Privacy Policy

Controller

[Daniel Behrent]

[Kanalstraße 8], [51379 Leverkusen], Germany

Email: [daniel.behrent7@gmail.com]

What we process & legal bases

• Hosting/edge logs (Vercel): IP address, request time, URL, user agent; for delivery, security, abuse prevention. Legal basis: Art. 6(1)(f) GDPR.
• App data (Railway/Supabase): puzzle pages/content viewed; no user accounts intended. Legal basis: Art. 6(1)(f) GDPR.
• AI generation (Mistral): we send puzzle text only, no personal data intended. Legal basis: Art. 6(1)(f) GDPR.
• Analytics: Vercel Web Analytics (cookie-less). Legal basis: Art. 6(1)(f) GDPR.

Note: If we add Google Analytics or ads in future, we will request consent before loading any non-essential scripts.

Processors / recipients

Vercel (hosting/CDN); Railway (backend runtime); Supabase (database/storage, if used); Mistral (AI API). Data Processing Agreements are concluded or will be concluded.

International transfers

Where providers are outside the EEA, transfers rely on SCCs and/or the EU-US Data Privacy Framework where applicable.

Retention

Log data is typically stored for a short period (e.g., 30–90 days). Content data is retained as needed to operate the site.

Your rights

You have rights of access, rectification, erasure, restriction, portability, and objection (Arts. 15–21 GDPR). You may lodge a complaint with your supervisory authority.

Cookies / local storage

We currently use no non-essential cookies or local storage; therefore no consent banner is shown. If this changes, a consent banner will appear before any non-essential storage is used.

Last updated: [2025-08-26]