Privacy policy
What data is processed when you visit — and the rights you have.
Controller
Daniel Albert - Software Solutions
c/o IP-Management #47718
Ludwig-Erhard-Str. 18
20459 Hamburg
Deutschland
Email: [email protected]
Website analytics
Google Analytics is currently disabled. This website does not load a Google Analytics tag or set analytics cookies.
Cookieless audience measurement
To see which guides are needed, the application counts page views only as anonymous daily totals: requested page, domain of the referring website (without its path), device type and browser family derived from the browser’s user-agent string, and the language version. Country is only counted once we have explicitly enabled Cloudflare’s country code; it is then taken from the country information Cloudflare provides. No cookies are set or read, and no IP addresses, visitor identifiers or full browser strings are stored; individual visits cannot be attributed to a person. The legal basis is our legitimate interest in developing content according to demand (Article 6(1)(f) GDPR). Daily totals are deleted after 90 days. Recognisable bots are not counted.
Admin sign-in with Discord
The admin area at /admin is only for the operator and editors approved by the operator; visitors do not need an account. Sign-in uses Discord (Discord Inc., USA). With your consent Discord transmits your Discord ID and display name. We use the access token once to retrieve these details and revoke it afterwards. For approved accounts we store the Discord ID, display name, time of the last sign-in and a log of admin actions (90 days). Accounts that are not approved are rejected without any data being stored. While you are signed in we set a strictly necessary session cookie (__Host-gcf_admin, 7 days) and, during sign-in, a cookie protecting against request forgery (__Host-gcf_oauth, 10 minutes) (section 25(2)(2) TDDDG). The legal basis is Article 6(1)(f) GDPR (secure administration of the website). Processing by Discord, including in the USA, is governed by Discord’s privacy policy.
Delivery and hosting
When you visit this website, the server processes connection data including your IP address, requested URL, time and browser information to deliver and secure the site. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in secure website operation. The application does not store IP addresses in its database. Hosting and reverse proxy logs are separate.
Hosting provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Server log retention: Up to 7 days for our own Nginx access logs.
Processing takes place on Hetzner Cloud in Germany, administered by the operator. The log retention period is an operational policy, not a statutory period. It applies only to our own Nginx access logs, not to Cloudflare, hosting infrastructure or system logs, or to backups.
Cloudflare: delivery and protection
Website traffic passes through Cloudflare, which processes connection and security data such as IP addresses, requested URLs, timestamps and browser information. Delivery and protection rely on our legitimate interest in secure operation under Article 6(1)(f) GDPR. Processing outside the EU, including in the US, is possible. Cloudflare’s data processing agreement includes standard contractual clauses for applicable international transfers. The safeguards and retention periods applicable to this account still require verification against its configuration.
Depending on enabled protection features, Cloudflare may set security cookies such as __cf_bm or cf_clearance, including when you do not vote. These are separate from the application cookie below; their documentation does not mean every listed cookie is active here.
Optional feedback and cookie
Only when you submit feedback does the application set the gcf_visitor cookie containing a random identifier for 24 hours. It prevents repeat votes for the same fix and is not used for advertising or cross-site tracking. Storage is solely for the feedback feature you request (section 25(2)(2) TDDDG). Anti-abuse processing relies on Article 6(1)(f) GDPR. We store the identifier, fix, game, vote and time. Events older than 90 days are deleted by cleanup at server startup and hourly. Deletion from backups depends on the backup retention period, which still needs to be specified.
You can use the website without voting and delete the cookie in your browser. An identifier set by an earlier version is no longer evaluated for new page views.
Advertising with Google AdSense
On the home page and in-depth guides we use Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Opening these pages establishes a connection to Google and transmits in particular your IP address, the requested page and browser information. Google and its partners may use cookies and similar technologies to deliver and measure ads and to detect abuse and, with your consent, to personalise ads. Processing outside the EU, including in the USA, is possible.
You decide in Google’s consent message whether cookies are set or read for advertising purposes. The legal basis is your consent (Article 6(1)(a) GDPR, section 25(1) TDDDG). You can change or withdraw it at any time with effect for the future through the privacy settings link provided by the consent message. You can use the content of this website without consenting. You can also turn off personalised ads in Google’s ad settings.
How Google uses information from partner sites · Google ad settings
Search and external services
Search processes your input locally in the browser. Navigation may include search terms in URL parameters, which can appear in server logs. Fonts and game images are served locally. The home page and in-depth guides include the Google AdSense script, loaded from pagead2.googlesyndication.com when such a page is opened. This establishes a connection to Google. Legal, error and admin pages and guides that have not been expanded yet do not load the script. External links lead to their respective destination websites when opened.
Contact enquiries
If you contact us, we process your contact details and message to answer your enquiry under Article 6(1)(f) GDPR, or Article 6(1)(b) for contractual enquiries. We delete this data when the enquiry is resolved, unless statutory retention obligations apply.
Email service
Our contact address is operated through ALL-INKL.COM – Neue Medien Münnich. When you email us, the mail service processes sender and recipient details, message content and technical metadata. The contractual terms applicable to this mailbox still require final review.
Your rights
Subject to the legal conditions, you have rights to access, correction, deletion, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). Contact the controller above. You may complain to a data protection authority, particularly in your place of residence, work or the alleged infringement. Providing personal data is not required by law or contract. The website cannot be delivered without necessary connection data; we may be unable to answer enquiries without the relevant details. We do not use automated decision-making, including profiling.