Privacy policy

In short

• No cookies, no tracking, no ads, no analytics.
• Everything comes from this server: fonts, images and the game. Nothing is loaded from third parties.
• No account, no email address, no password. You can play without signing up.
• Against the practice bot, your browser plays entirely on its own. Nothing is sent to the server.

Controller

Sebastian Wich
Schulstraße 7
96342 Stockheim
Germany
Email: contact [at] drakones.info

Server and server logs

The website and the game run on a dedicated server at STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, in a data centre in Germany. STRATO processes data only on my behalf (contract under Art. 28 GDPR).

For every request the web server keeps a log: IP address, date and time, requested address, amount of data sent, the previous page and your browser's identification. This serves secure operation and troubleshooting (Art. 6(1)(f) GDPR). The logs are deleted automatically after 14 days.

Browser storage

The game keeps a few entries in your browser (local storage, no cookies): language, settings such as speed and card texts, your player name, a random player ID, keys for your seats in running online games, and whether you have seen the tutorial. Without them the game would forget your settings and games; they are strictly necessary for the service you asked for (§ 25(2) no. 2 TDDDG). The game only sends your player ID and name to the server when you play online, open your profile or change your name (it is only stored if you already have a profile). You can delete everything by clearing the site data for app.drakones.info in your browser.

Online games

When you play online, the server processes your player ID, your player name, the moves and the reactions (fixed symbols, no free chat). Your name is visible to your opponent. The legal basis is Art. 6(1)(b) GDPR: without this data the game you asked for cannot take place.

Running games are kept on the server so you can continue after a lost connection. Invitations are deleted after 24 hours, finished games after one hour, abandoned games after three days. Reactions are only passed on, not stored.

The game server uses your IP address only in memory to slow down abuse (for example too many requests in a short time). It does not store it (Art. 6(1)(f) GDPR).

Replays

Only when a player taps “Save replay” at the end of an online game does the server store it: random seed, moves and both player names. Anyone with the link can watch it. Replays are deleted automatically after 90 days.

Profile

The profile counts your online games and wins. Stored are: the random player ID, your player name and when you last changed it, the profile code (only if you have opened it), when the profile was created and last used, and the number of games and wins. With the profile code you can take your profile to another device. Treat it like a key.

You can delete your profile yourself at any time under “Profile” in the game. Profiles not used for 400 days are deleted automatically. The server makes a daily backup and keeps it for 7 days; after that, deleted profiles are gone from the backups too. The legal basis is Art. 6(1)(b) GDPR.

Player names, children and young people

Drakones does not need any personal data. Please choose a made-up name rather than your full real name. If you don't enter a name, you automatically get a random one such as “SwiftLynx42”.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Just send me an email. As there are no accounts, I can only find a profile by its profile code, so please include it with questions about your profile.

You can also complain to a data protection authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.