Privacy at Tasten-Rakete

Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

In short

Tasten-Rakete is a typing game for children aged 6 and up. You can play without an account; your progress then stays in your browser. Only if you sign in with Google is your progress stored so you can continue on other devices.

The site has no advertising and no analytics tools. There is no automated decision-making and no profiling.

When you open the site

When you open the site, your browser sends details the site cannot be delivered without: IP address, date and time, the requested address and the browser identifier. The site is hosted at Netlify. Fonts and styling come from the same server as the site.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest: delivering the site securely and reliably. How long Netlify keeps its logs follows its own terms.

Netlify, Inc.

101 2nd Street, San Francisco, CA 94105, USA

Data may be transferred to the USA. Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Sign-in and progress

Signing in is optional and a matter for the parents: a child should only sign in if the parents agree and choose the account themselves or together with the child. The game works fully without signing in.

If parent or child sign in with Google, the sign-in runs through Google and Supabase's services. Supabase stores the details Google passes on, such as the email address. Progress includes a random user ID, experience points, unlocked levels and best scores, unlocked and equipped items, medals, the daily missions and typing errors per key. Name and email address are not in the table holding the profile; that table is technically readable by visitors of the site.

The legal basis is Art. 6(1)(b) GDPR (the account you created) and, for children under 16, the parents' consent under Art. 8 GDPR. The data stays until the account is deleted.

Supabase Pte. Ltd.

65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513, Singapore

Transfers to a country outside the EU are based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Provider’s privacy policy

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland

Data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Children

The game is aimed at children aged 6 and up. I don't ask for names, addresses, photos or ages, and the game has no chat and no public leaderboard. Only game data is stored, and with sign-in the details from the Google account.

Because children under 16 cannot consent to processing on their own, parents should sign in or approve it. Anyone who doesn't want to sign in plays as a guest.

Storage on your device

The game saves progress in your device's browser storage (entry "tastenRaketeSave"), also for signed-in users as a backup. When you sign in, the Supabase library also stores the sign-in session in browser storage. Both are required for the game and the sign-in to work (section 25(2) no. 2 TDDDG). The site sets no cookies.

The entries stay until you clear browser storage or sign out (the session).

Deleting your account

There is no delete button in the game. Write to me at the address above and I will delete the account and all related data. You delete the progress in your browser yourself via your browser settings.

Links to other sites

The site links to lupfa. for the imprint and privacy notice. By clicking you leave the game; the notice of that site applies there.

Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on legitimate interests (Art. 21). An email to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.