Privacy Policy

This is a translation for your convenience. The German version is the legally binding one: Datenschutzerklärung.

Controller

Christoph Scheel, Am Schweizersbild 2, 88630 Pfullendorf, email: kontakt@chrisscheel.de

What this is about

DRAKVOR is a free private browser game. Only the data needed to run the game is processed. There is no advertising, no tracking and no connection to social networks. Data is not passed on to third parties. The exceptions are the hosting provider as a processor (see “Hosting”) and encrypted notifications to the devices of the team (see “Admin area”).

Game account

When you create an account, a login name of your choice, a password (stored only as a hash, not in plain text), the language you chose and, if you wish, an email address are stored. The email address is optional and is used only to send you a new password on request. In addition, the game data of your hero (name, stats, progress) and the time of registration and of your last login are stored. The legal basis is Art. 6(1)(b) GDPR (performance of the game you asked to play).

Your hero’s name, level, achievements and events in the game (for example “was slain in the wood”) are visible to all players. That is part of how the game works. Your login name and your email address are not public.

Cookies

In the game, DRAKVOR sets a single technically necessary session cookie so that you stay logged in after logging in. It contains a random identifier and is deleted when you close the browser. No consent is required for this (§ 25 Abs. 2 Nr. 2 TDDDG). For the session, the IP address and the browser identification are stored on the server so that logins can be managed and ended if necessary (Art. 6(1)(f) GDPR, legitimate interest in managing logins securely). This data is deleted no later than 14 days after the last request.

Settings in the browser

Whether the sound is on, whether the scanlines are shown and whether the note about full screen has already been shown is remembered by your browser in local storage (localStorage) on your device. These settings are not transmitted to the server. You can delete them in your browser at any time. They are stored only because you chose the setting yourself (§ 25 Abs. 2 Nr. 2 TDDDG).

Protection against misuse

To protect the game against automated requests, the number of requests per IP address is counted: per minute for normal moves in the game, per hour for “forgot password” and per quarter of an hour for login attempts in the admin area. For this purpose the IP address is stored for no longer than 24 hours. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in undisturbed operation).

Playing through a bulletin board (WebCarrier BBS)

DRAKVOR can also be played through bulletin boards that use WebCarrier BBS. A bulletin board is run by its own operator, who is responsible for the data on their board. When you play DRAKVOR through a bulletin board, the board transmits to DRAKVOR: the identifier of your user account on the board, your user name there, the language you chose and your input in the game. In addition, the time you last played and the game data of your hero are stored, as for the game account above. This data is processed in order to assign a game state to you and to provide the game (Art. 6(1)(b) GDPR). DRAKVOR does not receive your IP address in this case, only that of the board’s server. Your user name from the board is visible only to the team in the admin area; publicly, as for everyone, only your hero appears, with the name of the board as its origin.

The data is stored until your game account is deleted. Because you cannot log in to this website with an account from a bulletin board, deletion is done by email to kontakt@chrisscheel.de, stating the name of your hero and of your board. The data is not passed on to third parties.

Admin area

This section concerns only members of the team (moderators and sysops) who log in to the admin area at /admin/. Logging in there sets a cookie of its own that is technically necessary, applies only to the admin area and expires 30 days after the last request; during login a second cookie is added, which disappears when the browser is closed (§ 25 Abs. 2 Nr. 2 TDDDG). For each login, the server stores only a hash of the cookie, a short device name taken from the browser identification (such as “Chrome, Android”) and the time of the login and of the last request. After 30 days without a request the login is deleted.

A team member who switches on notifications thereby allows them to be sent to that device (Art. 6(1)(a) GDPR). For this, the address the browser assigns for notifications, the associated keys, the device name and the chosen settings are stored. The notifications (for example, that a new hero has entered the land, with their name) are delivered through the notification service of the respective browser maker, such as Google, Mozilla or Apple. These services may be based outside the EU, for example in the USA. The address of the device and the encrypted content reach them there, but not its plain text. They are end-to-end encrypted on the way; the service cannot read their content. Switching notifications off deletes this data, as does a report from the service that the device no longer accepts notifications.

Every action of the team on a game account (for example banning, renaming, correcting values, deleting) is recorded in a log with the time, the acting team member and the account concerned (login name or name on the bulletin board, and hero name), so that it remains traceable who did what (Art. 6(1)(f) GDPR). Entries in this log are deleted after two years.

Hosting

This website is hosted by Febas in Germany. Febas processes the data on behalf of DRAKVOR on the basis of a data processing agreement (Art. 28 GDPR).

Server log files

When the site is accessed, the web server automatically stores access data (IP address, date and time, page requested, browser type). This data serves only security and troubleshooting and is deleted automatically after no more than 7 days. The legal basis is Art. 6(1)(f) GDPR.

Deletion

You can delete your account and your hero yourself at any time. To do so, log in and open the “Account” page in the game. There you confirm the deletion with your password. Account, hero, email address and open links for resetting the password are then removed completely and immediately.

If you can no longer log in, you can also ask for deletion by email to kontakt@chrisscheel.de, stating your login name.

Entries in the daily news and the Hall of Heroes that contain only the hero’s name remain as part of the game’s history, unless you expressly ask for their deletion as well. Entries in the log of the admin area concerning your account remain until these two years have passed (see “Admin area”).

Support through Ko-fi

These pages contain a simple link to Ko-fi (ko-fi.com). No data is transmitted to Ko-fi when you open these pages. Only when you click the link do you leave DRAKVOR, and Ko-fi is responsible for the processing of your data on ko-fi.com.

Your rights

You have the right to information about the data stored about you, to rectification, erasure, restriction of processing, data portability and objection. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg). You can withdraw a consent, for example for notifications, at any time with effect for the future (Art. 7(3) GDPR), for instance by switching the notifications off.

Changes

This policy is updated when the game or the legal situation changes. The version published here always applies.