GDPR-Light
Privacy
This site is a non-commercial hobby project. We store as little as possible. This page explains what is still unavoidable.
Responsible party
See Imprint.
What is stored in your browser
In your device's localStorage, the app stores purely technical game data so a reload does not reset everything:
- A randomly generated player ID (not your real name)
- Your chosen display name
- Avatar and seat selection
- The current joint state of the room
- Volume / mute setting
This data does not necessarily leave your device — it stays local. You can delete it at any time by clearing the browser storage for this site.
Note under § 165 TKG 2021: This is technically strictly necessary storage — therefore no cookie banner is required.
What goes to the server
For the real-time experience, your browser opens a WebSocket connection to our backend provider (Lovable Cloud, based on Supabase, EU region). Only game state is transmitted:
- Display name, avatar, seat, room ID
- Joint state (puffs, ash, current player)
- Chat messages in the room (not persistently stored)
This data only exists while the room is active. There is no account database, no profiles, no history storage.
Server logs
The hosting provider may keep technical access logs (IP address, timestamp, browser type) to maintain operations and defend against abuse. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).
Microphone
If you enable the blow-puff feature, the browser asks for microphone access. The audio signal is evaluated only locally in your browser (volume threshold) — it is not recorded, sent, or stored.
No ads, no tracking
We use neither advertising networks nor analytics tools (no Google Analytics, no Meta Pixel, no fingerprint trackers).
Your rights
Under GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Complaints can be filed with the Austrian data protection authority.