Privacy policy

1. Controller

[Please fill in under Admin → Settings → Legal]
[Please fill in under Admin → Settings → Legal]
E-mail: [Please fill in under Admin → Settings → Legal]

2. Hosting and server log files

This website is hosted by: netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Deutschland. When you visit, the server processes technically necessary data (IP address, date/time, requested page, browser identifier) in log files to provide the website securely (Art. 6(1)(f) GDPR). Log files are deleted automatically after a short period.

3. Cookies, local storage and consent

We set no cookies while you just read. Strictly necessary are only: the login cookie when you log in to your account (30 days, deleted when you log out) and settings stored only in your browser (localStorage: spoiler switch, chosen platform, checklists, your privacy choice and a note that you are logged in). Legal basis: § 25(2) no. 2 TDDDG; for the related processing Art. 6(1)(b) or (f) GDPR.

We currently use no tracking, statistics or advertising cookies and no services that require consent.

4. User account

For an account we process your username, your e-mail address, your password (only as a secure hash, Argon2id), your language, your confirmation of the minimum age and the terms, timestamps (registration, confirmation, last login), your logged-in devices as a random session identifier (stored only as a hash) and a pseudonymous network identifier at registration (abuse protection). The purpose is providing the community features under our terms (Art. 6(1)(b) GDPR) and preventing abuse (Art. 6(1)(f) GDPR).

After registering we send you a confirmation link (double opt-in). Unconfirmed accounts are deleted after 7 days. E-mails are sent from our own server and only when needed for your account (confirmation, password, suspensions) – no advertising, no newsletter, no open or click tracking. You can delete your account at any time in the account settings; we then delete it together with your comments and chat messages. There you can also download all stored data.

5. Comments, chat, reports and votes

Comments and chat messages are public and show your username, the text and the time. To prevent spam and abuse we store pseudonymous identifiers with posts, reports and votes (keyed hashes of your IP address and your network range – the IP itself is not stored; Art. 6(1)(f) GDPR). Chat messages are deleted after 30 days; comments remain until you delete them or your account, or we remove them. The pseudonymous identifiers are removed after 30 days and individual vote records after 90 days; only totals remain.

Reports sent through "report a cheat" (name of the cheat, platform, input, details, optional source link) are reviewed by our editors and never published automatically. If you are logged in we store your account with it; if we confirm the cheat, we credit your username publicly as the reporter.

6. Push notifications

Only if you click "notify me" and grant permission in your browser do we store the push address generated by your browser (an endpoint at the push service of your browser vendor, e.g. Google, Mozilla or Apple), the related encryption keys, your language choice and a pseudonymous network identifier (Art. 6(1)(a) GDPR). Messages are delivered encrypted through that service; the push service provider only sees that a message is being delivered. You can unsubscribe at any time with the same button or in your browser settings – the address is then deleted.

7. Security and backups

To protect against attacks we log security-relevant events (e.g. failed login attempts) with a shortened network address only (e.g. 203.0.113.0/24) and delete these entries after 30 days. The database is backed up daily; backups are deleted after 7 days, backups made before a software update after 14 days. Until then, deleted data may still be contained in a backup (Art. 6(1)(f) GDPR).

8. Public trend data

We fetch trend data from public sources (e.g. social networks and streaming platforms) server-side and analyse it automatically, partly with AI. No content from these platforms is embedded when you visit our pages; your browser does not connect to them. Their privacy policies apply only once you follow a link.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), the right to withdraw consent at any time (Art. 7(3) GDPR) and the right to lodge a complaint with a supervisory authority. Contact us at the e-mail address above.