// Legal
For playxalli.com, in accordance with the EU General Data Protection Regulation (GDPR).
webtribe GesbR, Lobenhauerngasse 11/2/21, 1170 Vienna, Austria. Email: team@webtribe.dev. webtribe GesbR operates the game Xalli and this website.
Protecting your personal data matters to us. We process your data only on the basis of the applicable law (GDPR, the Austrian Data Protection Act and TKG 2021). Non-essential services (in particular web analytics) are loaded only with your active consent.
This website is hosted by Vercel Inc. When the site is accessed, technically necessary data (IP address, date/time, the resource requested, user agent) is processed in server logs to ensure the delivery and security of the site. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. A data-processing agreement is in place with the host; any transfer to third countries (USA) takes place on the basis of the EU Standard Contractual Clauses.
When you join the waitlist, we process the data you enter in the form — your name, your email address and your platform preference (iOS / Android / Steam) — in order to manage the beta waitlist and to send you a confirmation email. Using a double opt-in, we only add you to the list once you confirm via the link in that email; afterwards we may send you occasional updates about Xalli (the beta, launch). The legal basis is your consent under Art. 6(1)(a) GDPR. The signup and the emails are handled through marktbase, our own platform operated by webtribe GesbR, with email delivery by the processor Resend, Inc. You can withdraw your consent and unsubscribe at any time with effect for the future (via the unsubscribe link in every email). We delete this data once it is no longer required for the purpose and no statutory retention obligations apply.
This website uses cookies and comparable technologies (e.g. localStorage). Technically necessary storage (including saving your cookie choice) is used on the basis of our legitimate interest in a functioning website (Art. 6(1)(f) GDPR; § 165(3) TKG 2021). Non-essential processing (in particular web analytics via Google Tag Manager and Google Analytics) is used only with your active consent (Art. 6(1)(a) GDPR; § 165(3) TKG 2021), which we obtain via a cookie banner. Without your consent these services are not loaded. You can withdraw a consent you have given at any time with effect for the future (via "Cookie settings" in the footer).
We use Google Tag Manager (GTM) and Google Analytics 4 (GA4) (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). Google Tag Manager is used for the technical management and delivery of tags and does not itself store any analytics cookies. Google Analytics 4 is used for the statistical analysis of usage behaviour (reach measurement); in doing so, device/browser data, a shortened (anonymised) IP address, usage/event data and pseudonymous identifiers are processed. The legal basis is solely your consent (Art. 6(1)(a) GDPR; § 165(3) TKG 2021). GTM and GA4 are loaded only after your active consent via the cookie banner; without consent there is no integration. We use Google Consent Mode v2 so that Google's data processing is controlled according to your selection. Any transfer to the USA takes place on the basis of the EU Standard Contractual Clauses.
We use carefully selected service providers as processors, with whom data-processing agreements are in place: Vercel Inc. (hosting), Resend, Inc. (email delivery for the waitlist) and — after your consent — Google Ireland Limited (web analytics). Where data is transferred to third countries (in particular the USA), this takes place on the basis of the EU Standard Contractual Clauses.
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations. Your cookie consent is stored for documentation purposes for up to 12 months; after that we ask again.
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. You can withdraw consent you have given at any time. To do so, please contact team@webtribe.dev.
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible in Austria is the Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna, email dsb@dsb.gv.at.
Last updated: July 2026 · See also our Legal Notice.