Privacy policy

1. Controller

The controller is Max Hafer, Hajo-Rüter-Straße 14, 65239 Hochheim am Main, Germany, Email: print.design2212@gmail.com. Further details are available in the legal notice.

2. Website delivery

When you visit, your browser sends technically necessary data such as IP address, time, requested URL, referrer and browser identifier to Vercel, our hosting provider. This data is processed to deliver the site securely and reliably on the basis of Art. 6(1)(f) GDPR. Technical logs are retained only for the periods configured with the hosting provider.

3. Local storage and the official daily attempt

Your streak, recent results, first official daily attempt, answer mode, optional display name, language and privacy choice are stored in your browser’s local storage. They are not combined into a user account. This is what limits the daily puzzle to one official result in this browser. You can delete the data through your browser’s site-data controls; doing so also removes your streak and attempt record.

4. Duel links

A duel link may contain the date, category, score, solution stages, answer mode and optional display name in its URL. You choose to share this information with recipients. Do not enter a name you do not want to share.

5. Game data and images via Supabase

Puzzle content, answers and image files are technically delivered through Supabase. Game requests are checked on the server; individual daily results and local history are not stored as a Supabase user profile. When public image files load, Supabase receives the connection data normally required for delivery, particularly the IP address.

6. Optional anonymous audience measurement

Vercel Web Analytics loads only after you explicitly consent. Without consent, or after rejection, neither automatic page views nor our game events are sent. According to Vercel, the service works without third-party cookies and uses data points for aggregated statistics. These may include time, redacted page path, referrer, broad region, device and browser type.

DetailDuel removes query parameters and fragments before transmission, so duel codes, display names and other URL data do not reach Analytics. Our events contain only category, mode, entry point and number of recognised subjects — never names, answers or exact scores. The legal basis is your consent under Art. 6(1)(a) GDPR. You can change or withdraw it at any time through “Privacy settings” in the footer.

We do not use marketing or advertising trackers. External image sources are contacted only after you click the relevant link; the destination provider’s privacy terms then apply.

7. Your rights

Within the statutory framework, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent. You may also complain to a data protection supervisory authority. Email the address above for privacy requests.