Privacy policy

Data controller

[Add full name or company name]
[Add a serviceable postal address]
Email: [Add public contact email]

Accessing the website

Connecting to the service involves processing your IP address, request time and requested content. Depending on the hosting configuration, access logs may contain additional connection data. This serves to deliver and secure the service under Article 6(1)(f) GDPR. Hosting and retention details are listed under “Service providers and retention”.

Games and chat

To let you play and reconnect, we process your chosen player name, room and player identifiers, a session key, connection status, roles, game actions, votes and chat messages (Article 6(1)(b) GDPR). Other participants, including spectators, can see your name and public game information. Secret roles and actions are revealed according to the game rules. Please use a nickname and avoid sharing sensitive information in chat. You cannot participate without the data necessary to run the game.

Public games

When an admin enables “Public game”, the room identifier, game status, player count and all participant names become publicly accessible on the home page. This helps people find open games (Article 6(1)(f) GDPR). Private games are not listed. Listings disappear when a game ends, becomes private or full, or has no connected participants.

Local storage and game retention

Session Storage holds your room identifier, player identifier and session key to allow reconnection. Leaving a game removes this entry; the browser generally removes it when the tab session ends. Language and narrator mute settings stay on your device until changed or website data is cleared. These storage operations support the functions you explicitly request (section 25(2)(2) TDDDG; Article 6(1)(b) or (f) GDPR). Game rooms are kept in server memory and deleted when empty, at the latest after ten minutes without connected participants. Game rooms are removed within 30 days regardless of use. The application does not include analytics or advertising trackers.

Game records and analysis

Completed game records containing player names and identifiers, roles, actions, votes, timestamps, results and chat messages are stored in SQLite without session keys. The operator can view, analyse and delete them in the password-protected admin panel. Data is automatically removed within 30 days of collection; statistics are calculated solely from this data. This supports troubleshooting and game improvement (Article 6(1)(f) GDPR). When email notifications are configured and enabled, only a notice is sent without game content or record attachments.

Feedback and contact

Feedback you choose to send is emailed to the operator with your text and, if you request a reply, your email address. We use this information to handle your request (Article 6(1)(f) GDPR, or (b) for contract-related requests). To limit abuse, your IP address and last request time are held temporarily in server memory. The cooldown is one minute; expired entries are cleared on the next feedback request. Your email address is required only if you want a reply.

Narrator voice

Optional narration plays audio files generated in advance with ElevenLabs. The files are loaded from our hosting like other website content. No text or player data is sent to ElevenLabs while playing. The application does not access your microphone for this. You can mute narration in the game.

Your rights

Subject to legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). You may withdraw consent at any time with future effect. Use the contact details above to exercise your rights. You may also complain to a data protection supervisory authority, particularly where you live or work or where the suspected infringement occurred. No automated decision-making with legal or similarly significant effects takes place.

Service providers and retention

Hosting provider and server location: [To be completed]

Email service provider: [To be completed]

Retention periods for access logs, game records and emails: [To be completed]

Transfers outside the EEA and applicable safeguards: [To be completed]