Iago Garcia, Nuetenwilerstr., 9602 Bazenheid. Email: [email protected]. Full details in the legal notice.
When the site is loaded, the server processes the technically necessary connection data (IP address, timestamp, requested address, status code). Delivery is not technically possible without this. Legal basis: legitimate interest in operating and securing the service (Art. 6(1)(f) GDPR / equivalent nFADP ground). The site is self-hosted on the operator's own hardware; Cloudflare routes the connection to it (Cloudflare Tunnel) and by doing so also processes this same connection data as a processor.
An account is optional. Everything except the leaderboard works without one. Stored if you create one: username, email address, display name, registration time, last login time, and your game state (streak, points, rounds played, portfolio, saved calculations, favourited switches, group memberships). Legal basis: performance of the contract you enter into by registering.
After logging in, a cookie named adept_session is set:
a random value with no embedded meaning, HttpOnly,
SameSite=Lax, and Secure when served over
HTTPS, valid for 30 days. It exists solely to keep you signed in
and is therefore strictly necessary — no consent is required for
it. It is deleted on logout. No cookie is set if you are not
signed in.
Game state, your streaks and scores, your theme and sound choice, and your advertising choice are stored locally in your browser so the site works without an account. This data never leaves your device unless you sign in, at which point your game state is attached to your account. You can clear it at any time through your browser's settings.
This site shows advertising supplied by Google AdSense, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and its parent Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). It is how the site is paid for; there is no subscription and no paywall.
If you are in the EEA, the United Kingdom or Switzerland, nothing ad-related runs until you agree. Google's script is not loaded and no ad is requested before you accept in the consent dialog. The ad areas reserve their space either way, so answering does not make the page jump. Decline and no ad code is loaded at all — not even non-personalised ads, because those also set cookies for frequency capping and measurement.
Elsewhere the ads load without asking first. Consent is the legal basis required by European law, so that is where the site asks for it; outside those countries the dialog is not shown on arrival. You are not left without the choice: the Ad settings link in the footer opens exactly the same dialog with the same two buttons. Declining there stores the refusal and reloads the page, which brings it back with no ad code loaded and none requested; from that point you are treated exactly like someone who declined at the start. What a reload cannot undo is what was already loaded before you declined — any cookie Google set in the meantime stays until you clear it in your browser or it expires on Google's own schedule, described in Google's notice linked below. Which of the two you get is decided from the country your network connection is seen to be in, and failing that from your browser's time zone; if neither answers, the site asks.
Once you accept, Google may store and read cookies and similar identifiers on your device to select and deliver ads, limit how often you see the same one, and measure performance. Google determines the retention period of those identifiers; the details are in Google's own notice on how it uses data from partner sites and its privacy policy.
Legal basis: your consent — Art. 6(1)(a) GDPR for the processing, and § 25(1) TDDDG for the storage of and access to information on your device. You can withdraw it at any time, with effect for the future, through the Ad settings link in the footer of every page. Withdrawing is one click and takes effect immediately; it does not affect the lawfulness of what happened before.
Transfer outside the EEA: Google LLC is based in the United States, so accepting means your data may be processed there. Google LLC is certified under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions, which the European Commission has recognised as providing an adequate level of protection; Google additionally relies on the EU Standard Contractual Clauses.
fonts.googleapis.com or fonts.gstatic.com,
and your IP address is never sent there.
Account data is kept until you request deletion. Sessions expire automatically after 30 days. Server logs are not deliberately retained beyond whatever the hosting platform keeps by default for operating the service.
You have the right to access, rectify, erase, restrict processing of, and receive a copy of your data, and to object to processing (GDPR Art. 15–21 and the equivalent rights under Swiss nFADP). Any consent you have given can be withdrawn at any time for the future — the link for that is in the footer of every page. An informal message to [email protected] is enough.
You also have the right to lodge a complaint with a supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); EEA/UK visitors may instead contact their local data protection authority.
18 August 2026