Who is responsible?
The controller for this website and game is Unterjubeln.
For privacy requests (access, deletion, withdrawal): unterjubeln@gmail.com
Quick summary
Unterjubeln is a free browser-based party game. No account needed. When you join you provide a nickname and a photo. Both are used only for the active game and deleted automatically afterwards.
No ad tracking, no selling your data, no third-party analytics.
What data do we process?
When you join a game:
- Nickname - freely chosen, no real name required.
- Selfie / photo - taken at join time with the camera or picked from your gallery.
- Player PIN - a random 6-digit code used as proof during an elimination (QR code).
- Session token - a random value stored in the technically necessary cookie
uj_session, so your device can be matched to your player record. Contains no personal details. - Game data - target assignment, elimination status, timestamps for game events.
- Consent record - the timestamp of when you checked the consent box at join.
Optionally, if you send feedback:
- Your message and an optional link to the current game (no required fields).
If you only browse the marketing homepage, we do not store any personal data about you.
Who can see your photo?
- Anyone who has you as their target sees your photo in the app, so they can recognise you at the event. Over the course of the game this can effectively be any other player.
- You see the photo of your own current target.
- The host sees the full participant list including photos.
- In Bounty mode, eliminated players can see the top killer's photo.
- After the game ends, photos may be visible on the results page (leaderboard, highlights) to anyone who opens that page.
Photos are served via short-lived signed URLs - there is no public download folder.
Why do we use this data?
Solely to run the game: assigning targets, confirming eliminations, showing the scoreboard and supporting the host.
We do not use your data for advertising, profiling, or sharing with third parties for marketing purposes.
Legal basis
Processing at join is based on your consent (Art. 6(1)(a) GDPR), which you give by checking the box when joining. You can withdraw it at any time by emailing unterjubeln@gmail.com.
The session cookie is technically necessary to keep you logged in (Art. 6(1)(f) GDPR).
How long do we keep the data?
All game data including photos is deleted automatically no later than 7 days after the game ends.
Games that were never started or were abandoned are removed 7 days after the last activity.
We can also delete your data immediately on request - email unterjubeln@gmail.com. The host can also remove you from the game at any time.
Where is the data stored?
Data is stored with Supabase (database and file storage, region eu-central-1 (Frankfurt, EU)), acting as a data processor.
Photos are stored in a private bucket and only accessible via short-lived signed links after an authorisation check.
The website and app are served via a hosting provider that handles the connection between your browser and our servers.
Cookies
We set a single technically necessary cookie (uj_session): HttpOnly, SameSite=Lax, maximum 30 days. It is used only to identify your player session. No marketing, no tracking cookies.
Your rights
Under GDPR you have the right to:
- Access your stored data
- Correct inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Object to processing
- Data portability
- Withdraw consent at any time
Contact us at unterjubeln@gmail.com.