Privacy Policy

Last Updated: August 2026

Controller

The controller responsible for this game is the operator named in the Impressum. For any privacy matter, contact konformitaet@gmail.com.

What Kind of Game This Is

Zellenzahlen is a multiplayer browser game without chat, messaging, or any direct communication between players. The only content you create is your player name (max 15 characters, checked against a profanity filter), your color choice, and your moves on the shared board. There is no friend list, no private messaging, and no content upload.

Our Privacy Commitment

zellenzahlen is designed with privacy in mind:

• No Login Required: Play without creating an account or providing personal information
• No Tracking: We don't track your browsing behavior, run analytics, or build user profiles
• No Third-Party Analytics: We don't use Google Analytics, Facebook Pixel, or similar tracking services
• No Advertising: No ad networks or third-party marketing tools
• No Third-Party Content: Fonts and all other resources are served from our own server — no requests go to Google or any other third party while you play

Data We Process

To provide the multiplayer experience, zellenzahlen processes the following data. Apart from your IP address and the technical identifiers below, none of it is personal information:

• Player ID: A randomly generated unique identifier (UUID) created when you first play
• Player Name: Display name you choose (max 15 characters)
• Player Color: Your chosen player color preference
• Game Data: Current score, move count, and cells on the shared board
• Recovery Key Hash: A cryptographic hash of your 16-digit recovery key (the key itself is never stored server-side)
• IP Address: The most recent IP address your player connected from is stored for abuse prevention and moderation (enforcing bans). It is overwritten on each new connection and deleted together with your player data. Ban records containing an IP address are kept until the ban is lifted
• Session Data: Session tokens (valid up to 12 hours, held in server memory only) and a short-lived, hashed device identifier derived from your IP address and browser user-agent string, used to limit one active session per device

How Your Data is Used

Your data is used exclusively for:

• Enabling real-time multiplayer gameplay and board synchronization
• Maintaining your current game progress and score
• Displaying your presence (name and score) to other active players
• Preventing abuse: rate limiting, enforcing bans, and anti-cheat measures

Data Storage & Security

• Game data is stored on our own servers for multiplayer functionality, and included in regular server-side backups
• You can restore your progress using a 16-digit recovery key stored locally in your browser
• IP addresses are processed briefly in memory for rate limiting, and one recent IP per player is stored for moderation as described above
• All data transmission is encrypted via HTTPS and WebSocket Secure (WSS)

Recipients & Hosting

• Other players: Your name, color, score, and cursor position on the shared board are visible to other players — this is what makes the game multiplayer. Nothing else about you is shown to anyone
• Hosting provider: The game runs on a rented server operated by a commercial hosting provider (USA), which processes data strictly on our instructions (processor). Where a transfer to the USA occurs, it is safeguarded by the provider's standard contractual terms (EU Standard Contractual Clauses)
• Everyone else: Nobody. We do not sell, rent, or share your data with advertisers, data brokers, or any other third party

Your Privacy Rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to lodge a complaint with a data protection supervisory authority (in Germany: the competent authority of your federal state). For zellenzahlen that means concretely:

• Access: Your game data is always accessible through your recovery key
• Export: Your progress is portable using your 16-digit recovery key
• Delete: Email us at the address below and we will delete your player data (name, score, IP record, and account) — no questions asked
• No Tracking Opt-out Needed: Since we don't track you, there's nothing to opt out of

No Automated Decision-Making or Profiling

We do not carry out automated decision-making (Art. 22 GDPR) or profiling. The profanity filter for names and the rule-based anti-cheat counters are abuse-prevention measures only; they have no legal or similarly significant effect on you.

Data Retention

• Player Data: Retained while the game exists, or until you request deletion — this is what keeps your progress restorable with your recovery key
• IP Records: One recent IP per player, kept until the next connection or player deletion; ban entries until the ban is lifted
• Session Tokens & Rate-Limit Counters: In memory only, expire automatically within minutes to hours
• Backups: Rolling server-side backups (kept for a few days) so the shared board can be restored after a failure

Browser Storage

The game uses browser local storage to save:

• Your 16-digit recovery key (so you can restore your progress)
• Game preferences (sound settings, visual preferences)
• No third-party cookies or tracking scripts are used

Security Measures

We implement appropriate security measures to protect your data:

• Encrypted data transmission (HTTPS/WSS)
• Rate limiting to prevent abuse
• Input validation and sanitization
• No unnecessary data collection or storage

Children's Privacy

This service is not directed at children under 13. We do not knowingly collect personal information from children under 13. The only personal data processed is described above (IP address and technical identifiers for abuse prevention); no age-specific data is collected.

Updates to This Policy

We may update this privacy policy to reflect changes in our practices or for legal reasons. Any changes will be posted here with an updated revision date. Given our minimal data approach, significant changes are unlikely.

Contact for Privacy Matters

For privacy-related questions or requests, please contact:

Email: konformitaet@gmail.com

Website: https://minotalen.itch.io

Legal Basis for Processing

Our legal basis under the GDPR (Art. 6) is:

• Contract / Service Performance (Art. 6(1)(b)): Player ID, name, color, game data, and session tokens — necessary to provide the multiplayer game you asked to play
• Legitimate Interest (Art. 6(1)(f)): IP addresses, hashed device identifiers, recovery key hashes, and rate limiting — necessary to keep the game available, prevent abuse and cheating, and enforce bans. These interests are balanced against your interests; you may object by contacting us