← Back to PlayRound · Deutsch

Privacy Policy

Last updated: September 2026

1. Controller

PlayRound is operated by the operator of playround.de (Aidmooo). For privacy questions contact us via the Discord server or the contact form on aidmooo.de.

2. What data is processed

Playing without an account: only your freely chosen player name is kept in the server's memory for the duration of the round. The room is deleted after the round ends. Player names are not stored permanently.

With an account (name + password): we store your username, a hashed password (bcrypt) and your game statistics (games played, wins, words found, points, XP, coins, purchased cosmetics).

With social login (Twitch, Discord, Google): we receive your user ID, display name and, if available, your profile picture from the provider. No password is transferred or stored. This data is used solely to recognise you on your next login.

Server logs: IP address, time and requested URL are processed briefly in server logs as technically required (Art. 6(1)(f) GDPR – operation and security).

3. Cookies & local storage

PlayRound sets no tracking or advertising cookies. Your browser's local storage holds:

  • gb_token – your login token so you stay signed in (accounts only)
  • gb_cookie_ok – that you have seen the notice
  • gb_lang – your language choice

You can delete these at any time via your browser settings. Google Maps may set its own cookies (see section 4). During social login a short-lived security cookie (gb_oauth, 10 minutes) protects against forged login requests.

4. Google Maps / Street View

The game embeds Google Maps Street View (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address is transmitted to Google and Google may set its own cookies. The legal basis is Art. 6(1)(b) GDPR, as Street View is the core of the game and the game cannot work without it. More information: Google Privacy Policy.

5. Social login – third parties

When logging in via Twitch, Discord or Google you are redirected to the provider's site, where its own privacy policy applies:

  • Twitch
  • Discord
  • Google

6. Real-time connection

For multiplayer a WebSocket connection (Socket.io) to our server is established. It transmits your player name, your in-game actions (submitted words, votes, chat messages) and the Street View position where you marked a word. This data is visible to all players in the same round and is deleted when the round ends.

7. Retention

Account data is kept until you request deletion. Game rooms are deleted no later than 15 minutes after the game ends.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as the right to lodge a complaint with a supervisory authority. To delete your account, simply send a short message to the operator.

9. Fonts

The "Rubik" font is loaded from Google Fonts, which transmits your IP address to Google.