Information pursuant to § 5 DDG
Henric Steuernagel
Hessenring 16
61200 Wölfersheim
Germany
E-Mail: contact@13delusions.com
Responsible for editorial content pursuant to § 18 (2) MStV (Germany):
Henric Steuernagel, Hessenring 16, 61200 Wölfersheim, Germany.
TrailerMachine is a non-commercial hobby project. External links and embedded videos lead to content
controlled by their respective providers. Their trademarks, videos and other protected material remain
the property of the respective rights holders.
Last updated: 25 August 2026. The controller for data processed directly by this website is the website
operator named above. TrailerMachine does not offer public user accounts and does not request names,
addresses or payment data from ordinary visitors.
When the site is requested, the hosting provider and this application may process technical information
required to deliver and secure the service. Depending on the request, this can include:
- IP address
- date and time, requested URL and referrer
- browser, operating system and user-agent information
- error and security events
Processing for reliable delivery, troubleshooting, abuse prevention and protection from automated attacks
is based on the operator's legitimate interests under Art. 6 (1) (f) GDPR. Hosting-provider retention
periods are governed by that provider's own policies.
TrailerMachine records aggregate visitor, online-session, video-start and watch-time statistics. From
version 2.0.3 onward, actual playback seconds are also added to the playlist from which the running video
originated. These playlist totals are stored in aggregate form and are not linked to a public account,
name or e-mail address. A short-lived random session identifier is used to recognise an active browser tab.
The detailed statistics log may contain IP address, approximate country/region/city, timestamp, requested URL,
referrer and user agent. It is limited to the most recent 100 entries. Session-duration data are removed after
24 hours; aggregate counters remain until they are manually reset. These statistics support operation and
improvement of the hobby project on the basis of Art. 6 (1) (f) GDPR.
The public player uses browser local storage for a random visitor marker, local visit/watch counters and the
optional personal video list; these values remain until the visitor clears the site data. Session storage holds
a random tab-session identifier and is cleared when the tab session ends. The public player does not set its own
cookie. The protected administration area sets a strictly necessary session cookie after the login page is opened.
To block abusive traffic by country, the application determines the country code from hosting or Cloudflare
headers, a local GeoIP extension, or – only when no local result is available – a limited query to
IP-API.com. In the latter case the requesting IP address is transmitted to IP-API.com. Results are cached under
a shortened hash of the IP address for up to 14 days; unsuccessful lookups for one hour.
Blocked requests are logged with country code, URL, user agent and a shortened IP hash for security analysis.
These records are automatically limited to 30 days and 1,000 entries. IP-API states that anonymous API request
IP addresses are held in memory for up to one minute and that requests are not logged.
IP-API privacy information
Accounts for the protected administration and editorial tools store a username, one-way password hash, role,
approval status and necessary audit information. To prevent bulk and brute-force login attempts, failed attempts
are temporarily counted by hashed IP address, hashed username and their combination. These counters are removed
expire after no more than 30 minutes and are purged during the next login check. Security audit entries remain
until they are manually deleted. Passwords are never stored in plain text.
Videos are played through the YouTube iframe service operated by Google. Loading or playing a video connects
the browser directly to Google/YouTube. Google may receive the IP address, device and browser information,
referrer and playback interactions and may set its own cookies or similar identifiers. If the visitor is signed
into Google, activity may be associated with that account. Processing and possible international transfers by
Google are governed by Google's own terms and privacy policy:
Google Privacy Policy
Buy Me a Coffee and PayPal are external links. No payment form or payment data is processed by this website.
When a visitor follows one of these links, the selected provider processes the request and any payment under
its own responsibility and privacy terms.
Buy Me a Coffee Privacy Policy
PayPal Privacy Statement
Subject to the applicable GDPR requirements, you may request access, rectification, erasure, restriction,
portability or object to processing. You may also lodge a complaint with a competent data-protection authority.
Requests concerning data processed directly by TrailerMachine can be sent to contact@13delusions.com.
Requests concerning YouTube, Buy Me a Coffee, PayPal or IP-API should also be addressed to the respective provider.