Legal Notice
Information pursuant to Section 5 of the German Digital Services Act (DDG)
Sascha Liesener
Denkhauser Höfe 162
45475 Mülheim an der Ruhr, Germany
Contact
sascha@liesener.de
liesener.de
Responsible for content
Sascha Liesener, address as above.
Concept and origin of the artwork
Concept, game logic & web architecture: Sascha Liesener. The artwork for the games is generated with AI assistance and selected by hand.
tableroom is a non-commercial leisure project. The games are free; there is nothing to buy and nothing to unlock.
Privacy Policy
Status: this page as currently served
What this page does
The foyer is an informational page. There is no account and no registration. Only information you enter yourself is stored — exactly two forms: pre-registration for an upcoming case and release notifications; both are detailed below. Standard server log entries generated by the host upon retrieval serve operational purposes and are not analyzed.
One exception: under /tisch you can enter a five-character room code. It is sent to this server, matched against active rooms, and routes you to the corresponding game — it is not stored anywhere. It appears in the URL and therefore in the host's server log entry.
Release notifications
The release notification acts as a radar: a brief message whenever a new case, board game, or table goes online. You choose what to receive — new escape cases, new board games, new arena tables, or several of them. You must check at least one of the three categories; without a check mark, the server does not accept the address. Messages are sent only to confirmed addresses and only for selected categories: as soon as something is released there, a message is sent — selecting only new cases means you hear nothing about a new table. No newsletter, no disclosure to third parties, no advertising, no account. The legal basis is your consent (Art. 6(1)(a) GDPR).
Confirmation. After registration, we send an email with a confirmation link. The address is only recorded once that link is clicked — unconfirmed entries are deleted after two days. This is not a formality: it is the only way to verify that the address belongs to the person who entered it. If you expand your consent later — for example by adding another category —, you confirm again; an expanded consent counts as a new one. (In the code, this registry is still called drahtbericht; that is a filename, not a separate list.)
Stored alongside. Your selections, the language in which you signed up (used for every message), the timestamps of entry and confirmation, two random tokens — one for the confirmation link, one for the unsubscribe link —, the number of the last message you received (preventing duplicates), and a salted hash of your IP address — irreversible and used solely to prevent third-party sign-ups.
Retention period. Until you unsubscribe. Every message contains an unsubscribe link: it leads to a button, and one click unsubscribes you. Where your email client provides an “Unsubscribe” option next to the sender, that single click is also sufficient; an informal message to the address in the legal notice works as well. Unsubscribing deletes your entry completely — address, selections, and tokens; nothing is retained.
Pre-registration for an upcoming case
The file of a case that has no room yet contains a second field — with a different purpose: exactly one message when the case is ready, after which the record is deleted. It is therefore kept in a separate file and never merged with general release notifications. Stored data includes email address, date, and the same salted IP hash; the legal basis is likewise your consent, revocable informally.
No cookies, cookieless traffic measurement
This site sets no cookies and writes nothing to your browser storage. Traffic is still counted: using Matomo on a server we operate ourselves, without cookies and without recognition across multiple visits. Stored data includes the requested page, date and time, referring page, and general browser and device information; IP addresses are truncated and never stored in plain text. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in determining whether this service is found and used. There is no disclosure to third parties and no advertising. Because neither cookies nor fingerprints are used, there is no consent banner here.
No requests to third parties
Images, video, and stylesheet reside on the same server as this page. Fonts from third-party providers are never loaded — typography relies entirely on fonts already installed on your device. As long as you do not click a button, no request leaves this site to any third party.
What happens when clicked: buttons and links leading to external sites — the tip jar options in the footer and the reference to the studio liesener.de — are standard links. Clicking one opens the respective provider's page, transmitting your IP address and timestamp to that provider — but not the referrer, ensured by rel="noreferrer". Nothing is transmitted beforehand.
Sharing: Below every magazine article, on its card in the overview, and on the page of every table, there is a share button. “Share” opens your device's native dialog, “Copy link” places the address onto your clipboard — nothing leaves your device until you select an app yourself. “Share on WhatsApp”, by contrast, is a standard link, not an embedded service: clicking it opens WhatsApp and transmits your IP address and the prepared text to WhatsApp — but not the referrer, ensured by rel="noreferrer". Nothing is transmitted beforehand.
Numbers on the shelf
Beneath each case, the number of initiated rounds and average completion time are displayed. These metrics originate from the game log. They contain no names, no addresses, and no IP addresses — only room code, station reached, player count, and duration.
Voices from the table
If the home page shows the section “Voices from the table”, these are authentic quotes from real teams taken from a game's debrief form. They appear there only if both conditions are met: the team gave explicit consent — via an unselected checkbox — and the studio read and approved the text beforehand. There are no fabricated reviews; if nothing authentic is available, nothing is displayed.
Displayed are the quote, a chosen team name, the rating, the case, and the time taken in minutes. No real name, no address, no photo. The legal basis is consent (Art. 6(1)(a) GDPR); it can be revoked at any time — in the form itself by unchecking the box (removing quote and name) or informally to the address in the legal notice.
The average rating on a case tile is different and does not depend on this consent: it calculates across all submitted ratings for that case — including those where no text was approved for publication. An individual rating never appears; what is shown is an anonymous, unassigned average, appearing only once at least three ratings exist. The number next to it counts rounds, not feedback forms: each seat submits its own, with a match having two to four.
Inside the games
Opening a table leaves the foyer and enters the respective game. There, a chosen display name is stored, the IP address is reduced to a salted hash to curb abuse, and a processor handles real-time connections on our behalf. Full details appear in the privacy notice of each game.
Your rights
Access, rectification, erasure, restriction, objection, and complaint to a supervisory authority — informally to sascha@liesener.de. Responsible party is Sascha Liesener; see legal notice for address.
