This site collects almost nothing. It sets no cookies, runs no analytics, and loads nothing from anyone else’s server. This page explains the little that does happen.
The short version. No cookies. No tracking pixels, no analytics, no advertising networks. No fonts, scripts or images loaded from third-party servers, so your browser never contacts anyone but us. Nothing is shared with anyone. That is why you were not asked to accept anything when you arrived.
Controller
The controller responsible for data processing on this website within the meaning of the GDPR is:
bdecent GmbH Marketing Services
Franz-Obermayer-Straße 8
83607 Holzkirchen, Germany
Email: info@card-clash.io
Telephone: +49 8024 64 999-21
We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR / § 38 BDSG. Enquiries about data protection reach us at the address above.
Hosting
This website is hosted on infrastructure provided by Hostinger Operations UAB, Švitrigailos g. 34, 03230 Vilnius, Lithuania. The provider processes data on our behalf as a processor under Art. 28 GDPR, on the basis of a data processing agreement, and only to the extent necessary to operate the server.
Server log files
When you open a page, your browser automatically transmits information that the web server records in a log file. This is:
- your IP address
- the date and time of the request
- the page or file requested, and the amount of data transferred
- the HTTP status code returned
- the referring page, if your browser sent one
- your browser and operating system identification (user agent)
Purpose and legal basis. These records are needed to deliver the site, to keep it secure, and to diagnose faults and abuse. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in operating a functioning and secure website.
Retention. Log files are deleted automatically after 14 days, unless a specific incident requires us to keep a record longer in order to investigate it.
This data is not merged with other sources, is not used to build a profile, and is not used to identify you.
Contact form and email
If you write to us — through the form on the contact page or by email — we process the content of your message together with your email address, your name, the organisation you give if any, and anything else you choose to include, in order to answer you.
What the form does. A submission is saved on this server and a copy is emailed to us. It is stored as well as sent so that a mail failure does not lose your enquiry. The form sets no cookie, loads nothing from a third party, and uses no captcha service; it is protected against automated abuse by a hidden field, a timing check and a per-address rate limit. The rate limit records a one-way hash rather than your IP address, so it does not become a record of who visited.
Legal basis. Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual steps, otherwise Art. 6 (1) (f) GDPR — our legitimate interest in responding to enquiries addressed to us.
Retention. We keep correspondence, including stored form submissions, for as long as it is needed to deal with your enquiry and any follow-up, and thereafter for the periods required by German commercial and tax law where those apply. You may ask us to erase it at any time; we will do so unless a retention obligation prevents it.
Email is sent to info@card-clash.io, which is forwarded to a mailbox at bdecent.de. Ordinary email is not end-to-end encrypted in transit between mail servers; please do not send us anything confidential by email without arranging encryption first.
Cookies and local storage
This website sets no cookies and writes nothing to your browser’s local storage — including on the contact page. There is consequently no consent banner, and nothing for you to accept or reject.
If you log in to the site as an editor, WordPress sets session cookies that are strictly necessary for that login. This applies only to our own staff, not to visitors.
No third-party content
All fonts, scripts, styles and images are served from this domain. We embed no videos, maps, social media widgets, web fonts, content delivery networks or captcha services. Your browser therefore makes no request to any third party while viewing this site, and no third party learns that you visited it.
We use no analytics or statistics package of any kind.
Links to our other sites
This site links to play.card-clash.io, where Card Clash can be played, and to bdecent.de, where it can be bought. Those are separate services with their own data processing and their own privacy information. Following a link takes you there; nothing about you is transmitted to them beforehand.
Encryption
This site is served over TLS (https). You can recognise an encrypted connection by the address bar showing https:// and a padlock symbol.
Your rights
Under the GDPR you have the right to:
- Access (Art. 15) — to be told what data we hold about you, and to receive a copy.
- Rectification (Art. 16) — to have inaccurate data corrected.
- Erasure (Art. 17) — to have data deleted, where no retention obligation applies.
- Restriction of processing (Art. 18).
- Data portability (Art. 20) — to receive your data in a machine-readable format.
- Objection (Art. 21) — to object to processing based on legitimate interest, on grounds relating to your particular situation.
- Withdrawal of consent (Art. 7 (3)) — where processing is based on consent, with effect for the future.
To exercise any of these, write to info@card-clash.io.
Right to complain
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de
Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Changes to this notice
We will update this page if the site changes in a way that affects data processing. The version in force is always the one published here.