← All games

Privacy policy

Last updated: November 2026

1. Controller

The controller responsible for data processing on games.jakob-r.de is Jakob Richter. Postal address and email are listed in the legal notice.

2. Principles

games.jakob-r.de is a small, non-commercial collection of multiplayer browser games. There is no registration, no cookies, no analytics or tracking and no advertising. All fonts, scripts and images are served from games.jakob-r.de itself; no content is loaded from third-party servers.

3. Hosting and server logs

The site runs on a server operated by me that I rent from netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. The server is located in Germany. I have concluded a data processing agreement with netcup (Art. 28 GDPR).

When you visit the site, your browser transmits technically necessary data, in particular your IP address, date and time of the request, the requested URL and the browser identifier (user agent). Your IP address is only used to deliver the requested content and is not stored. To ensure secure operation and to analyse errors, the web server keeps a log containing the date and time of the request, the requested URL (which may include a game room ID or the random player ID described below), the HTTP status, the amount of data transferred and the browser identifier. The log contains no IP addresses. Its size is limited; older entries are overwritten automatically.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of the website.

4. Playing a game

To play, you choose a display name. A nickname is enough; it does not need to be your real name. When you play, the following data is processed on the server:

  • a randomly generated player ID, which is not linked to your identity,
  • your display name and your chosen colour,
  • the game state, your moves, scores and ready status within the game room,
  • per-game statistics (games played, games won, scores) linked to the player ID.

Your display name, colour, moves and scores are visible to everyone who has the link to the same game room. The data is processed to provide the game you requested; the legal basis is Art. 6(1)(b) GDPR.

Game rooms, including the players' names and moves, are deleted automatically: rooms without any moves after 2 days of inactivity, all other rooms after 1 year of inactivity. The host of a room can delete it at any time. Per-game statistics are deleted automatically after 1 year without a new game.

5. Storage in your browser

The site stores your player ID, display name, colour and notification settings in your browser's local storage so that you are recognised when you come back. The player ID is sent to the server to show your recent games and statistics; the data is not used for tracking. You can delete it at any time via your browser settings. Storing it is strictly necessary to provide the service you requested (§ 25(2) no. 2 TDDDG).

6. Push notifications (optional)

If you explicitly enable it, the site can notify you when it is your turn. Your browser then creates a push subscription, which is stored on my server together with the game room and your player ID. To deliver notifications, my server sends them to the push service of your browser's vendor, e.g. Google (Chrome), Mozilla (Firefox), Apple (Safari) or Microsoft (Edge). The content of the notifications is end-to-end encrypted; the push service only sees technical data such as the subscription address and the time of delivery. These providers may process data in the USA; Google, Apple and Microsoft are certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by turning off the notification bell in the game or by revoking the permission in your browser. The subscription is deleted when you turn notifications off, when the push service reports it as expired, or when the game room is deleted.

7. External links

The site links to other websites, e.g. GitHub and jakob-r.de. No data is transferred to them until you click a link. After that, the privacy policy of the respective provider applies.

8. Your rights

You have the right to

  • access the data stored about you (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
  • withdraw your consent at any time with effect for the future (Art. 7(3) GDPR).

To exercise these rights, contact me by email at the address in the legal notice. As there are no accounts, please include your player ID so I can find your data; you can see it in your browser's local storage for this site.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

9. Automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR takes place.