Privacy Policy
1. Controller
Pascal von Hagen
Im Dörntken 4
58802 Balve
Germany
E-mail: info@kaiser-imperium.com
2. Server and server log files
The game runs on a server I rent in a data centre in Germany; I operate the application and the database myself. The data centre operator could technically access the server and is therefore a processor (Art. 28 GDPR); a corresponding agreement is in place.
On every request the web server stores the usual log files: IP address, time, the page requested, browser and operating system, and the page visited before. They serve secure and trouble-free operation (Art. 6 (1) (f) GDPR) and are deleted after 14 days at the latest. The game itself never stores your IP address and does not link it to your account.
3. Cookies
Necessary for operation are: PHPSESSID (keeps you logged in during a session), lang (language choice), kw_consent (your decision on reach measurement), kw_theme, kw_kurse, kw_kurve (view settings) and kw_vote (hides the voting button for a while). They expire with the session or after one year at the latest. The legal basis is Art. 6 (1) (f) GDPR and § 25 (2) TDDDG.
Only with your consent are the analytics cookies _ga and _ga_<ID> added (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG – see section 4). Your browser's local storage additionally holds your language choice and whether the news notice should appear; neither leaves your browser.
4. Reach measurement with Google Analytics
This website uses Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to evaluate how the game is used and to develop it further.
Google Analytics is only loaded after you have clicked “Accept” in the cookie notice. Google then sets cookies stored for up to two years and processes your shortened IP address, browser and device information and details about your use of the site; IP anonymisation is enabled. A transfer to Google LLC in the USA cannot be ruled out – it is certified under the EU-US Data Privacy Framework, and the EU standard contractual clauses apply in addition.
The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw it at any time with effect for the future:
Give consent ·
Withdraw consent and delete analytics cookies
More on this in Google's privacy policy or via the browser add-on to opt out.
5. User account
Playing requires an account. For it I process your user name, e-mail address, password (stored solely as a secure hash and not readable by me) and the game data that arises as you play, such as progress, resources and messages. The legal basis is Art. 6 (1) (b) GDPR (usage contract). The data is kept as long as your account exists; you can request deletion at any time (see section 9).
6. Playing time and in-game activity
Your account records how much time you have spent in the game during the current round and when you were last active. Time is only counted while the game is actually open in front of you; no history is created showing when you played on which day. Every round reset starts the count again from zero.
Other players see only whether you are currently online (a symbol in the score list, the “online only” filter, the number of active players). Your playing time itself is visible only to me.
The purpose is operating, balancing and developing the game, and showing online status as part of multiplayer operation. The legal basis is Art. 6 (1) (b) GDPR (usage contract) and Art. 6 (1) (f) GDPR (legitimate interest) respectively. Both values are deleted together with your account.
7. Captcha and external graphics
During registration a captcha image protects against automated sign-ups; it is generated on my own server and no data goes to third parties. For the language selection on the start page, small flag graphics are loaded from “flagcdn.com” – this technically reveals your IP address to that provider. The legal basis for both is Art. 6 (1) (f) GDPR; where data reaches a third country, this happens on the basis of appropriate safeguards.
8. Contact by e-mail
If you write to me, I process your details in order to handle your enquiry (Art. 6 (1) (b) or (f) GDPR) and delete them as soon as they are no longer needed and no retention obligation applies.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7 (3) GDPR). An informal message to info@kaiser-imperium.com is enough.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
10. Security
The connection is encrypted via SSL/TLS, recognisable by “https://” in the address bar. Passwords are stored solely as a secure hash, and I take appropriate technical and organisational measures against unauthorised access.