Privacy Policy

1. Controller

Damir Lender

Sauerbruchstr. 30, 42215 Wuppertal

2. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When visiting the website, information (e.g., IP address, browser type, time of access) is automatically transmitted to Vercel's servers.

Vercel Privacy Policy

3. Authentication (Google OAuth)

For login, I use Google OAuth via Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. During login, your Google profile data (name, email address, profile picture) is retrieved to create your user account. Processing is based on your consent (Art. 6(1)(a) GDPR).

You can revoke and disconnect the link to your account at any time in the security settings of your Google account.

4. Database & Game Progress

To store game progress (level, energy, user ID), I use Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992. Data is stored in a PostgreSQL database and serves exclusively the functionality of the game.

Third Country Transfer & Standard Contractual Clauses

Both the hosting via Vercel (USA) and the database infrastructure via Supabase (Singapore) may involve data transfers to third countries outside the EU/EEA. In both cases, these transfers are based on the Standard Contractual Clauses (SCC) of the EU Commission pursuant to Art. 46(2)(c) GDPR.

5. Purpose of Data Processing

Provision and operation of the game
Storage of game progress (level, energy)
Authentication via Google OAuth
Display of the leaderboard

6. Data Retention

Your user data and game progress are stored as long as your account is active. Upon request to delete your account, your data will be deleted immediately, but no later than within 30 days.

7. Your Rights

You have the right to information, correction, deletion, and restriction of processing of your personal data. You also have the right to object and the right to data portability.

Insofar as the processing of your data is based on consent (Art. 6(1)(a) GDPR), you have the right to withdraw this consent at any time with effect for the future (Art. 7(3) GDPR).

To exercise these rights, you can send me an email at any time at: info@iq-path.com

You also have the right to lodge a complaint with a data protection supervisory authority regarding my processing of your personal data. The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

8. Cookies & Local Storage

This website uses Local Storage in the browser to save game progress locally. No third-party tracking cookies are used.