Privacy Policy

SL Book – The unofficial Second Life Book
https://sl-book.com
Last updated: May 2026

---

1. Data Controller

SL Book is a hobby project and is not affiliated with Linden Research, Inc. or Second Life. The platform is operated privately by an individual, not by a company.

SL Book – a hobby project
Email: privacy@sl-book.com
Website: https://sl-book.com

---

2. General Principles of Data Processing

We process personal data of our users only to the extent necessary to provide a functional platform and its associated features and services. All processing of personal data is carried out in compliance with the General Data Protection Regulation (GDPR) and applicable national data protection legislation.

---

3. Server Log Files

3.1 Description and Scope

Each time our website is accessed, our system automatically collects data and information from the requesting computer. The following data is collected:

• Browser type and version
• Operating system of the user
• Internet service provider of the user
• IP address of the user (anonymized or full, depending on configuration)
• Date and time of access
• Referring websites (from which the user accessed our site)
• Pages accessed via our website

3.2 Legal Basis

The legal basis for the temporary storage of this data and log files is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the technical operation and security of the platform.

3.3 Retention Period

Data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of log files, this is no later than 30 days after the relevant session has ended.

---

4. Registration and User Account

4.1 Description and Scope

Users may register on our platform by providing personal data. The data entered in the registration form is transmitted to us and stored. The following data is collected upon registration:

• Email address
• Username chosen by the user
• Password (stored in encrypted form)
• Date and time of registration

4.2 Linking with Second Life and Third-Party Services

Users may link their accounts to Second Life avatars and third-party services (e.g., Primfeed). In this context, the following additional data may be stored:

• Second Life avatar name(s) and UUID(s)
• Linked external accounts (e.g., Primfeed username)
• User-created notes, tags, and categories associated with linked avatars or contacts

The linking of third-party services is carried out solely at the explicit initiative of the user. We are not responsible for the data protection practices of the respective third-party providers.

4.3 Legal Basis

The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract).

4.4 Retention Period

Data is deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when a user deletes their account. An account can be deleted at any time via the profile settings.

---

5. Processing of Second Life Resident Data

5.1 Description

SL Book processes publicly available data from Second Life, in particular:

• Avatar names and UUIDs (publicly available within Second Life)
• Profile pictures (where publicly set in Second Life)
• Account age (in days since the SL account was first created)

This data is retrieved from the public Second Life API and displayed on our platform.

5.2 Legal Basis

The legal basis for processing publicly available data is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest consists in providing users with a management and overview platform for their Second Life activities. Only data that has been made publicly accessible by the data subjects themselves within Second Life is processed.

5.3 Right to Object

Second Life Residents whose data is processed on the platform have the right to object to such processing (Art. 21 GDPR). In such cases, the relevant data will be removed from our platform without undue delay. Objections can be submitted by email to privacy@sl-book.com.

---

6. Media Content (Images and Videos)

6.1 Description and Scope

Registered users may store images and videos in their account and organize them by contact (e.g., screenshots, recordings). This media is visible exclusively to the respective user and is not made publicly accessible.

6.2 Legal Basis

The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

6.3 User Responsibility

Users are solely responsible for ensuring that the media content they upload does not infringe the rights of third parties and is permissible under applicable data protection law. In particular, the rights of individuals depicted in such media must be respected.

---

7. Behavior and Sighting Logs

7.1 Description

Registered users may create and store structured logs of encounters, behavior, and sightings of other Second Life users. These records are accessible exclusively to the user who created them.

7.2 Legal Basis

The legal basis for storing user-generated content of this kind is Art. 6(1)(b) GDPR (performance of a contract).

7.3 Notice on Acceptable Use

Users are required to use this feature in compliance with applicable data protection laws. Creating logs about individuals in a manner that violates their rights, or for the purpose of intimidation, stalking, or harassment, is strictly prohibited and may result in immediate account suspension.

---

8. Rating System (Hot or Not / Avatar Ranking)

8.1 Description

The platform offers a publicly accessible feature in which profile images of Second Life Residents are comparatively rated by users. Public rankings are generated based on submitted ratings.

8.2 Legal Basis

The legal basis is Art. 6(1)(f) GDPR (legitimate interest of the platform in providing community features). Only publicly accessible avatar profiles are used.

8.3 Right to Object

Affected Residents may object to the inclusion of their profile in the rating system at any time. Requests can be submitted by email to privacy@sl-book.com.

---

9. Cookies and Local Storage

9.1 Technically Necessary Cookies

Our website uses cookies and comparable technologies (e.g., session tokens) that are technically necessary to operate the platform. These include:

• Session cookies to maintain the user's login state
• CSRF tokens to protect forms against cross-site request forgery

Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR.

9.2 Analytics Cookies and Tracking

If we use analytics cookies or tracking technologies, we will obtain your explicit prior consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

9.3 Cookie Settings

You may configure your browser to reject or delete cookies in general. Please note that some features of the platform may not function properly if cookies are disabled.

---

10. Disclosure of Data to Third Parties

We do not transfer your personal data to third parties for purposes other than those listed below. We share your personal data with third parties only if:

• You have given your explicit consent to do so (Art. 6(1)(a) GDPR),
• Disclosure is necessary for the performance of a contract with you (Art. 6(1)(b) GDPR),
• We are subject to a legal obligation to disclose (Art. 6(1)(c) GDPR), or
• Disclosure is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in non-disclosure (Art. 6(1)(f) GDPR).

Data Processors

We engage external service providers (data processors), e.g., for hosting and technical operations. These providers are contractually bound to comply with data protection regulations and may only process your data on our behalf and according to our instructions.

---

11. Data Security

We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security measures are continuously improved in line with technological developments. Data transmitted between your browser and our server is encrypted using HTTPS/TLS.

---

12. Rights of Data Subjects

You have the following rights with respect to the personal data we hold about you:

12.1 Right of Access (Art. 15 GDPR)

You have the right to obtain information about the personal data we process about you.

12.2 Right to Rectification (Art. 16 GDPR)

You have the right to request the immediate correction of inaccurate or incomplete personal data.

12.3 Right to Erasure (Art. 17 GDPR)

You have the right to request the deletion of your personal data, provided no statutory retention obligation applies.

12.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request that we restrict the processing of your personal data.

12.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

12.6 Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you where such processing is based on Art. 6(1)(e) or (f) GDPR.

12.7 Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future.

12.8 Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority. The supervisory authority competent for our operations is:

The Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Str. 153, 53117 Bonn, Germany
https://www.bfdi.bund.de

---

13. Protection of Minors

Our platform is not directed at persons under the age of 16. We do not knowingly collect personal data from minors. If you are a parent or guardian and become aware that your child has submitted personal data to us, please contact us so that we can delete the data in question.

---

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as necessary in order to reflect current legal requirements or changes to our services. The current version is always available on this page. Registered users will be notified by email of any material changes.

---

15. Contact and Privacy Inquiries

For questions about data protection, to exercise your rights, or to report a data protection incident, please contact:

SL Book – hobby project, privately operated
Email: privacy@sl-book.com

We will respond to your inquiry as promptly as possible and in any event within 30 days.

---

This Privacy Policy has been drafted in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applies to the platform sl-book.com.