Privacy Policy

This is an English summary of our Datenschutzerklärung. The German version is authoritative. In short: we only store what the game needs. No ad networks, no tracking, no data sharing with partners, no photo uploads, no chat.

Controller

Philip Windsperger, Emil-Geis-Straße 14, 81379 Munich, Germany · info@muenchner-gesindel.de

What we process

Email address: only to send your one-time login code (sent via Brevo, France). Never shown to anyone.
Nickname, avatar and district: public, e.g. in rankings and multiplayer games. A filter checks new nicknames (banned words, contact details, birth years, names that look like MunichGames). In multiplayer games the server takes your nickname and ban status from our database; guests appear as "Gast" with a number.
Age confirmation: only the fact that you confirmed being 16 or older.
Birth month and year: only asked if you buy Markerl with real money (no day), so that a lower spending limit applies to players under 18. If you enter an age under 16, we lock the account (no ranking, friends, invites or notifications); you can still delete it.
Game progress: scores, levels, missions, achievements, Markerl (coins), items, your virtual dog, your village; a 90-day log of submitted rounds to detect cheating; cheat detection: daily counters of things the app itself never sends (impossible scores, forged rewards, tampered messages to the game servers) with a small example (game and numbers) and your XP once a day for comparison, no IP addresses or device data, deleted after 30 days; on clear signs a case is opened for our moderators and your new scores only count after a human has checked it; a 90-day log of every change to your Markerl balance (amount, new balance, source, time).
Friends, invites, online status: friend requests (open and declined requests are kept for 30 days), invite links (they do not create a friendship), game invites, the list of people you blocked (until you unblock them or delete your account).
Reports and bans: the reason (from a fixed list), where the report was made, the reported nickname, district, club or Instagram/TikTok name at the time of the report, who reported, and our decision. Only the operator sees reports; the reported person is not told who reported them. Reports are deleted 12 months after handling and stay without a link to an account that is deleted. For bans we store the ban and the reason shown in the app.
Push notifications: only if you turn them on.

Ranking

Public without login: nickname, district, records, XP, avatar. No round counts and no times. For everyone you are not friends with, the data is up to 30 minutes old. With online status "Keiner" (nobody), your entry is updated only once a day and others do not see you in the daily ranking (the crown stays public). The daily ranking shows the top 25 per game. (German original: „Für alle, die nicht mit dir befreundet sind, ist der Stand bis zu 30 Minuten alt.“)

Online status

Default: friends only (older accounts were reset once). You can choose friends only, everyone or nobody. With "nobody" we store no time at all, not even when the app was open; to see others online you must be visible yourself. With "nobody", an invite notification may arrive while the app is open, because we do not store when it last checked for invites.

Instagram and TikTok

Connecting Instagram or TikTok is optional and based on your consent. You log in with the platform directly. Our server (Hetzner, Germany) receives only your username and the platform account ID once. We do not store access tokens (TikTok tokens are revoked immediately, Instagram tokens expire after one hour), do not read posts, followers or messages, and never post. Your username is shown with a check mark to people you are friends with (default), to nobody, or to everyone signed in; "everyone" only applies if you are an adult according to your birth date. People you blocked never see it. You can disconnect at any time in your profile, which deletes the username immediately; deleting your account does the same.

Purchases

Payments are processed by Stripe Payments Europe Ltd., Dublin (Ireland), as an independent controller; Stripe receives your email address for the receipt. We store time, pack, price, test or live, Stripe IDs, the time of your consent to immediate delivery and the version of that text, and the status, for 10 years (German commercial and tax law). From Stripe we receive a card check value; we keep only a non-reversible hash of it, so that the monthly limit for minors applies per card. After account deletion the purchase rows stay without the account link, but with a non-reversible check value of your email address.

Check value after deletion

If a banned account is deleted, or the birth date shows someone under 18, we keep a non-reversible check value of the email address (with the ban reason and end, or the birth month and year) so that bans and the spending limit for minors cannot be bypassed by signing up again: 12 months for a ban, until age 18 plus one month for minors. Legal basis: Art. 6(1)(f) GDPR.

Where data is stored and recipients

Account and game data: Supabase, Amazon Web Services data center in London (United Kingdom, covered by an EU adequacy decision under Art. 45 GDPR). Multiplayer servers, notifications, payment start and the social login: Hetzner Online GmbH, Germany (IP addresses only in memory while connected). Login codes: Brevo (France). Payments: Stripe Payments Europe Ltd., Dublin. The web app is served via GitHub Pages (USA, EU-US Data Privacy Framework). Your browser's local storage keeps your session and settings; there are no third-party cookies.

IONOS (DNS service for munichgames.app; resolves the addresses of the web app munichgames.app and of the game server play.munichgames.app). It sees the IP address of the requesting DNS server (usually your internet provider's, sometimes with a shortened part of your IP address), no game data. (German original: „IONOS (DNS-Dienst für munichgames.app; löst die Adresse des Spielservers play.munichgames.app auf). Er sieht die IP-Adresse des anfragenden DNS-Servers (meist von deinem Internetanbieter, manchmal mit einem gekürzten Teil deiner IP-Adresse), keine Spieldaten.“)

Your rights

You can request access, correction, deletion, restriction and data portability, object to processing based on legitimate interests (Art. 21 GDPR) and withdraw consent at any time: info@muenchner-gesindel.de. You can delete your account yourself in your profile ("Konto löschen"). You may complain to a supervisory authority, e.g. the Bavarian BayLDA. We make no automated decisions under Art. 22 GDPR (cheat detection only holds back new scores until a human decides); the only exception is that entering an age under 16 locks the account at once, and we review each such case by hand.

Retention

As long as your account exists, with these shorter periods: round logs 90 days; Markerl bookings 90 days; cheat detection counters 30 days; quiz answers 2 years; daily ranking at most 7 days; daily kings 90 days; Viertel battles and wars 30 days; club events 90 days; game invites 1 day; last-seen time 30 days without use; open and declined friend requests 30 days; reports 12 months after handling; sign-ups without a profile 7 or 30 days; Supabase access logs (with IP) at most 7 days, then Supabase deletes them automatically; real-money purchases 10 years; check value after deletion 12 months (ban) or until 18 plus one month (minors). Accounts unused for 24 months may be deleted after a reminder (currently by hand).

When you delete your account, all game data is deleted. What may or must stay: real-money purchases (10 years, without the account link), reports (without a link to your account, 12 months after handling), and the check value in case of a ban or a minor.

Last updated (Stand): 24.10.2026