The controller responsible for data processing on this website is:
Kai Meissner
Chamissostraße 1
68167 Mannheim, Germany
Email: scoreboxx@gmx.net
Scoreboxx runs on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes data as our processor and only on our behalf. More information: hetzner.com/en/legal/privacy-policy
For every request, the web server logs your IP address, date and time, the requested address, the status code, the previously visited page (referrer) and your browser identifier. We use these logs to keep the service secure and to find errors. They are deleted after 7 days at the latest. The application also keeps an error log with requested addresses and response times, but without IP addresses.
The legal basis is our legitimate interest in stable and secure operation (Art. 6(1)(f) GDPR).
Scoreboxx sets a single cookie, the session cookie. It contains:
The cookie is deleted when you close your browser. Scoreboxx also stores the following in your browser's local storage:
These entries stay on your device until you delete them in your browser. All of this is strictly necessary to run the site and therefore does not require consent (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). We do not use tracking, analytics or advertising cookies.
Online rooms: For each room we store the participants' random player IDs and the game state, including the football players entered. Inactive rooms are deleted after 15 minutes, abandoned rooms immediately.
Daily Puzzle: So that each square can only be guessed once per day, we store your random player ID, your answer and whether it was correct for each square. These entries are deleted after 30 days.
The legal basis is providing the game you access (Art. 6(1)(b) GDPR).
If you report a bug via "Report a bug", we email ourselves the title, description, steps and the address of the page you were on. We do not ask for your name or email address. We use your IP address only briefly in memory to prevent too many reports in a short time. If that limit is exceeded, a shortened hash of your IP address is written to the error log.
Our mailbox is hosted by GMX (1&1 Mail & Media GmbH, Germany). This also applies if you email us directly. We delete reports and emails once the matter has been dealt with. The legal basis is our legitimate interest in fixing errors and answering enquiries (Art. 6(1)(f) GDPR).
We use Umami, an analytics tool that runs on our own server in Germany. Umami does not set cookies. It records the pages visited, the previous page, browser, operating system, device type, screen size, language, and country, region and city. Umami derives the location from your IP address. The IP address itself is not stored, only a pseudonymous identifier calculated from it. The data is not passed on to third parties.
The purpose is to understand how Scoreboxx is used and to improve it. The legal basis is our legitimate interest in doing so (Art. 6(1)(f) GDPR). The data is deleted automatically after 12 months.
We do not sell data. Data is only received by the service providers named above: Hetzner (hosting) and GMX (email). All scripts and fonts are served from our own server; loading a page does not send data to any other provider.
You have the right to:
Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. An informal email is enough.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (baden-wuerttemberg.datenschutz.de).
To exercise your rights, just email scoreboxx@gmx.net. You are not obliged to provide any data. We do not use automated decision-making or profiling.
For questions about data protection, contact us at scoreboxx@gmx.net.