Privacy policy

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is CultureClub Kulturagentur UG (haftungsbeschränkt), Muttenzer Strasse 24, 79639 Grenzach-Wyhlen, Germany. For contact details, see the Legal notice. As a company established in Germany, we are subject to the GDPR for all processing described here, whichever country you visit this website from (Art. 3(1) GDPR). For visitors from Switzerland, the revised Swiss Federal Act on Data Protection (revFADP) also applies. Additional information for visitors from the United States follows below.

Without your consent: as long as you do not consent, this website sets no cookies and loads no analytics or tracking services. We collect neither your name nor your address nor any other details from you: there is no account and no form. The website can be used without restriction without giving consent.

Server logs: when a page is opened, our hosting provider Netlify, Inc. processes connection data for technical reasons, including your IP address, the date and time, the address requested and details of your browser and operating system. The purpose is to deliver the page and to keep operations secure and protected against attacks. The legal basis is our legitimate interest in secure operation, Art. 6(1)(f) GDPR. Netlify acts as a processor under Art. 28 GDPR. We do not analyze these logs and do not combine them with any other data. Criterion for the retention period: the logs are kept only for as long as they are needed to detect and investigate operational faults and attacks, and are deleted afterwards. Netlify does not publish a fixed period in days, so we state the criterion instead of a number (Art. 13(2)(a) GDPR allows either).

Hosting provider in the United States: Netlify, Inc. is based in the United States. Where the GDPR’s rules on transfers to third countries apply, the transfer relies on Netlify’s participation in the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR) and, in addition, on the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR; Implementing Decision 2021/914). For visitors from Switzerland, it relies on Netlify’s participation in the Swiss-U.S. Data Privacy Framework.

What are cookies? Cookies and similar technologies, such as the local storage of your browser, store and read information on your device while you browse. This website uses them only for the purposes described below and, apart from the entry that stores your decision, only with your consent.

Consent and storage of your choice: on your first visit we ask in a notice window whether you agree to audience measurement with Google Analytics and session analysis with Microsoft Clarity. “Reject” and “Accept” carry equal weight; closing the window with the X counts as rejecting; under “Choose individually” you can agree to each service separately. We store your decision in your browser’s local storage (entry “sp-einwilligung” with your choice and the date); it is not transmitted to us. This entry is strictly necessary in order to respect your decision, so it does not require consent (Art. 5(3) of Directive 2002/58/EC and Section 25(2) no. 2 TDDDG). After six months we ask again, and earlier if we change the services or their purposes.

Audience measurement with Google Analytics (only with your consent): if you agree, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose is to understand how this website is used: which pages and game descriptions are opened, where visitors come from (country, search engine, referring website), how far they read, which filters are used, which terms are entered in the search field and which external links and email links are opened. This lets us improve the selection, the texts and the handling. The data processed are usage data (addresses opened, times, clicks, scroll depth, search terms from the search field), details of the device and browser, and the IP address. Search terms containing an email address or five or more digits are not sent to Google. According to Google, Google Analytics uses the IP address to detect spam and to determine the approximate location, never associates it with user identifiers and discards it after use; for visitors from the EU, Switzerland and the United Kingdom, Google states that it neither logs nor stores the IP address. For this purpose Google Analytics sets the cookies “_ga” and “_ga_” followed by an identifier, which contain a random identifier of your browser; we have limited their lifetime to 13 months. Advertising features, Google Signals and the link to advertising accounts are switched off. Google processes the data on our behalf (Art. 28 GDPR). The legal basis is your consent, Art. 6(1)(a) GDPR and Art. 5(3) of Directive 2002/58/EC (implemented in Germany by Section 25 TDDDG). Event data are deleted 14 months after your last visit; aggregated reports with no link to individual browsers are kept.

Session analysis with Microsoft Clarity (only with your consent): if you agree to this category, we use Microsoft Clarity from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how the pages are used (clicks, scrolling and mouse movements, screen format, device, operating system and browser) and presents this as heatmaps and as pseudonymized recordings of individual visits. The addresses of the pages visited, of the referring page and of links clicked are also processed, as is the IP address, from which, according to Microsoft, Clarity determines the location. Entries in fields are masked. The purpose is to identify usability problems and make the pages easier to understand. For this purpose Clarity sets the cookies “_clck” (lifetime 1 year) and “_clsk” (lifetime 1 day) on this website, which contain a pseudonymous identifier, and may use cookies on Microsoft domains such as “MUID”. Microsoft states that it acts as a controller within the meaning of the GDPR for Clarity and may also use the data for its own purposes, including advertising; Microsoft’s privacy statement (www.microsoft.com/privacy/privacystatement) applies to this. The legal basis is your consent, Art. 6(1)(a) GDPR and Art. 5(3) of Directive 2002/58/EC (implemented in Germany by Section 25 TDDDG). According to Microsoft, recordings are available to us for 30 days, those marked as favorites and a random sample for up to nine months; heatmaps can be accessed for up to nine months.

Analytics services and the United States: Google and Microsoft may transfer data to their parent companies Google LLC and Microsoft Corporation in the United States. Both are certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. Where the GDPR’s rules on transfers to third countries apply, the transfer relies on the European Commission’s adequacy decision of July 10, 2023 (Art. 45 GDPR) and, in addition, on the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR); for visitors from Switzerland, on Annex 1 of the Swiss Data Protection Ordinance (DPO), which finds an adequate level of protection for certified companies.

Browser signals: if your browser sends the Global Privacy Control signal and you have not yet made a choice on this website, we treat it as a rejection: the notice window does not appear, and no analytics service is loaded. You can still agree under “Cookie settings”; a choice you make there is saved and applies on later visits even with the signal. We do not evaluate the “Do Not Track” signal.

Withdrawing consent: your consent is voluntary. You can withdraw or change it at any time with effect for the future, using “Cookie settings” at the bottom of the page (on every page except the Legal notice and the error page for addresses that do not exist, so also on this privacy policy). If you withdraw consent, we delete this website’s analytics cookies in your browser and no longer load the services. The lawfulness of the processing carried out until then remains unaffected (Art. 7(3) GDPR). We cannot delete cookies that Microsoft may set on its own domains (such as “MUID”) from this website; you can delete them in your browser settings.

No shop buttons: this edition has no shop buttons and no affiliate links. No affiliate network is involved, and no purchase is attributed to an affiliate account. Links to sources, for example to publishers, reviews or award juries, lead to other websites. You leave this website only when you click such a link; from then on, the privacy rules of that website apply. Nothing is transmitted to these websites before the click.

Your rights: under Art. 15 to 21 GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, wherever you live. To exercise them, contact the address given in the Legal notice. If you think that we have not handled your personal data in accordance with data protection law, you can complain to us at the same address or to a supervisory authority. Under Art. 77 GDPR you can complain in particular to the authority in the EU member state of your habitual residence, your place of work or the place of the alleged infringement; the authority responsible for us, at our registered office, is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (Germany). In Switzerland the contact point is the Federal Data Protection and Information Commissioner (FDPIC).

If you live in the United States: you can send requests about your data, for example to find out whether and which data we process about you or to have them corrected or deleted, by email or by mail to the address in the Legal notice. If we decline a request, we tell you why; you can then ask us to reconsider it (appeal) by writing to the same address. We do not use your data for targeted advertising and receive no payment for them. Microsoft may use data collected through Clarity for its own purposes (see above); if you do not agree to Clarity, or withdraw your consent, Clarity is not loaded and receives no data from this website.

Children: this website is written for parents and other adults who choose games for children, not for children themselves.

Other information: you are not obliged to provide us with any data: the website can be used without restriction without giving consent. We do not take decisions based solely on automated processing and do not carry out profiling within the meaning of Art. 22 GDPR.

Last updated: October 2026