Privacy

Last updated: September 24, 2026

The German Datenschutzerklärung is the binding version.

1. Controller

À Tellinghusen Software, owner Danilo à Tellinghusen, Breiter Weg 10a, 39104 Magdeburg, Germany
Email: kontakt@gameclique.app

The controller within the meaning of the General Data Protection Regulation (GDPR) is the provider named in the legal notice.

2. This website

Hosting

The website is stored as static files with Amazon Web Services EMEA SARL (Luxembourg) and delivered through AWS Amplify Hosting and the Amazon CloudFront network. To deliver a page, the service technically processes your IP address, the requested address, date and time and details of your browser. The legal basis is our legitimate interest in secure and fast delivery (Art. 6(1)(f) GDPR).

CloudFront delivers content through servers in many countries, usually from the location closest to you. Your IP address may therefore also be processed at a location outside the European Union. Amazon Web Services, Inc. is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); in addition, the AWS data processing addendum contains the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR). AWS processes the data on our behalf (Art. 28 GDPR).

We do not analyse access logs and keep no list of who visited which page.

Reach measurement with Vemetric

We use Vemetric on this website to see which pages are viewed how often, which page leads visitors to the app stores, which links to other websites are clicked, whether the language is switched and which frequently asked question is opened. Your browser loads the measurement script from a Vemetric server, which technically transmits your IP address to Vemetric. Vemetric works without cookies, stores nothing on your device and builds no profiles across websites. Data is processed in the European Union. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR). Vemetric processes the data on our behalf (Art. 28 GDPR). You can object to the measurement at any time (Art. 21 GDPR), for example by using a content or tracking blocker in your browser.

Google Analytics

Only if you choose "Accept analytics" in the banner do we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Before that, and if you choose "Only necessary", your browser loads nothing from Google. Google Analytics shows us how the website is used so we can improve it.

The data processed are the pages you visit, the time spent on them, the page you came from (referrer), your approximate location (country and region), details of your device, operating system and browser, and a random identifier. Google Analytics 4 does not store IP addresses: the IP address is only used briefly to determine the approximate location and is then discarded. Google signals and advertising features are switched off, and the data is not used for personalised advertising.

Google Analytics sets the cookies _ga and _ga_<ID>. They contain a random identifier so that returning visits can be recognised, and they are stored for up to 2 years. Google Analytics keeps the analysed data for 14 months and then deletes it.

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Google processes the data on our behalf (Art. 28 GDPR). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

You can withdraw your consent at any time with effect for the future: tap "Cookie settings" at the bottom of any page and choose "Only necessary". The Google Analytics cookies in your browser are then deleted and nothing more is loaded from Google.

Google Search Console

We use Google Search Console by Google Ireland Limited to see how this website appears in Google search results, for example for which search terms it is shown and how often it is clicked. Google only provides us with aggregated figures. Nothing is embedded on this website for this: visiting our website sends no data to Search Console and sets no cookies. We confirm that we own the domain through an entry in the domain's DNS.

Cookies only with consent, no ads

Without your consent the website sets no cookies. Only Google Analytics sets cookies, and only if you agree. We store your choice in the banner and its time in your browser's local storage (localStorage) so we do not have to ask again on every visit. This is strictly necessary for that purpose (Section 25(2) no. 2 TDDDG). We ask again after 12 months. There are no ad networks and, apart from the Vemetric measurement script and, only with your consent, Google Analytics, no embedded content from other providers.

Links to the app stores

The store buttons are plain links. Only when you tap one does the Apple or Google page open, and their privacy policy applies there. We add the name of the page you came from to the link so we can see which page leads to installs. It does not identify you.

The page /en/laden/, which the QR code points to, checks in your browser whether you use an iPhone or an Android phone and forwards you to the right store. This check happens on your device only; nothing is sent to us.

Event requests

Using the form on gameclique.app/events (in German), schools, clubs, companies and other organizers can request an event code with its own sticker. We process the event name, the organizer, the description, the date, the expected number of participants, the email address given and the time of the request. The data goes to our server at Amazon Web Services EMEA SARL in Frankfurt am Main, Germany (region eu-central-1), and from there by email (Amazon SES, also Frankfurt) to kontakt@gameclique.app. We use the email address for this event only: for questions and to send the code with short instructions. The legal basis is handling your request (Art. 6(1)(b) GDPR).

The request including the email address is deleted automatically 30 days after the event date; we delete the related emails in our inbox by then as well. For an approved event we keep, without any email address, the code, the event name, the organizer, the date and the address of the sticker image until 400 days after the event. The app shows these details when it awards the sticker.

To protect the form against mass submissions, we count requests per sender and hour. We do not store the IP address for this, only a hash value derived from it, which is deleted after two hours at the latest. The legal basis is our legitimate interest in a working form (Art. 6(1)(f) GDPR).

When a host redeems an event code in the app, the app registers the rooms they open on the event day with our server, with the game, the room code and the event code, so guests in those rooms get the sticker. This link contains no personal data and is deleted after 12 hours.

3. The GameClique app

Storage on your device

GameClique stores crews, player names, sessions and results locally on your device only. There is no account and no sign-in. This data is not transmitted to us. Only what you enter yourself for the buzzer, the games with several phones or for planning a game session is transmitted (see below).

You can remove all data at any time in the settings via Delete all data. Uninstalling the app deletes it as well.

Usage statistics of the app

Without consent the app only counts anonymously which games are selected, started, finished or abandoned, how long a round took, how many people played, which settings were chosen and which screens of the app are opened, plus platform, app version, language and whether Plus is active. This goes without any device ID to our own server at Amazon Web Services in Frankfurt am Main, where it is added up into daily totals right away. We do not store individual events or IP addresses, so nothing can be traced back to you. The purpose is to improve the app (legitimate interest, Art. 6(1)(f) GDPR). Names, texts and content are never transmitted.

Only if you consent (Art. 6(1)(a) GDPR) does the app also measure how often you open it and which paths you take through it. The setting is off by default. The service provider is Vemetric. According to the provider the servers are located in the European Union, no cookies are set and no cross-device identifier is created. You can withdraw your consent at any time in the settings. From that moment on, no further events are recorded.

Buzzer and games with several phones

When you open or join a buzzer room, the room code, nicknames, buzz times and scores are processed via Firebase Realtime Database (Google Ireland Limited) in a data center in the European Union. An anonymous technical identifier is created for this purpose. A room expires after 12 hours. Google processes this data on our behalf (Art. 28 GDPR). Where Google LLC in the USA is involved, it is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

Please do not use a full name as your nickname. The legal basis is the provision of the feature you use (Art. 6(1)(b) GDPR).

When joining, you can take a photo of yourself if you want to. It is shrunk to a small thumbnail on your device, processed via Firebase Realtime Database in the European Union and shown to everyone in the room. It is deleted when you leave the room, your connection ends or the room is closed, after 12 hours at the latest. On your device it stays until you discard it. Without a photo, a colored dot is shown.

Draw Telephone works the same way through rooms with a code: nicknames, colors, the optional photo, the sentences you write, guesses, drawings (stored as a list of strokes) and votes for the favorite moment are processed via Firebase Realtime Database in a data center in the European Union and shown to everyone in the room. They are deleted when the host closes the room, at the latest after 12 hours. Shared pictures and videos are created on your device and only go where you share them.

Categories with several phones also uses rooms with a code: nicknames, colors, the optional photo, the answers of each round, who pressed stop and which answers were challenged are processed via Firebase Realtime Database in a data center in the European Union and shown to everyone in the room. They are deleted when the host closes the room or starts a new game, at the latest after 12 hours. The pen and paper mode on one phone only stores data on your device.

Buzzer Quiz, Take a Guess, Fact or Fake and How Far Is It? also use rooms with a code: nicknames, colors, the optional photo, the questions and claims, buzz times, chosen answers, guesses and scores (in How Far Is It? also the names and coordinates of the two places) are processed via Firebase Realtime Database in a data center in the European Union and shown to everyone in the room. They are deleted when the host closes the room or starts a new game, at the latest after 12 hours. Played on a single phone or alone, these games only store data on your device.

Quick Wit, Hunt the Lie and Fill the Gap also use rooms with a code: nicknames, colors, the optional photo, the prompts, the freely typed answers, the cards played in Fill the Gap, the votes and the scores are processed via Firebase Realtime Database in a data center in the European Union and shown to everyone in the room. Please do not write anything you would not show to everyone in the room, and no details about other people. The data is deleted when the host closes the room or starts a new game, at the latest after 12 hours.

Double Agents and One Word Only also use rooms with a code: nicknames, colors, the optional photo, the word cards of a game, the clues from the chiefs, the cards that were tapped, the written clue words, the typed answers and the shared score are processed via Firebase Realtime Database in a data center in the European Union and shown to everyone in the room. Please do not write anything you would not show to everyone in the room, and no details about other people. The data is deleted when the host closes the room or starts a new game, at the latest after 12 hours.

Draw and Guess also uses rooms with a code: nicknames, colors, the optional photo, the word being drawn, the strokes of the drawing (as a list of lines) and the moment of a correct guess are processed via Firebase Realtime Database in a data center in the European Union and shown to everyone in the room. Wrong guesses stay on your device and are never sent. The data is deleted when the host closes the room or starts a new game, at the latest after 12 hours.

Sink the Fleet on two phones also uses a room with a code: nicknames, colors, the shots fired and the reply from the phone that was fired at (miss, hit, sunk) are processed via Firebase Realtime Database in a data center in the European Union and shown on both phones. Your fleet layout stays on your device until the game ends and is only sent afterwards, so both of you can see the revealed fleets. The data is deleted when the host closes the room, at the latest after 12 hours.

How Far Is It? suggests places from your country. To do so, the app reads the time zone and language setting of your device. Your location is never requested, and this information does not leave your device. You can change or clear the country in the game at any time.

Purchases

Purchases are handled by the Apple App Store or Google Play. We do not receive any payment data.

To verify your purchase status we use RevenueCat (RevenueCat, Inc., USA). A random app identifier and details of your purchases are processed. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). RevenueCat processes the data on our behalf (Art. 28 GDPR). Transfers to the USA are covered by the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Permissions

The camera and the photo picker are only used when you take or choose a photo yourself: for a certificate, as a player's profile photo or as the optional photo of yourself when joining a room (see Buzzer and games with several phones). Your operating system asks for your permission first. A certificate photo stays on your device until you share the image yourself.

Profile photos of players are downsized and stored on your device only. They are never uploaded and never transmitted to the buzzer or to other devices. You can remove a profile photo at any time. Deleting a player, a crew or all data deletes it as well. Please only take photos of people who agree to it.

Notifications: On first start your phone asks whether GameClique may send you notifications. Only if you agree (Art. 6(1)(a) GDPR) does the app register with Firebase Cloud Messaging (Google Ireland Limited). A random technical identifier for your device is created and the topics news and your language are subscribed. We use this to send news, events and hints about holiday stickers to everyone who agreed; we do not know who you are. You can turn notifications off at any time in the app settings under News and events or in your phone's settings; the identifier is then deleted.

Planning game sessions

When you plan a game session or vote through an invitation link, we process: the title, crew name, place and note of the session, the suggested dates, the nicknames of the participants, their answers for each date, game suggestions and game votes, and timestamps. There is no account, we never ask for an email address, and we store neither IP addresses nor device identifiers. Anyone who has the link can see the session with all nicknames and the number of votes per date. Voting happens in the app. Everyone taking part in the session sees, like the host, the answers of the others, that is who said yes, maybe or no to which date.

The data is stored with Amazon Web Services EMEA SARL in a data center in Frankfurt am Main, Germany (region eu-central-1). The legal basis is the provision of the feature you use (Art. 6(1)(b) GDPR). The app on your device only keeps a random key that identifies you as host or participant.

A game session is deleted with all its data 30 days after the last suggested date, or 30 days after the chosen date once it is set, and no later than 120 days after it was created. The host can delete it at any time. If you remove yourself, your nickname and votes are deleted right away.

Deleted data is removed immediately; there is no database backup holding older copies. The server's technical log contains no personal data and is deleted after 14 days.

Game ratings

After a round the app may ask how you liked a game. Rating is voluntary. If you send a rating, we transfer the stars, your optional sentence, the game, the language, the app version, the operating system (Android or iOS) and the time to our server at Amazon Web Services in Frankfurt am Main. No names, device identifiers or other personal details are transferred, and the rating cannot be linked to a device. Please do not put names or other personal details into the optional sentence.

Once a day we email ourselves a summary of new ratings to kontakt@gameclique.app. We use ratings to improve the games; the legal basis is our legitimate interest in doing so (Art. 6(1)(f) GDPR). We keep ratings for as long as we need them for this purpose and delete them afterwards.

4. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection supervisory authority. To exercise these rights, use the address given in the legal notice.