Privacy policy

Privacy at a glance

YOU vs BOT processes technical connection data. We also receive data when you choose a name, play, use a room or chat, ask the bot or contact us. We use this data to provide the app, run games, display results, respond to requests and keep the service secure.

Some data is transmitted automatically when you access the service; you provide other data yourself. The sections below explain the purposes, legal bases, recipients and retention in more detail.

Controller

Phone: +49 (0) 2366 4079657
Email: contact@simplarix.com

Accessing the app, hosting and security

When you access the website or app or send requests to our servers, technically necessary connection data is processed. This may include your IP address, access time, requested address, browser and device information, and technical errors. We need this data to deliver the service, operate it securely and fix problems. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a secure and functioning service).

The service is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. Server logs as well as game and communication data may be processed on the host's servers. Where the host processes data on our behalf, this is governed by a data processing agreement.

Connections to the published website and our API are encrypted with HTTPS/TLS. Complete protection for every transmission over the internet, such as email, cannot be guaranteed.

Contacting us

If you contact us by email or phone, we process your contact details and the contents of your request to respond to it. The legal basis is Art. 6(1)(b) GDPR where the request concerns a contract or steps toward one; otherwise it is Art. 6(1)(f) GDPR (handling your request). Art. 6(1)(c) GDPR applies where a legal obligation requires processing.

Player profile and game history

You play with a guest name and a random player identifier. We process your name, answers, scores, game state and history, as well as XP, levels, achievements, Daily completions and weekly goals, so the game, your personal progression, history and leaderboards work. In multiplayer rooms, other participants can see your name, status, answers and score. The legal basis for the game features you request is Art. 6(1)(b) GDPR; where there is no contractual relationship, it is Art. 6(1)(f) GDPR.

Multiplayer rooms and chat

In online games, room state, answers and chat messages are sent in real time over WebSockets. Chat messages and custom questions are stored on the server and shown to room participants. Please do not enter sensitive personal data or other people's data. Local games have no online chat. The legal basis is Art. 6(1)(b) or (f) GDPR as described above.

Questions for the bot

When you ask the bot or play custom questions, we store the question and answer. The question text is sent to the TypeSafe AI service for a decision; your random player identifier is not sent with it. Questions may also be visible to other players. Please do not include personal or confidential information in questions. The legal basis for this game feature is Art. 6(1)(b) or (f) GDPR as described above.

TypeSafe AI privacy policy

Local storage

Your browser or the app stores your random player identifier, guest name, language, game identifiers, a cached copy of your progress and mute preference locally. The app may also cache files for offline use. This storage is necessary for the functions you request (§ 25(2)(2) German Telecommunications Digital Services Data Protection Act). If Google Analytics is enabled for the website, analytics cookies are set only after you consent. You can delete local data in your browser or device settings; saved associations may then become unavailable.

Retention

As a rule, we keep personal data only for as long as it is needed for its purpose or a legal obligation requires longer retention. How long we keep contact requests depends on their handling and any statutory retention obligations.

There is currently no automatic deletion period for game histories, chat messages or submitted questions. They remain stored for history, leaderboards and the question catalog until manually deleted. To request deletion, contact us at the email address above and include your guest name and relevant game identifier if available. Statutory retention obligations remain unaffected.

Recipients and legal bases

Only those who need data for the purposes described receive it: our host for operation, other players in multiplayer games, leaderboard visitors for displayed results, TypeSafe AI to evaluate questions and, if website analytics is enabled and you consent, Google. We disclose data otherwise only where required by law or legally permitted.

The relevant legal bases are stated in the sections for each activity. Where processing is based on consent, you may withdraw it at any time for the future; processing carried out before withdrawal remains lawful.

Access, correction, erasure and restriction

Under the GDPR, you can request access to your personal data and ask us to correct or erase it. Where the legal conditions are met, you can also request restriction of processing, for example while we check the accuracy of data you dispute.

Where we process data you provided automatically on the basis of your consent or a contract, you may receive it in a commonly used, machine-readable format under the conditions of Art. 20 GDPR. Contact us at contact@simplarix.com. If possible, include your player identifier or the relevant game identifier so we can locate the data.

Objection and complaints

If we process your data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will then continue processing the affected data only if compelling legitimate grounds prevail or processing is needed to establish, exercise or defend legal claims.

You may lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, your place of work or the alleged infringement.