Privacy policy

Who is responsible

Matthias Machold
Email: matthias.machold@gmx.at

Write to this address for any question about your data or to use your rights.

Hosting

The site runs on servers of Hostinger (Hostinger International Ltd., Cyprus), which hosts it on our behalf. Like every web server, the host's servers record technical access data (IP address, time, requested page, browser) in log files to deliver and protect the site. We do not use these logs for our statistics. Fonts and icons are served from our own webspace, so opening the site makes no requests to other companies.

When you play

To run a game, our server stores what you enter in a room: your nickname, avatar, captions, drawings, answers, votes and chat messages. Everyone in the same room sees them. Rooms are deleted automatically 3 hours after the last activity, and saved drawings are deleted together with their room. Please do not enter personal information in names or chat.

Your browser keeps a few settings in its local storage so the game remembers them: nickname, avatar, language, light or dark theme and sound on or off. A random session number in the session storage keeps your seat in a room when you reload the page. Your nickname, avatar and language are sent to our server when you play (see above), and the session number lets the server recognise your seat. Nothing else leaves your device.

Game statistics

To see which games are played and how, our server keeps a record of rooms and games: when a room was opened, its language and whether it is public, when each game started and ended, which game it was and how many people played. Each player is stored only as a pseudonymous number calculated from the random session number in your browser (a one-way hash with a secret key). A new browser tab or visit gets a new number, so we cannot recognise you across visits. Nicknames, chat, captions, drawings and IP addresses are not part of these statistics. They stay in our own database, are not passed to anyone and are kept as long as the site runs. The legal basis is our legitimate interest in improving the games (Art. 6(1)(f) GDPR, Art. 31 Swiss FADP).

Feedback

If you send us a bug report or an idea with the feedback form, we store your message and, so we can reproduce problems, the page you were on, the room code and game (if you were in a room), the language, your window size and your browser type (user agent). Your email address is stored only if you enter it, and we use it only to answer you. To stop spam, a daily changing hash of your IP address is kept with the message; the IP address itself is not stored. Only we can read the messages. They are deleted after 12 months at the latest, or earlier on request.

Visitor statistics

To see how the site is used and to improve it, we count page views (and, where the site sends them, simple events such as a game being started) with our own self-hosted measurement. It works like this:

• Self-hosted: the data is recorded on our own webspace and processed only by us. It is not passed to third parties.
• No cookies, no local storage: the measurement script stores nothing on your device.
• No IP addresses stored: your IP address is used only for a moment to calculate a pseudonymous visitor number (a one-way hash with a secret key). This number changes every day, so visits on different days cannot be linked.
• What is recorded: the page address, the referring page, screen size, browser language, browser type (user agent), the time, and the pseudonymous visitor number.
• No cross-site tracking and no country or location data.
• Short retention: the raw data is kept on the webspace for at most 14 days.

Obvious bots are not recorded. The legal basis is our legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR, Art. 31 Swiss FADP). You can object at any time by email.

Your rights

You can ask for information about the data we hold about you, and have it corrected or deleted. You can also restrict or object to its processing. Since we do not know who you are, please tell us the room code or time of your visit so we can find your data. You also have the right to complain to a data protection authority, for example the Swiss FDPIC or the authority in your EU country.

Changes

We update this policy when the site changes. The current version is always on this page.