Privacy Policy

This site is operated from Germany. The German version of this policy is the legally authoritative one; this English text is a courtesy translation.

The following explains which personal data is processed when you visit https://pondr.games.

Controller within the meaning of the GDPR

Sebastian Mühr
Str. der Pariser Kommune 15
10243 Berlin
Deutschland

Email: hello@pondr.games

We have not appointed a data protection officer because the criteria of Art. 37 GDPR / § 38 BDSG do not apply.

What data is processed

When you visit the site, our host processes technically unavoidable connection data (e.g. IP address, timestamp, browser and OS information) in server log files. This data serves the display, stability, and security of the site. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

When you play, we additionally process game session data to the extent necessary to operate the service: an anonymous technical identifier (a random UUID generated in your browser), an optional display name you choose freely, the current state of your puzzle (player marks), and your solve times. When you join a co-op room, the identifier and display name are also visible to the other participants in the room.

We use no tracking cookies, no analytics tools, no advertising pixels, no third-party trackers. Only the technical identifier is stored in your browser's local storage so that you can return to your sessions and streaks across visits.

Recipients of your data

We use the following processors to provide the service:

Cloudflare, Inc.

101 Townsend St, San Francisco, CA 94107, USA

Purpose: Hosting, content delivery network, backend execution, and data storage (Workers, D1, Durable Objects).

Data processed: Connection data (e.g. IP address, browser data) and game session data (anonymous identifier, chosen display name, puzzle state, solve times).

Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(f) GDPR (legitimate interest in stability and security).

Processing also takes place in a third country (USA). Data transfers are based on EU Standard Contractual Clauses.

More information: Cloudflare privacy policy · Cloudflare Data Processing Agreement

Where required, data processing agreements pursuant to Art. 28 GDPR are in place with these processors.

Retention

Personal data is stored only for as long as necessary for the respective purpose. You can clear your local identifier at any time via your browser's site-data settings; you can also request full deletion of the server-side records associated with your identifier by email (see "Your rights" below).

Server log files at our host are managed according to its retention rules.

Your rights as a data subject

You have the right, at any time, to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing based on legitimate interest (Art. 21 GDPR)

Please direct any such requests informally to hello@pondr.games. Include the technical identifier (you can copy it from your browser's local storage under the key pondr.userId.v1) so we can locate your records.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.

SSL/TLS encryption

This site uses TLS encryption to protect data in transit. You can recognise an encrypted connection by the "https://" in the browser address bar.

Changes to this policy

We reserve the right to amend this policy if the underlying data processing changes. The latest version is always available at https://pondr.games/legal/privacy.

Last updated: 2026-05-28. This policy is based on template texts from opr.vc (CC0 1.0 Universal).