Privacy Policy

As of October 2026

Overview

This notice tells you, pursuant to Art. 13 GDPR, which data is processed on marckimmel.de, for what purpose and on what basis.

Controller

Marc Kimmel, support@marckimmel.de. Full details in the imprint.

Server logs

When you open the site, the server stores your IP address, the time, the referrer, the user agent and the requested page. This serves operation and defence against attacks. Legal basis: Art. 6(1)(f) GDPR. Deleted after 14 days at the latest.

Own reach measurement

The site counts by itself how often its pages are opened. In addition, it sets the cookie mk_visitor with a random identifier and records which pages are opened under this identifier and when. This shows how many different people visit the site and which paths they take. If you are signed in, the visits stored under this identifier are assigned to your account. Your IP address is not stored, and nothing of this is shared. If you decline in the notice at the bottom, everything stored under your identifier is deleted. If you withdraw your consent directly below this section, nothing new is stored. Legal basis: Art. 6(1)(f) GDPR, with your consent Art. 6(1)(a) GDPR.

Account and sign-in

You can sign in with your Google account. Google then transmits your e-mail address, your name and your profile picture. Your browser only loads the sign-in script of Google (accounts.google.com, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) when you click a sign-in button. Google then learns your IP address and receives the cookies it has set in your browser itself. The first time, you create an account and provide a first name and a username, optionally a last name and a date of birth. Both are stored: what Google provides and what you enter yourself. We store a copy of your profile picture on our server when you first sign in. You can change or remove it in your profile. This serves the operation of your account, the legal basis is Art. 6(1)(b) GDPR. Signing in uses a cookie that is technically necessary and only identifies the session. You can delete your account completely at any time at marckimmel.de/delete; game results and the visits of reach measurement assigned to your account remain without any link to you.

Music game

In the music game at /spiele/musik you listen to short snippets of songs. These snippets are held on a storage server of this site; your browser loads them from there and not from the music provider. The providers learn neither your IP address nor which song you are listening to. Three exceptions belong here: first, the cover images of songs and playlists are held on the same storage server once they have been transferred there; until that has happened, your browser loads them directly from the provider (Deezer, operated by Deezer S.A., 24 rue de Calais, 75009 Paris, France), which then learns your IP address. Second, your browser does load a snippet from the provider after all if the site storage is switched off or a song is not held there. Third, when a playlist is imported, this site's server itself calls Deezer, MusicBrainz (MetaBrainz Foundation, California, USA) and possibly Apple (Apple Inc., Cupertino, USA); this concerns no visitor data, only information about the music. The basis is our legitimate interest in a functioning service (Art. 6(1)(f) GDPR). Playing works without signing in; if you are signed in, the result is assigned to your account so that streak, level and history can build up. If you delete your account, the games remain without that assignment. A note on the snippets: they are 30-second previews. Full tracks are only accessible at the provider with a Premium account.

Pinger

The search game Pinger at /spiele/pinger only works with your location. If you allow it in the browser, the open game view sends your location (coordinates and accuracy) to the server of this site every few seconds. The rhythm of the sound is calculated from it. Positioning only runs while the game view is open, and you can withdraw the permission in the browser at any time. Stored with your player name are the time of your last signal, your smallest and your most recently measured distance to the hidden point and, while the search runs, the points of your route. The most recent distance decides the crown in the player list: the other players see who is currently closest to the point, but no distance and no location. After the end, the result page of the game shows the routes together with the player names to everyone who opens the result. The join dialog points this out. No account is needed, a link to you only arises through the name you choose yourself. With the street option, the server queries the ways around the starting point when a game is created, from the routing service routing.openstreetmap.de and as a fallback from the Overpass service (overpass-api.de), both operated by FOSSGIS e.V. for OpenStreetMap. Only a coordinate pair near the starting point is transmitted, no information about you. Your browser loads the maps from the tile servers of the OpenStreetMap Foundation (tile.openstreetmap.org, St John’s Innovation Centre, Cambridge, United Kingdom), which learn your IP address in the process. The legal basis is your consent given by allowing location access and joining the game (Art. 6(1)(a) GDPR), and for the maps our legitimate interest in a working display (Art. 6(1)(f) GDPR). The data remains stored until the game is deleted. Anyone who knows the game password can delete it, and so can we on request to support@marckimmel.de.

External API

At marckimmel.de/api/v1 the site offers an interface for services that access it with an API key by arrangement. For every call to this interface, including a rejected one without a valid key, the server stores the time, method, requested path, result, duration, IP address and user agent. This serves the operation of the interface, the enforcement of quotas and the defence against abuse. Legal basis: Art. 6(1)(f) GDPR. Deleted after 90 days. Only daily totals per key without IP address and user agent are kept.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR) as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). An informal e-mail to support@marckimmel.de is sufficient.

Changes

This notice is adapted when the services or the legal situation change. The current version is available at marckimmel.de/en/dataprivacy.