Last updated: September 2026. This notice describes processing for Cibola 8 (https://cibola.world / https://app.cibola.world) under the GDPR. It is not legal advice.
1. Controller
Jan Weigmann
c/o Autorenglück #37909
Albert-Einstein-Straße 47
02977 Hoyerswerda
Email: Horizons@cibola.world
2. Purposes and legal bases
- Website delivery (marketing, FAQ, videos): legitimate interests, Art. 6(1)(f) GDPR.
- Account / Patreon OAuth sign-in: contract performance, Art. 6(1)(b) GDPR.
- Patreon memberships (current payment path): billing and cancellation run on Patreon. We receive membership status to unlock access; Patreon processes payment data. Our basis: Art. 6(1)(b) GDPR.
- AI generation, packs, threads, files: contract performance, Art. 6(1)(b) GDPR.
- Optional mana purchases via Lemon Squeezy (only if enabled): contract performance and legal retention, Art. 6(1)(b)/(c) GDPR.
- Locale cookie: language choice; Art. 6(1)(f) GDPR / § 25(2) TDDDG.
- Session / login cookies: authentication and CSRF protection, § 25(2) TDDDG.
3. Data categories
- Patreon identifiers and contact data (e.g. name, email, Patreon ID, tier/pledge status)
- Usage data and — if enabled — mana purchase transaction data
- Content you submit or generate (prompts, images, text, packs, threads, uploads)
- Technical data in ordinary hosting logs (IP, user agent, timestamps)
4. Recipients
- Patreon — authentication and current membership billing (patreon.com/Cibola); Patreon’s privacy terms also apply to payment processing.
- Lemon Squeezy — only if mana packs are enabled (Merchant of Record).
- AI / image providers (e.g. OpenAI, Replicate and other models) — prompts and media for fulfillment.
- Hosting / infrastructure for Cibola 8.
Transfers to third countries (e.g. the US) rely on appropriate safeguards (e.g. EU-US Data Privacy Framework and/or SCCs), as applicable.
5. Retention
We keep account and content data while your account is active or until you delete items, and as required by law. Membership payment records sit with Patreon. Contact us at Horizons@cibola.world.
After account erasure we may retain a minimized record (hashed Patreon id / email and anonymized mana usage totals) to prevent free-allowance abuse and to handle billing disputes. Content such as prompts, images, and chats is removed from our systems subject to backups and processor retention.
6. Cookies
No third-party analytics or ad cookies. Session, CSRF, and locale cookies are required for operation or language choice. Fonts are self-hosted (no Google Fonts requests).
7. Your rights
Access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority. Contact Horizons@cibola.world. We verify the request (e.g. from your account email) and aim to respond within 30 days. For access/portability we can provide a downloadable archive of Cibola-held data. Erasure removes your content; unused mana is forfeited and is not a refund. Processor copies (Patreon, AI providers, hosting) may remain under their policies.
8. Age
Adults only (including optional NSFW controls). Do not use the service if you are under 18.