Privacy Policy

Controller

Julian Yaman, Heiligenberger Straße 15, 88630 Pfullendorf, Germany
Email: mail@yaman.pro · yaman.pro

This policy covers the BallGuessr website and game under the GDPR and German law (BDSG and, where relevant, TDDDG).

What we process

• On your device. Round progress, guesses, ratings, and whether you dismissed install or Daily-reminder tips may stay in browser storage until you clear site data.
• Server logs. Our Contabo VPS in Germany may record IP address, browser type, pages, and timestamps for security and reliability (Art. 6(1)(f)).
• Operational logs. Better Stack (EU) receives event names, counts, durations, and mode settings — not Account ids, emails, invite codes, guesses, searches, IPs, or Footballer identities (Art. 6(1)(f)).
• Search. Typeahead queries go to our server to search the Footballer catalog. We do not profile you from them (Art. 6(1)(b)/(f)).
• Online count. While the site is open, the browser pings about every 30 seconds with a random short-lived id so we can show how many Guessers are here. It is not a cookie, not linked to a name, Account, or Party seat, and is dropped from our server about 45 seconds after the last ping (Art. 6(1)(f)).
• Feedback. The Feedback button opens a Tally form. If you submit it, Tally processes what you enter (Art. 6(1)(f); Art. 6(1)(b) if you ask us to reply).
• Analytics. Vemetric (EU Cloud) receives cookieless pageviews — referrer, UTM, country/city, device — not identified Guessers or product events. Same-day uniqueness uses a daily-rotating hash, not a lasting visitor id. Kept one month. Requests go through our site. Art. 6(1)(f); TDDDG for privacy-friendly reach measurement.
• Errors and product events. PostHog (EU Cloud, cookieless) receives exception reports (message, stack, browser, URL) and a small set of events for Daily, Free Play, Challenge share, and Online Party — not pageviews, click autocapture, or session replay. Not tied to a lasting visitor identity. Requests go through our site (Art. 6(1)(f)).
• Daily reminders. If you allow them, OneSignal stores a push subscription, device type, locale, and — if you are signed in — an Account id. Notifications never include the Secret Footballer. Turn off in Settings (Art. 6(1)(a) — consent).
• Accounts (optional). You can play without logging in. Google OAuth via Supabase (EU) provides your Google account id and email. We store Username, official Daily results, streak, ELO, and Party standings. Public pages and standings may show Username, Games Played, Public Game wins, ELO, streak, Daily Calendar, and (when ranked) Daily Pot or Elo Placement. We may send a chosen Username to OpenAI’s Moderation API. Supabase may use hCaptcha against bots. Art. 6(1)(b) and (f). To delete an Account, email mail@yaman.pro.

What we do not do

We do not require an Account to play, ask for your real name or payment details, sell personal data, or use advertising cookies or cross-site tracking. PostHog is not used for pageviews, autocapture, or session recordings. Vemetric is not used to identify Guessers or set cookies.

Cookies and similar tech

No advertising cookies. We do not show a cookie banner for this setup; if that changes, we will update this policy and ask for consent where required.

• Necessary: Google login (Supabase first-party cookies; Google’s own cookies on Google’s domains); Online Party seat cookie; hCaptcha cookies on hCaptcha’s domains if a challenge is shown; OneSignal push storage if you opt in.
• On-device: local storage for gameplay; session storage for the online-count id and Vemetric visit grouping (cleared when the tab closes).
• No cookies: PostHog (as configured) and Better Stack (server-only).

Processors

• Contabo — hosting (Germany)
• Vemetric — analytics (EU Cloud; traffic via Cloudflare)
• PostHog — errors and product events (EU Cloud)
• OneSignal — optional Daily reminders
• Better Stack — operational logs (EU)
• Google — optional OAuth
• Supabase — Auth and Account data (EU)
• hCaptcha — bot checks during Auth
• OpenAI — Username moderation
• Tally — optional feedback (Belgium; opening the form loads tally.so)
• Bunny Fonts — web fonts (may process IP on font requests)

Footballer facts come from community Transfermarkt-style datasets processed on our servers. We do not send those datasets to third parties as part of your play session.

Retention

Server logs: as long as needed for operations and security. Browser game state: until you clear site data. Tally feedback: as long as needed to reply or improve the game, and per Tally’s practices. Vemetric: one month. PostHog and Better Stack: per our project settings, only as long as needed. Online-count id: about 45 seconds after the last ping.

Your rights (GDPR)

You may request access, rectification, erasure, restriction, portability (where applicable), and object to legitimate-interest processing (Arts. 15–18, 20, 21). You may also lodge a complaint with a supervisory authority — in Germany, typically your state data protection authority or the authority where you live or work.

Contact mail@yaman.pro.

Children

BallGuessr is a general-audience game about public football facts. If you are under 16 (or the age required in your country), use it only with a parent or guardian’s permission.

Changes

We may update this policy as BallGuessr evolves. The date at the top will change when we do. For material changes, we will take reasonable steps to make the update noticeable.