WEBSITE & BROWSER GAME PRIVACY
Privacy notice
Last updated: 21 September 2026
This notice applies to bierbuasimulator.com and the browser games under /stammtisch/. The separate app privacy notice applies to the iPhone app.
1. Controller
The controller under the General Data Protection Regulation (GDPR) is Kevin Madl, Hermann-Aust-Str. 21, 82152 Krailling, Germany, email: hello@bierbuasimulator.com.
2. Hosting and server logs
The website and browser games are hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When a page is requested, the hosting provider processes technically necessary connection data, including IP address, time, requested file, transferred data volume, referrer, browser and operating-system information. This supports secure and stable delivery under Article 6(1)(f) GDPR. Where IONOS processes data on our behalf, it does so under an Article 28 GDPR agreement. Retention of technical server logs depends on the server configuration.
3. Optional first-party analytics
Only after your explicit consent do we measure use of the website and browser games on our own server. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. Refusing consent does not affect use of the service. You can change your choice at any time through “Analytics settings” in the footer; withdrawal applies to future processing.
The following information may be evaluated in daily aggregate form:
- page path, language and broad device class (mobile, tablet or desktop),
- source, shortened UTM campaign data and placement,
- active visible time, attention milestones and scroll depth,
- internal and external link interactions; for external links only the destination domain,
- room creation, joins, game starts, submissions, completions, timeouts, rematches and sharing actions,
- visible sponsor impressions, active view time, clicks and completed advertising sequences by campaign, creative and placement.
Active time is counted only while the browser tab is visible and pauses after 60 seconds without activity. The analytics store does not retain names, email addresses, room codes, texts, drawings, precise locations, IP addresses, full user agents, persistent visitor IDs or cross-site profiles. We use no external analytics service or partner tracking pixels.
Analytics values are retained for no more than 90 days. Your consent choice is stored in local storage with a version number and timestamp so that it does not have to be requested on every page. We ask again after no more than 180 days. You can change or delete the choice sooner through the settings or your browser.
4. Technically necessary browser storage
During a browser game, a short-lived room credential and unfinished input are stored in the tab's session storage. This enables joining, reconnecting and protecting each player's move. The storage is necessary for the requested game under Section 25(2)(2) TDDDG. Processing is based on Article 6(1)(b) GDPR and, for secure operation, Article 6(1)(f) GDPR. The data stays within that tab and can be removed by closing the tab or clearing browser data.
5. Browser game content
For a shared round, the game server processes chosen nicknames and avatars as well as texts, drawings, reactions, defences, votes and assignments. Random access tokens are also processed where technically necessary. This information appears only inside the relevant private game room. There are no public profiles or galleries. Inactive rooms and their content are deleted automatically after six hours. The legal basis is Article 6(1)(b) GDPR and, for abuse prevention and operational security, Article 6(1)(f) GDPR.
6. Advertising and partner links
Advertising placements are clearly labelled. Logos are delivered from our server. A partner website opens only after a deliberate click. The partner then necessarily receives connection data such as your IP address and browser information; campaign parameters such as utm_source, utm_campaign, creative and placement may also be transmitted. The partner is responsible for processing on its own website. Bier Bua measures views and clicks only where analytics consent has been granted.
7. Contact
If you contact us by email, we process the information you provide to handle your request. The legal basis is Article 6(1)(f) GDPR and, for pre-contractual requests, Article 6(1)(b) GDPR. Email is provided through Google Workspace; the provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data is deleted once the request has been completed unless statutory retention obligations apply.
8. Your rights
Subject to the statutory requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20), objection (Article 21), withdrawal of consent for the future (Article 7(3)) and complaint to a supervisory authority (Article 77).
To exercise these rights, email hello@bierbuasimulator.com. Because optional analytics is aggregated without a persistent user identifier, individual analytics values generally cannot later be attributed to a particular person.
9. Security and updates
Data is transmitted using HTTPS. We use technical and organisational measures designed to protect it against unauthorised access. We update this notice when functions, providers or the legal situation change.