Privacy Policy

1. Responsible Party

The person responsible for processing personal data on this website is named in the Imprint / Contact.

2. Data Collected

The following data is stored during registration and use:

  • Username — freely chosen, stored permanently.
  • Password — stored exclusively as a bcrypt hash (cost factor 12). The plaintext password is never stored.
  • Mnemonic hash — bcrypt hash of the BIP-39 recovery phrase for password recovery.
  • E-Mail address — optional, only provided at the user's explicit request.
  • Avatar — numeric ID of the chosen avatar graphic.
  • Registration date — timestamp of account creation.

3. Cookies and Session Data

  • Session cookie (PHPSESSID) — technically required for authentication. No tracking, no sharing.
  • Language preference (lang) — stores the chosen language. No personal reference.
  • Consent decision (consent) — records whether you have accepted these terms. Stored for 1 year.

No tracking, analytics, or advertising cookies are used.

4. Purpose of Processing

Data is used exclusively to provide the game service (user login, game state, account settings). It is not shared with third parties.

5. Retention Period

Data is stored for as long as the account exists. Upon account deletion, all personal data is irreversibly deleted.

6. Your Rights (GDPR Art. 15–22)

  • Access — You may request information about your stored data at any time.
  • Rectification — E-mail address and avatar can be changed at any time under Account.
  • Erasure — The account can be permanently deleted at any time via Account → Danger Zone → Delete account.
  • Complaint — You have the right to lodge a complaint with the competent data protection supervisory authority.
  • Cookie revocation — You can revoke your consent to stored cookies here. This will delete all cookies.

7. No Profiling, No Tracking

No automated decision-making or profiling takes place. No external analytics or advertising services are used.

8. Contact

Data protection enquiries should be directed to the contact address given in the Imprint / Contact.