Privacy policy

1. The essentials

• We use no cookies, no analytics or tracking tools and no ad networks.
• There are no user accounts. Settings and progress stay on your device.
• We serve fonts and code ourselves. Visiting our pages does not contact any third-party service in the background.
• Personal data only reaches us when you send something yourself: feedback, a leaderboard entry or an email.

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Shannon & Thomas Pfalzgraf, Magic Camelot, Gifhorner Str. 19, 38442 Wolfsburg, Germany
Email: info@magic-camelot.de

We are not required to appoint a data protection officer. If you have any questions about privacy, simply write to the address above.

3. Website and hosting

Hosting with IONOS

Our website and Magic Marble are hosted on servers of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have a data processing agreement with IONOS under Art. 28 GDPR.

Server logs

When you open a page, your browser sends technically necessary data to the server: your IP address, the date and time, the address requested, the amount of data transferred, your browser and operating system, and the page you came from. The server needs this information to deliver the page to you and to detect attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is operating the site securely and reliably. The logs are deleted automatically after a short time; IONOS sets the period. We do not use them for any other purpose.

No cookies, no third-party content

The website sets no cookies and loads nothing from other servers (no external fonts, no embedded videos or maps, no social media buttons). Links to other services (for example PayPal or GitHub) only become active when you click them.

Former address on GitHub Pages

Magic Marble used to be hosted at magic-camelot.github.io. That address now only forwards to our site. If you open it, GitHub, Inc. (88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA) processes your IP address like any web server. GitHub is certified under the EU-US Data Privacy Framework.

4. Magic Marble

Storage on your device

Magic Marble keeps best times and settings (language, camera, mouse sensitivity, training, order of worlds) in your browser's storage. If you install it as an app, it also stores the game files so you can play offline. This data never leaves your device. Storing it is strictly necessary for the features you ask for (Section 25(2) no. 2 of the German TDDDG). You can delete it at any time in your browser settings.

Feedback form

If you send a message via "Feedback & wishes", we store the following on our server at IONOS:

• the type of message and your text,
• your email address, optionally, if you would like a reply,
• the level, game version and language,
• your browser identifier and screen size, so we can reproduce bugs,
• an anonymised sender ID.

The sender ID is a hash of your IP address, created with a secret key. We do not store the IP address itself. The ID is only used to fend off spam and mass messages.

The purpose is to improve the game and, if you wish, to answer your message. The legal basis is Art. 6(1)(f) GDPR, and Art. 6(1)(b) GDPR for replying to your request. We delete feedback once it has been dealt with, at the latest after 12 months. Replies are sent from our mailbox at IONOS.

Leaderboard (Top 100)

If you enter yourself on the leaderboard after finishing a level, we store:

• the nickname you choose,
• your time, the date and the game version,
• the anonymised sender ID described above.

Only the nickname, time and date are public. They appear in the game and on our website. The sender ID ensures you have only one entry per name and helps against abuse.

Entering is voluntary. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by entering and can withdraw at any time. Just write to us and we will delete the entry. Entries that drop out of the Top 100 are deleted automatically. Please use a nickname rather than your full name.

Protection against abuse

To fend off spam and overload, we keep the anonymised sender ID together with the time of the request for no more than 24 hours (Art. 6(1)(f) GDPR).

5. Magic Camelot Companion

The Companion is a Windows program that runs on your computer. We run no server that sees how you use it, and we receive no usage data.

Data on your computer

Conversations, settings and the index of the folders you share stay on your computer. Conversations are stored encrypted. The encryption key and your AI access key are kept in the Windows Credential Manager. The reading voices run entirely on your computer.

Connections the Companion makes

• List of recommended AI models: On start-up, the Companion downloads a signed list from magic-camelot.com, without any identifier. Only the usual server logs are created (see section 3).
• AI via OpenRouter: When you use the AI, the Companion sends your message with your own access key to OpenRouter, Inc. (USA), which passes it on to the model you chose. This connection is between you and OpenRouter; we receive nothing from it. The terms and privacy policies of OpenRouter and of the model provider apply. The AI only sees what you send it. Your documents from the library are not transmitted.
• Weather: For the weather report, the Companion queries Open-Meteo (open-meteo.com) with the place you chose or its coordinates.
• Radio: The station list comes from the free radio-browser.info catalogue. The music is streamed directly from the station. The catalogue and the station see your IP address.
• News: Headlines in the reading room are loaded directly from the sources you select (such as tagesschau.de, sportschau.de, heise.de, BBC).
• Download: The installer is hosted on GitHub (see section 3).

These connections are only made when you use the feature in question. The legal basis is Art. 6(1)(b) GDPR: you explicitly call up the feature. The services named are responsible for their own processing.

6. Support via PayPal

Our applications are free. If you would like to support us voluntarily, a link takes you to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. You only leave our site when you click it. PayPal's privacy policy applies to the payment.

PayPal gives us your name, email address, the amount and any message you add. We use this data only to process the payment and for our accounts (Art. 6(1)(b) and (c) GDPR), and keep it as long as tax law requires (up to 10 years).

7. Contact by email

If you email us, we process your address and your message to answer your enquiry (Art. 6(1)(b) or (f) GDPR). We delete the messages once they have been dealt with, unless we are legally required to keep them.

8. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR).

You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An email to info@magic-camelot.de is all it takes.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). That can be the authority where you live or the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen (data protection authority of Lower Saxony), Prinzenstraße 5, 30159 Hannover, Germany.

We do not use automated decision-making or profiling. You are not obliged to give us any data. Without it, you simply cannot send feedback or enter the leaderboard.

9. Notes for users outside the EU

We do not sell or share personal information, and we do not use it for advertising. Our applications are not directed at children. We do not knowingly collect data from children under 13. A leaderboard nickname or a feedback message can be deleted at any time. Parents can contact us for this.