Urs Schweigert
Am Sonnenhang 12
85235 Pfaffenhofen a.d. Glonn
Germany
Email: info@derschweigert.de
When using Arithmo Slayer, the following personal data are processed:
refresh_token (httpOnly, Secure, SameSite=Strict)Account and Login Data (Art. 6(1)(b) GDPR — Contract Performance): Your data are necessary to create a user account, authenticate you, perform email verification, and enable account recovery.
Security and Anti-Abuse Data (Art. 6(1)(f) GDPR — Legitimate Interest): We use your IP address and Turnstile tokens to prevent brute-force attacks, spam, and abuse.
High Scores and Leaderboard Data (Art. 6(1)(b) GDPR — Contract Performance): These are processed to deliver the game's ranking and leaderboard features.
Amazon Web Services (AWS): Your data are stored and processed in AWS eu-central-1 (Frankfurt), using:
AWS is subject to a standard Data Processing Agreement (DPA) under Art. 28 GDPR. Learn more: AWS Data Processing Addendum.
Cloudflare Turnstile: The anti-abuse system is operated via Cloudflare. Your interaction with the widget, IP address, and potentially other data are transmitted to Cloudflare. The status of a Data Processing Agreement with Cloudflare is currently not definitively confirmed. Cloudflare's anycast network may process data on infrastructure outside the EU. Learn more: Cloudflare Privacy Policy.
Email Delivery: Transactional emails (verification, password reset, email change) are sent via AWS SES. Your email address is not shared with third parties and is not used for marketing purposes.
Session Cookie (refresh_token): This is an essential cookie for managing your login session. It is:
This cookie falls under the exemption in § 25(2) TDDDG (strictly necessary cookies) and does not require explicit consent.
Cloudflare Turnstile: The Turnstile script is only loaded after your explicit consent via our cookie consent banner. Without your consent, the script is not loaded.
We use no analytics, tracking, advertising, or other non-essential cookies.
Your data are retained as long as your account is active. When you delete your account, all associated data are immediately deleted (username, email, password, scores, profile settings). There is no extended backup retention or archival of personal data.
Rate-limiting data (IP addresses, request counters) are automatically deleted after a short time (hours).
If you purchase an optional subscription, the following data are processed:
Important: Card and bank account numbers are not stored by the game. Stripe handles payment details. Billing identifiers linked to your game account, access dates, and processing records are personal data, not anonymous data.
Legal Basis (Art. 6 Para. 1 lit. b GDPR): Processing is necessary to fulfill the subscription contract (invoicing, access control to premium content).
Retention Period: Required billing records may be retained after account deletion for the applicable statutory retention periods. Retention and deletion procedures must be reviewed before paid launch. Game access data and gift-code processing records are subject to the same review; account deletion prevents future billing.
Third Party (Stripe): Stripe processes payment information under its applicable terms and privacy policy. Before paid launch, the operator must verify the relevant Stripe contracting entity, processing agreement, international-transfer safeguards, and required privacy disclosures.
When you use the public cancellation form, we store your contact email, the account details or contract references you supply, your cancellation choice and any requested date, and your optional note. We also store a request identifier, submission timestamp, the manually reviewed account association, processing outcome, and outcome-email sending status. These records are used to review, process, and document your cancellation request.
The request is stored separately from your game account; deleting an account does not automatically delete it. The specific retention period and deletion procedure for these records must be established and legally reviewed before publishing the form.
Arithmo Slayer is intended for users aged 18 and above. During account registration, you must confirm that you are at least 18 years old. If you intend for a child to use your registered account, you must confirm as the parent/legal guardian that you are that child's parent/legal guardian and consent to the child's use of this service.
If you are under 18, you need your parent or legal guardian's consent. Parents and guardians who notice that your child has registered an account without your consent can contact us at info@derschweigert.de to have the account deleted.
Under the General Data Protection Regulation (GDPR), you have the following rights:
To exercise these rights, please write to: info@derschweigert.de
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection authority. The competent supervisory authority for the private sector at the controller's registered location (Bavaria) is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) — Bavarian State Office for Data Protection Supervision:
Promenade 18
91522 Ansbach, Germany
Phone: +49 (0)981 180093-0
Email: poststelle@lda.bayern.de (PDF attachments only)
Please prefer their online complaint form.
Yes. To operate Arithmo Slayer, a valid email address and username are required. This data is necessary to create and authenticate an account. Without this information, you cannot register. The optional "First Grade Year" field is optional and serves only for leaderboard categorization.
This privacy policy may be updated from time to time if our practices or requirements change. The current version will always be available on this page.