meta’s Page Insights Controller Addendum. Meta is primarily responsible for this processing and for handling your rights requests in that context.

We access the platforms only through their official interfaces (APIs). For YouTube, we use the YouTube API Services; the YouTube Terms of Service and the Google Privacy Policy apply.

Use of artificial intelligence

Our characters are virtual and their content is generated with AI. We also use AI to sort incoming comments and messages and to draft replies. A human reviews every reply before it is sent. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects (Art. 22 GDPR). We do not use your comments or messages to train AI models.

Service providers

We use the following service providers:

• Hetzner Online GmbH, Germany: hosting of this website and of the systems that manage our accounts, under a data processing agreement (Art. 28 GDPR).
• Anthropic (Claude API): sorting comments and messages and drafting replies, under a data processing agreement (Art. 28 GDPR). Data may be transferred to the United States; such transfers are based on the EU Commission’s adequacy decision for the EU-U.S. Data Privacy Framework or on standard contractual clauses (Art. 45, 46 GDPR).
• Telegram: an internal messaging channel used to review drafted replies before they are sent. Review messages may contain the text of your comment or message and your username.

Tools we use to create images, videos and voices for our characters do not receive data about you.

How long we keep data

Comments and messages stored in our own systems are deleted 12 months after the interaction, unless we need them longer to establish or defend legal claims or to protect the safety of others. Aggregated statistics that do not identify you are kept without time limit. Data held by the platforms is subject to their retention rules.

Adults only

Our accounts are intended for adults aged 18 and over. If we learn that we are interacting with a minor, we keep the interaction neutral and do not continue it.

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), and to receive it in a portable format (Art. 20).

Right to object: where we process your data based on legitimate interests, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing unless we have compelling legitimate grounds.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Sächsische Datenschutz- und Transparenzbeauftragte (Saxony’s data protection authority).

Deleting your data

To have the data we hold about you deleted, email webmaster@alteredtalents.com with your username and the platform you used. We will delete your data from our systems within 30 days and confirm by email. To delete data held by a platform, use that platform’s own settings.

Changes

We update this policy when our processing changes. The current version is always available on this page.