Privacy Policy
Effective: current build as served
What This Platform Does
The main lobby is a static informational area with no user accounts or registration. Personal data is only stored if explicitly submitted via two forms: upcoming case pre-registration and release alerts (both detailed below). Standard web server logs are retained briefly by our hosting provider strictly for server operations and are never analyzed.
One exception: under /tisch you can enter a room code. It is transmitted to check against currently active tables and route you into the match — the code itself is never stored permanently, though it appears in the request URL and standard server access logs.
Release Alerts
Our release alert functions as a radar: a quick notification whenever a new case, a new board game, or a new arena table launches. You decide what to follow — new escape cases, new board games, new arena tables, or any combination. You must select at least one category; without a checkbox, the server rejects the submission entirely. We only write to confirmed addresses, and only per category you selected: as soon as something is released there, one message goes out — if you only follow new cases, you will not hear about a new table. No newsletter, no third-party sharing, zero ads, no account required. The legal basis is your explicit consent (Art. 6(1)(a) GDPR).
Double Opt-In Confirmation. After submitting, we send an email containing a confirmation link. Your address is only registered once you click that link — unconfirmed entries are purged automatically after two days. This is not mere formality: it is the only reliable way to ensure the address truly belongs to you. If you expand your consent later (e.g., adding another category), you will confirm again, as expanded consent constitutes a new permission. (In the source code, this registry is named drahtbericht; that is purely an internal file name, not a separate list.)
Associated Data. Your category selections, the language you signed up in (every message arrives in it), timestamps of registration and confirmation, two random tokens — one for the confirmation link, one for the unsubscribe link —, the number of the last alert you received (so none arrives twice), and a salted hash of your IP address — irreversible and stored strictly for rate-limiting and abuse prevention.
Retention Period. Retained until you unsubscribe. Every alert carries an unsubscribe link: it leads to a button, and one click on it unsubscribes you. Where your mail client offers “Unsubscribe” next to the sender, that single click works just as well; an informal message to the contact in the Legal Notice works too. Unsubscribing deletes your record completely — address, categories and tokens; nothing is merely archived.
Case Pre-Registration
Unreleased case dossiers feature a dedicated pre-registration field with a clear premise: exactly one notification when the case officially launches, after which the record is deleted. It is maintained in a completely separate registry from general release alerts. We store the email address, timestamp, and a salted IP hash under GDPR consent (Art. 6(1)(a)), which can be revoked at any time.
No Cookies, Cookieless Analytics
This site sets no cookies and writes nothing to your browser's local storage. Visits are still counted: with Matomo on a server we operate ourselves, without cookies and without recognising you across visits. What is stored is the page requested, date and time, the referring page and coarse browser and device details; the IP address is truncated and never stored in full. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in seeing whether this site is found and used. Nothing is passed on to third parties and there is no advertising. Because no cookie is set and no fingerprint is built, there is no consent banner here.
No Third-Party Requests
Images, videos, and stylesheets are hosted locally on our own server. No third-party web fonts are loaded — typography relies entirely on system fonts already present on your device. Unless you click an external link, no network request leaves our servers to any third party.
External links: Buttons and links pointing off-site — such as tipping options in the footer or the link to liesener.de — are standard hyperlinks. Clicking one opens the respective provider's website, transmitting your IP address and timestamp to them — but never your referer URL, courtesy of rel="noreferrer". No data is transmitted beforehand.
Sharing: Below every magazine article, on its card in the overview and on each table’s page there is a share button. “Share” opens your device’s own dialog, “Copy link” puts the address on your clipboard — nothing leaves your device until you pick an app yourself. “Share on WhatsApp”, by contrast, is a standard link and not an embed: clicking it opens WhatsApp and transmits your IP address and the prepared text to WhatsApp — but never your referer URL, courtesy of rel="noreferrer". No data is transmitted beforehand.
Public Shelf Metrics
Each case card indicates how many sessions have been played and the average runtime. These metrics stem strictly from internal game telemetry. They contain zero personal identifiers, names, or IP addresses — only room IDs, reached puzzle stages, player counts, and session duration.
Voices from the Table
The "Voices from the Table" showcase features authentic quotes from real teams taken from post-game debrief forms. Quotes are only displayed if both conditions are met: the crew explicitly gave consent via an unselected checkbox, and the quote was reviewed and approved manually. There are zero fabricated reviews; if there is no authentic feedback, the section remains blank.
Displayed data includes the feedback quote, an alias, the star rating, the case played, and the playtime in minutes. No real names, no email addresses, no photos. The legal basis is consent (Art. 6(1)(a) GDPR), which can be revoked at any time — either directly in the debrief form by unchecking the box or informally by contacting us via the Legal Notice.
Average ratings on case cards operate independently and do not rely on this publishing consent: ratings aggregate all completed reviews for that case — including those where no quote was submitted. Individual ratings are never exposed; only an anonymous aggregate average is displayed once at least three reviews exist. The accompanying counter tracks completed rounds, not individual players.
Inside the Game Rooms
When opening or joining a table, you leave the public foyer and enter the game environment. There, a chosen screen name is stored, your IP is reduced to a salted hash for abuse prevention, and an external processor manages real-time socket connections on our behalf. Full details are outlined in each game's respective privacy notice.
Your Rights
Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, objection, and the right to lodge a complaint with a supervisory authority — simply email sascha@liesener.de. The data controller is Sascha Liesener (address provided in the Legal Notice).