Privacy policy

In brief: You do not need an account. You save your career as a JSON file on your own device. There are no adverts. Cloudflare serves the website and processes technical connection data. Cloudflare Web Analytics is currently enabled with EU visitors excluded. Some game settings may be stored locally in your browser.

1. Controller

Email for privacy enquiries: nf47.info@gmail.com

2. Hosting and connection data

The website is delivered through Cloudflare Workers and Cloudflare's network. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. This involves processing information such as your IP address, request time, requested address and technical connection data. Depending on the request, browser details and the referring page may also be included. This allows the website to be delivered and protected.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is operating a reliable website protected against misuse. Data may also be processed outside the European Economic Area. Cloudflare describes its processing and transfer mechanisms in its privacy policy and Data Processing Addendum.

The account check on 30 October 2026 confirmed that stored Workers Logs and Workers Traces are disabled and that the game Worker has no Logpush forwarding. Cloudflare still processes technical connection and security data. Its retention criteria include the purpose of processing, necessity and legal obligations; a single fixed period covering all connection and security data has not been established.

The Cloudflare account dashboard confirms that the Data Processing Addendum is incorporated into its standard terms. It also describes safeguards for international transfers through the Data Privacy Framework and, where required, EU Standard Contractual Clauses. Processing exclusively within Europe is not guaranteed.

3. Your saved game stays with you

You do not need an account and can invent your manager and player names. Your career is processed in the current browser page. To keep it, you choose to export a JSON file to your device. When you load a file, it is read in your browser and is not automatically uploaded to us by the game. Closing or reloading the page can lose progress that has not been exported.

Where personal data is involved, processing relies on Article 6(1)(f) GDPR. Our interest is providing the game function you have started. Processing in memory normally ends when you close the page. Downloaded JSON files stay with you until you delete them. Backups made by your operating system or a cloud storage provider you choose are outside this website.

4. Settings on your device

Preferences such as sound, music or the 2D/3D view may be kept in your browser's Local Storage and read on later visits. Your language is taken from your current selection, the page address and, where applicable, your saved game file. These settings are not used for advertising or cross-site user profiles.

Stored preferences remain until you change them or delete the website's data in your browser's privacy or site settings. This does not delete JSON files you previously downloaded. Section 25 of Germany's TDDDG governs device access. The exception in section 25(2)(2) only applies where that access is strictly necessary for a function you expressly request. If this condition is not met, consent would be required before that access.

5. Advertising, analytics and external content

The game currently has no adverts, paid offers, newsletters or contact forms. No other visitor tracking services are embedded in the game code.

We use Cloudflare Web Analytics to understand website usage and technical performance and identify loading problems. The option “Enable, excluding visitor data in the EU” remains selected. Cloudflare states that its measurement script is not automatically injected for visitors from the EU. These statistics therefore do not represent our entire audience.

For other visitors, Cloudflare may add a JavaScript measurement script from static.cloudflareinsights.com. Measurements include page views, pages visited, referrers, browser/device categories and performance figures such as loading times. For a website delivered through Cloudflare, measurements are sent to /cdn-cgi/rum on the website's own domain. Loading the script and sending measurements also creates technical connection data.

Cloudflare states that it does not track individual users across different customers' websites. Our purposes are aggregate audience and performance measurement, not advertising profiles. Where personal data is processed for this measurement, the proposed legal basis is Article 6(1)(f) GDPR; our interest is improving this free service. Device access must be assessed separately under section 25 TDDDG. A legitimate interest cannot replace consent where consent is required.

Cloudflare states that statistics for the previous six months can be viewed. This is not a promise about deletion periods for all technical raw or security data. Further details are provided in its data collection documentation, measurement dimensions and FAQ. International transfers follow the framework described under hosting.

Game graphics, fonts and audio files are supplied with the game package. Ponzelar's audio does not use an external speech service. This is separate from any automatically added analytics script.

6. Contact by email

If you email us, we process your sender address, message and any names or attachments you include to deal with your enquiry. The legal basis is Article 6(1)(f) GDPR; our interest is responding to you. Please include only necessary information and avoid unnecessary sensitive data.

The mailbox uses Gmail. Google processes email content and technical delivery information; processing outside the EEA may occur. See Google's privacy policy for details. Messages are deleted when no longer needed to handle the enquiry, unless legal retention duties or the establishment, exercise or defence of legal claims require them to be kept.

7. External links

External links, for example to Ponzelar's historical inspiration, take you to another website only when you select them. That operator's privacy information then applies.

8. Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure and restriction of processing. A right to data portability applies where its conditions are met. You can withdraw consent with effect for the future. Contact the email address above to exercise these rights.

Objection: You can object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. We will assess whether compelling legitimate grounds or the establishment, exercise or defence of legal claims require continued processing.

You can complain to a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. You do not have to complain to us before exercising your rights.

The game does not make automated decisions about you that have legal or similarly significant effects.

Last updated: 30 October 2026