Last updated: July 22, 2026
1. Controller and contact
Responsible for data processing on daddeln.fun and in the prediction game is:
Christopher Stefan Cao
c/o Online-Impressum #7480
Europaring 90
53757 St Augustin
Email: chris1887x@gmail.com
Privacy requests can be submitted by email or through a private support ticket.
2. Data processed
For registration, sign-in and operation, the system processes in particular the username, unique display name, password hash, account role and account status. It also processes submitted predictions, calculated points, leaderboard and group information, chat and support content, reactions, notifications, moderation data and short-term activity timestamps for the online indicator.
When a profile picture is uploaded, the image file and associated file path are stored. Replacing a profile picture does not automatically delete the previous file from the server folder. It remains stored until an authorized deletion request is completed or a technically or legally required cleanup is performed.
If email notifications are enabled voluntarily, the supplied email address, confirmation status, selected notification types and technical delivery records are also processed. Activation takes place only after confirmation through a double-opt-in link.
3. Purposes and legal bases
Processing is necessary to provide the prediction game, manage accounts, calculate points and leaderboards, deliver community features and support, moderate content, and protect against abuse and attacks. The legal bases are Article 6(1)(b) GDPR for the user relationship and Article 6(1)(f) GDPR for secure, stable operation with minimal abuse.
4. Registration, display names and rankings
New registrations are activated automatically. Display names are publicly visible and must be unique. Users cannot change them themselves; changes are requested through a ticket and reviewed by an administrator. Administrators can hide accounts from public rankings. The account and its data generally remain intact.
5. Passwords, sessions and cookies
Passwords are not stored in plain text, but exclusively as one-way hashes. Technically necessary session and functional data are used for sign-in, security, and page navigation. The optional “Stay signed in on this device for 30 days” setting stores a random device token as a secure HttpOnly cookie; it never contains the password, and only its verification hash and expiry are stored server-side. The token expires after no more than 30 days and is revoked on sign-out or password changes. No advertising or analytics cookies are used.
6. Hosting and server logs
When the website is accessed, technically necessary server logs may be processed. These may include the IP address, date and time, requested address, amount of data transferred, referrer, browser and operating system information, and security-related events. Processing is used to deliver the service, analyze errors, and defend against attacks.
7. External fonts
The interface loads fonts from Google Fonts. The browser may connect to Google servers and transmit information including the IP address, browser details, and time of access. The legal basis is the legitimate interest in consistent presentation under Article 6(1)(f) GDPR. To avoid all external connections, the fonts would need to be hosted locally.
8. Email notifications
Email notifications are optional and disabled by default. They may include prediction-deadline reminders, personal matchday recaps, weekly previews, group information, general announcements, community polls and published prediction-game updates. Your selection can be changed at any time in the account settings.
Every message contains a direct unsubscribe link. No tracking pixels are used. Delivery records are processed to prevent duplicate messages, analyze errors and document consent. The legal basis is consent under Article 6(1)(a) GDPR; it can be withdrawn at any time with effect for the future.
9. Recipients and disclosure
Data is not sold or used for personalized advertising. It is shared only where necessary for hosting, technical operation or compliance with legal obligations. Within the prediction game, public content such as display names, profile pictures, leaderboards, group content and published posts is visible to other users.
10. Storage period and deletion
Data is stored for as long as it is needed for the account, community features, leaderboard calculations, security or moderation. For deletion requests, the relevant data is reviewed and deleted or anonymized unless legal obligations, security interests, third-party rights or necessary moderation records require otherwise.
11. Rights of data subjects
Subject to the applicable legal requirements, data subjects have rights to access, rectification, erasure, restriction of processing, data portability and objection. Consent can be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a competent data-protection authority.
12. Contact
Privacy and deletion requests can be sent by email to chris1887x@gmail.com or as a private ticket at Support & Ideas.
