Privacy Policy

Who is responsible

[Your full name]
[Street and number]
[Postcode, city, country]
Email: [your contact email]

What we store

You can play without an account. If you create one, we store:

• Username you choose. We do not ask for your email, name or phone number.
• Password, only as a salted, one-way hash (PBKDF2-SHA256). We cannot see your password.
• Game progress: which phrases you decoded and which places you opened.
• A login cookie (sid) that keeps you signed in for up to 30 days. It is technically necessary for the login and is not used for tracking.

The game also saves your progress in your browser’s local storage on your device, so you can continue without an account.

Legal basis: Art. 6(1)(b) GDPR (providing the account you asked for) and § 25(2) TDDDG for the necessary cookie.

Hosting and server logs

The site and its database run on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technical data such as your IP address to deliver the site and protect it from abuse. Your IP address is also used briefly to limit repeated login attempts. Cloudflare is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR (secure, reliable operation).

Fonts

This site loads fonts from Google Fonts (Google Ireland Limited). Your browser connects to Google’s servers, which can see your IP address. Legal basis: Art. 6(1)(f) GDPR (consistent design).

How long we keep data

Account data and progress are kept until you delete your account. Login sessions expire after 30 days.

Delete your account

Open the game, tap the account button, choose Delete account and confirm with your password. Your account, progress and sessions are deleted immediately.

Your rights

You have the right to access, correct, delete and port your data, to restrict or object to processing, and to complain to a data protection supervisory authority. Contact us at the address above.