HEATdle

Last updated: 23 October 2026

HEATdle is a free daily browser game. This page explains what data the game uses, why, who helps process it, and what you can ask us to do with it. We keep it to what the game needs: no analytics, no tracking pixels, and no selling of data.

Who is responsible

Jonas Lutz
[Straße Hausnummer]
[PLZ Ort]
Germany
Email: [email protected] (see also the Impressum)

What we store

A guest account. When you first play, the game creates an anonymous account for you automatically: a random id and a sign-in token, kept in your browser. It has no name or email attached.
Your Google account, if you sign in with Google. We receive your name, email address and profile picture from Google. The name and picture become your display name and avatar (you can change the name on the Account page). The email address is used only to sign you in and is never shown to anyone.
Your game. Each roll (its colors, materials, layout, sneaker, badges, score and date), your Cop or Drop votes (which roll and whether you voted cop or drop), and your display name.
Technical logs. Our hosting and database providers record IP addresses and request details in short-lived logs, to keep the service running and secure.

What other players can see

If you are signed in with Google, your display name, avatar, rolls and scores appear on the leaderboards and in Cop or Drop, and anyone with a link to one of your rolls can see it. Vote counts are shown, but never who voted what. Guest players don't appear publicly.

On the Account page you can change this at any time: hide your profile picture, hide your name (you then appear as "Anonymous player"), or keep your rolls off the leaderboards and out of Cop or Drop altogether.

Storage in your browser

The game keeps your sign-in session, your progress when playing offline, and settings such as sound and the 3D view in your browser's local storage. These are strictly necessary for the game you asked to play (§ 25(2) no. 2 TDDDG), so they don't need consent, and they aren't used for tracking. Clearing your browser data removes them (a guest account can't be recovered after that).

Advertising

The game is funded by ads from Google AdSense, including optional rewarded ads (watch one for a reroll or an extra swap). Google and its partners use cookies and similar technology to show ads and, with your consent, to personalize them based on your visits to this and other sites. Ad cookies are only set with your consent (§ 25(1) TDDDG, GDPR Art. 6(1)(a)): visitors in the EEA, the UK and Switzerland are asked through Google's consent message first, and you can change your choice at any time through the "Privacy and cookie settings" link that message provides.

Learn more about how Google uses data from sites that use its services, or turn off personalized ads in your Google ad settings.

Who processes data for us

Supabase: database and sign-in (servers in Frankfurt, Germany).
Cloudflare: hosting of the website.
Google: sign-in with Google, and advertising (AdSense). Profile pictures are loaded from Google's servers.

Some of these providers may process data outside the EU; they do so under the EU's standard contractual clauses or an equivalent safeguard.

Why we use it (legal basis)

To run the game you asked to play: accounts, rolls, leaderboards and Cop or Drop (performance of a contract, GDPR Art. 6(1)(b)).
To keep it secure and fair, e.g. preventing faked scores and abuse (legitimate interest, Art. 6(1)(f)).
Ads: cookies and personalized ads only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, Google shows limited, non-personalized ads, based on our legitimate interest in funding the game.

How long we keep it

Your account and game data are kept while your account exists. You can delete your account yourself on the Account page ("Delete account"): it is removed immediately, together with your rolls, level, badges and votes. Technical logs are deleted by our providers after a short period.

Your rights

You can change your name and privacy settings and delete your account yourself on the Account page. You can also ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format. Email [email protected]; if you're signed in with Google, write from that address so we can find your account. You can also complain to a data protection supervisory authority, for example the one responsible for us: the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

Children

HEATdle isn't directed at children under 16. If you believe a child has given us personal data, contact us and we'll delete it.

Changes

If this policy changes, we'll update it here and change the date at the top.