Privacy Policy

This English text is a convenience translation. In case of any discrepancy, the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Jan Fuhrmann
c/o flexdienst – #21214
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Deutschland
Email: info@shadowsaloon.net

2. Which data is collected?

This application stores only the data required to operate the game. Specifically:

2.1 During registration

Display name (required) – shown in the game
Password – stored exclusively as a hashed value (PBKDF2, 100,000 iterations)
Email address (optional) – used for password reset and email verification, not for advertising
Time of creation and time of last login

2.2 When signing in via an external service (OAuth)

When you sign in via an external service, we receive and store from the provider a user ID, a display name and – if the provider transmits it – your email address. The email is adopted as your account address and is considered confirmed because the provider has already verified it. Which data arrives per provider:

Google – user ID, display name, email address
Microsoft – user ID, display name, email address
Discord – user ID, username, email address
Steam – user ID and display name (Steam transmits no email address)

We store no further profile information (e.g. profile pictures/avatars) from the provider. The adopted email address is – like one provided during registration – used only for password reset and verification, not for advertising.

2.3 While playing

Game statistics per game mode (number of games played, wins, scores)
Lobby memberships with game states during ongoing games

Guests (players without an account) leave no persistent data – their entries are deleted when they leave the lobby.

2.4 Technically necessary cookies

shadowsaloon.auth – authentication cookie after a successful login. HttpOnly, SameSite=Lax. Valid for 30 days if "Stay logged in" was selected, otherwise only for the session.
shadowsaloon.external – intermediate cookie for OAuth logins. Deleted once the login is complete.
ssHomeView – remembers whether you want the game list on the home page in the classic view (A–Z) or grouped by game family. Only set once you switch the view. SameSite=Lax, valid for one year.
.AspNetCore.Culture – remembers the interface language. Set when you switch the language, open a page through an address with a language code (for example /fr/Rules), or sign in with an account that has a language stored. SameSite=Lax, valid for one year.

We use no tracking cookies, no analytics, no advertising.

2.5 Server logs

The web server logs accesses (IP address, timestamp, path). These logs are used for troubleshooting and are deleted after a maximum of 30 days.

3. Legal basis

Data processing is carried out on the basis of Art. 6 (1) lit. b GDPR (performance of a contract – the game cannot function without the data mentioned) and Art. 6 (1) lit. f GDPR (legitimate interests in stable operation).

4. Storage period

Account data is stored as long as your account exists. Statistics remain linked to your account. If you delete your account, all personal data is deleted within 24 hours. Game histories you participated in are retained in anonymized form (your name is replaced by a placeholder).

5. Your rights

You have the right at any time to:

request information about your stored data (Art. 15 GDPR)
rectification of incorrect data (Art. 16 GDPR) – you can change your display name directly in your profile
erasure of your account (Art. 17 GDPR) – in your profile under "Delete account"
data portability – in your profile under "Download my data" as a JSON export
withdraw consent (Art. 7 (3) GDPR) – by deleting your account
lodge a complaint with a supervisory authority (Art. 77 GDPR)

6. Data sharing

We do not pass your data on to third parties. The app runs on a privately operated server. When signing in via an external service (OAuth), technically necessary communication takes place with the respective provider – in which case the provider's privacy policy additionally applies.

7. Contact

For questions about data protection, please contact:info@shadowsaloon.net