Last updated: September 2026
Responsible for data processing on westream.at:
Duality Beyond Studios
Werftstr. 139
26382 Wilhelmshaven
Germany
Email: kontakt@dualitybeyond.de
This website is hosted by lima-city. When you visit the site, the hosting provider processes technically necessary access data (e.g. IP address, time of access) in server log files to ensure the site runs reliably.
westream.at uses only technically necessary cookies. There is no tracking and no integration of ad networks or third-party analytics tools.
| Name | Purpose | Duration |
|---|---|---|
| PHPSESSID (session cookie) | Login session and CSRF protection (protects forms against abuse) | Until end of browser session |
| Language preference | Remembers the chosen language (German/English); also stored on the account for registered users | Session, permanent on account for registered users |
| ws_age_<username> (age confirmation) | Only set when a creator has marked their own profile page as 18+ and the visitor confirmed their age. Used for minor protection so confirmation isn't required on every visit. | 24 hours |
| ws_cookie_notice_seen (localStorage, not a cookie) | Remembers locally in the browser that the cookie notice was seen. Never sent to the server. | Until browser storage is cleared |
When registering a creator account, the following data is processed: email address, chosen username, and a password hash (the password itself is never stored in plain text). The email address is used to send a confirmation link and for account security. Legal basis is performance of the usage agreement (Art. 6(1)(b) GDPR).
Creators may voluntarily upload profile pictures, header banners and background images, and add profile text, a tagline, and links. This content is stored on the server and is publicly accessible via the respective profile URL for as long as the account exists.
Under the GDPR, users have in particular the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). An informal email to the contact address above is sufficient to exercise these rights. Users also have the right to lodge a complaint with a data protection supervisory authority.