Privacy Policy

1. Controller

Jack Fuchs, Am Dreisberg 3, 57520 Niederdreisbach, Germany — email: j@ck.gg

This privacy policy covers ck.gg including the subdomains ja.ck.gg (the operator's personal page) and sideki.ck.gg (a scorekeeping tool for private card game rounds, accessible only with credentials).

2. The short version

• Our analytics sets no cookies and stores nothing on your device — which is why there is no cookie banner here.
• Analytics runs on software we host ourselves on our own server in the EU; no data is shared with third parties and no cross-site profiles are built (details in section 5).
• You can object at any time with a single click — the switch is in section 5.
• Fonts are self-hosted — no connection is made to Google Fonts or any other font service.
• One exception applies to sideki.ck.gg: a styling library is loaded there from a third-party server (section 6).
• External services (Stripe) are only loaded when you actively start a checkout.

3. Hosting

This website is operated on a server provided by OVHcloud (OVH GmbH, Germany). The server is located in a data centre in Germany — the Limburg an der Lahn site, which OVHcloud markets as its "Frankfurt" region. No transfer of personal data to a third country takes place as part of the hosting. A data processing agreement pursuant to Art. 28 GDPR is in place with OVH.

4. Server log files

When you visit this website, the web server automatically processes information transmitted by your browser: IP address, date and time of the request, requested URL, referrer URL, browser type and version, and operating system. This processing ensures stable operation and protects against attacks (Art. 6 (1) (f) GDPR). Log data is stored short-term and deleted on a rolling basis; it is not merged with other data sources.

5. Analytics

We want to know which content is in demand and whether our pages work. For this we use the analytics software Umami, which we host ourselves on our own server inside the European Union. Measurement data is received exclusively by our own domain; it is not shared with third parties, and the software vendor receives no data.

On a page view and on certain interactions (e.g. clicking a name, starting a checkout, submitting a form, reading progress on the guide pages) we process: the page requested and its title, the referring page, the time, browser type, operating system, screen and window size, language setting, the country derived from the IP address, and the name of the event together with technical attributes of the page (such as page type, language version or the catalog name concerned). Content you type into forms is not transmitted — in particular no names, email addresses, messages or payment details. From the catalog search we do transmit the search term, because it relates to our offering rather than to you personally.

No cookies, no access to your device: The measurement neither sets cookies nor stores identifiers in your browser. There is therefore no access to information stored in your terminal equipment within the meaning of § 25 TDDDG (the German implementation of the ePrivacy Directive), and no consent is required for it. Your IP address is not stored: the server only uses it to derive an irreversible daily hash that groups requests made on the same day, and to determine the country. That hash rotates every day, so recognition beyond a single day is impossible. There is no merging with other data sources, no cross-site tracking and no profiling.

The legal basis is our legitimate interest in a data-minimising analysis of how our offering is used, for its operation, security and improvement (Art. 6 (1) (f) GDPR). Retention: event data is kept for at most 24 months and then deleted; only aggregated figures are evaluated.

Objection (Art. 21 GDPR): You may object to the analytics at any time with effect for the future. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, we honour it automatically. Independently of that, you can switch the measurement off for this browser here. Your decision is stored locally in your browser for that purpose — this entry is only created if you actively click one of the buttons.

6. Third-party resource on sideki.ck.gg

The application at sideki.ck.gg loads its styling library (Tailwind CSS) from cdn.tailwindcss.com on every page view. For technical reasons the operator of that delivery network thereby learns your IP address, the time of the request and details about your browser and operating system; part of the delivery takes place on servers outside the EU. The legal basis is our legitimate interest in the application rendering correctly (Art. 6 (1) (f) GDPR). Fonts are no longer loaded from third parties there (Google Fonts was removed on 2026-07-31). We intend to serve this library locally in future; until then we point this out explicitly. No such third-party resource is loaded on ck.gg or ja.ck.gg.

7. Payment processing (Stripe)

We use Stripe to process lease payments. The provider for EU customers is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe components (Stripe.js / Payment Element) are only loaded when you actively start a checkout — simply visiting the website transmits no data to Stripe.

During payment, Stripe processes the payment details you enter (e.g. card data, name, email address, billing address) and technical data (IP address, device information), the latter also for fraud prevention. Stripe may set its own cookies where required for payment processing. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract) and, for fraud prevention, Art. 6 (1) (f) GDPR. Transfers to Stripe, Inc. in the USA are based on the EU-US Data Privacy Framework, under which Stripe is certified. Details: stripe.com/privacy.

After a successful payment, our server additionally reports the completed lease as an event to our own analytics described in section 5 (leased name, term, amount). Personal details — in particular name and email address — are not transmitted.

8. Contact by email

If you contact us by email, we process the information you provide in order to handle your enquiry (Art. 6 (1) (b) GDPR; for general enquiries Art. 6 (1) (f) GDPR). The data is deleted once no longer required, unless statutory retention obligations apply.

9. Contract and billing data

When you enter into a lease, we process account and contract data (name, address, email address, leased name, term, technical details such as name servers) to perform the contract (Art. 6 (1) (b) GDPR). Billing-relevant data is retained for the statutory periods under German law (§ 147 AO, § 257 HGB; Art. 6 (1) (c) GDPR).

10. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6 (1) (f) GDPR (Art. 21) — for analytics, the switch in section 5 is sufficient. You also have the right to lodge a complaint with a supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany.

11. Updates

This privacy policy is dated July 2026 and will be updated whenever the data processing on this website changes.