Skip to content

Privacy Policy

1. Data controller

Michael Brauner, Hofwiesen 8, 4210 Gallneukirchen, Austria

Email: [email protected]

2. Account data

When you register or log in via SSO, we collect:

  • Name, email address
  • Profile picture (if provided by the SSO provider)

This data is required to provide the platform. Providing it is a contractual prerequisite — without this data, use of the service is not possible.

Legal basis: Art. 6(1)(b) GDPR (performance of contract).

3. Platform usage

To provide the matchmaking functionality, we process:

  • Team membership, matching status (Ready/Away)

Legal basis: Art. 6(1)(b) GDPR (performance of contract) — this data is objectively necessary for the core functionality of the platform.

In addition, we process:

  • Time of access, features used
  • Profile information you voluntarily provide

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in improving and securing the platform.

4. Cookies

We only use technically necessary cookies:

  • Session cookie: To maintain your session after login
  • CSRF token: To protect against cross-site request forgery attacks

No tracking cookies or third-party cookies are used. A cookie consent banner is therefore not required.

Legal basis: Art. 6(1)(b) GDPR (performance of contract) — technically necessary for operation.

5. Web analytics: Pirsch Analytics

We use Pirsch Analytics to analyze website usage. Pirsch operates entirely without cookies and does not collect any personal data. IP addresses are not stored.

Since no personal data is processed, the GDPR does not apply to this processing and no consent is required.

Provider: Pirsch Analytics, Emilia Rieschel, Gertigstr. 10, 22303 Hamburg, Germany.

6. Error tracking: Sentry

We use Sentry to detect and fix technical errors. Technical information about errors is collected (e.g., error messages, browser type, operating system). IP addresses are anonymized.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in technical stability and error resolution.

Provider: Functional Software, Inc. (Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Sentry is certified under the EU-US Data Privacy Framework (DPF). EU Standard Contractual Clauses apply additionally.

7. SSO login (OAuth)

You can log in using the following services:

  • Google – We receive: name, email address, profile picture
  • Microsoft – We receive: name, email address
  • LinkedIn – We receive: name, email address, profile picture

This data is used exclusively to create and maintain your user account. It is not shared with third parties. No usage data is transmitted back to the providers during the login process.

Legal basis: Art. 6(1)(b) GDPR (performance of contract) — SSO login is a method for account creation and authentication.

8. Hosting and CDN

The platform is hosted by DigitalOcean. The server location is Frankfurt, Germany.

Provider: DigitalOcean, LLC, 101 Avenue of the Americas, 10th Floor, New York, NY 10013, USA. DigitalOcean is certified under the EU-US Data Privacy Framework (DPF). EU Standard Contractual Clauses apply additionally.

To protect against DDoS attacks and to deliver static content, we use Cloudflare as a Content Delivery Network (CDN). All requests are routed through Cloudflare servers, which means IP addresses are processed by Cloudflare.

Profile pictures are stored on Cloudflare R2 (Object Storage). The storage location is the EU. Access is provided via time-limited, signed URLs — the files are not publicly accessible.

Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare is certified under the EU-US Data Privacy Framework (DPF). EU Standard Contractual Clauses apply additionally.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the secure and reliable operation of the platform.

9. Data processors

We use the following data processors. Data processing agreements pursuant to Art. 28 GDPR are in place with all providers.

  • DigitalOcean – Hosting (server location Frankfurt, Germany; DPF-certified) — DPA
  • Cloudflare – CDN, DDoS protection, and file storage/R2 (EU storage location; DPF-certified) — DPA
  • Pirsch Analytics – Web analytics (Germany, cookieless, no personal data) — DPA
  • Sentry – Error tracking (DPF-certified) — DPA

10. Data retention

Your account data is stored for the duration of your account's existence. When you delete your account, your personal data is deleted without undue delay, unless statutory retention obligations apply.

Error logs (Sentry) are automatically deleted after 90 days.

11. Your rights

You have the following rights regarding your personal data:

  • Access (Art. 15 GDPR) – What data we store about you
  • Rectification (Art. 16 GDPR) – Correction of inaccurate data
  • Erasure (Art. 17 GDPR) – Deletion of your data
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR) – Receive your data in a common format
  • Objection (Art. 21 GDPR) – Object to processing based on legitimate interests

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us at: [email protected]

12. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is:

Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria

Website: www.dsb.gv.at

13. Changes

We reserve the right to update this Privacy Policy to reflect changes in legal requirements or changes to the service. The current version is always available on this page.

Last updated: March 2026