Privacy policy

Data controller

Hosting and website access

We host the website with Scaleway SAS. When you visit, the hosting infrastructure processes your IP address and the requested resource to deliver the page. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is operating the website and making it available securely.

Domain registration

The domain is registered with IONOS SE. IONOS processes the domain holder’s registration details for this purpose.

Cookies and browser storage

For game statistics, we count page views, round starts and completions and measure the time to complete a round. We aggregate these figures by game and day. The daily statistics store no player identifiers and use no additional cookies. For navigation, it stores technical details such as scroll position in your browser tab’s session storage. This allows the browser to restore the previous page state when you go back. These details stay in your browser. When you visit the home page, the website stores the language from the page address in the LemonStreak.Language cookie for up to one year. It uses this preference the next time you open the home page without a language in the address. When you turn the factory guide on or off, the website saves that choice in your browser until you change it or clear the website’s browser data. This preference stays in your browser. The website serves its own font files.

Contacting us

When you write to us, we process your contact details and the contents of your message to handle your request. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and otherwise Article 6(1)(f) GDPR. Our legitimate interest is responding to your enquiry. We delete this data once the enquiry is resolved, subject to any legal retention requirements.

Administrator sign-in

When an administrator signs in, we use an essential session cookie. The session ends at sign-out or after two hours at the latest.

Ideas submitted to the workshop

We store your suggestion and the time you sent it so we can consider ideas for new minigames. The legal basis is Article 6(1)(f) GDPR. To prevent spam, your browser runs a short calculation. We run the check ourselves and do not share data with a verification provider. To limit requests, we use a short-lived keyed hash of your IP address in memory. If you choose to leave your email address, we can send you one update if we make your game (Article 6(1)(a) GDPR). You can withdraw this consent at any time by emailing the address above. We delete your address after sending the update, when you withdraw consent, or at the latest twelve months after submission. We keep the suggestion for as long as we need it to work on our games.

Your rights

Subject to the conditions in the GDPR, you have the right to access, rectify, erase, restrict processing and receive a portable copy of your data. You can object to processing based on legitimate interests under Article 21 GDPR and lodge a complaint with a data protection authority, such as the Bavarian State Office for Data Protection Supervision (BayLDA).