Privacy policy

Last updated: 2026-10-12

1. Controller

[NAME]
[STRASSE UND HAUSNUMMER]
[PLZ ORT]
Deutschland

E-mail: [E-MAIL]

2. In short

Settler stores only what the game needs. There are no ads, no tracking, no analytics and no scripts, fonts or images from third parties. Only one strictly necessary cookie is set, so there is no cookie banner. The info pages (start page, how to play, game modes, FAQ, contact and this page) load no scripts and set no cookies.

3. Visiting the site and server logs

When you visit, the server processes your IP address, the time, the requested address and your browser identification to deliver the site and protect it from abuse. The IP address also feeds short-lived abuse counters (login attempts, simultaneous connections), which live in memory only. The web server's logs are deleted after 14 days. The game server's logs contain no IP addresses and no chat messages. Legal basis: Art. 6(1)(f) GDPR (safe and stable operation).

4. Cloudflare

The site is delivered through the network of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which protects it from attacks and forwards connections. Cloudflare processes your IP address and technical connection data on our behalf. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework, and standard contractual clauses apply as well. Legal basis: Art. 6(1)(f) GDPR.

5. Hosting

The server is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen in Deutschland, acting as our processor.

6. Session cookie

The cookie settler_sid holds a random identifier that recognises you as a player (guests too). The server stores only a hash of it. The cookie is strictly necessary for the game (§ 25(2) no. 2 TDDDG), valid for this site only and expires after 180 days; sessions unused for 180 days are deleted.

7. Settings in your browser

Language, sound, music and volume, graphics, muted players, tips you have seen and your last table settings are stored locally by your browser (localStorage). They are not sent to us and can be cleared in your browser settings.

8. Player account and guests

As a guest we store a random player id, a generated or chosen display name, your rating and the results of your games. Guests without a finished game who have not been back for 30 days are deleted automatically. An account adds your username and password; the password is stored only as a salted scrypt hash. Friendships and friend requests are kept until you remove them. Legal basis: Art. 6(1)(b) GDPR (providing the game you use).

9. Games, results and chat

Running games are stored so they survive a server restart. The individual moves are deleted 7 days after the game ends; the result (placement, victory points, number of players, date) is kept for profiles and ratings. Names and results are visible to other players (tables, profiles, leaderboard). Chat messages stay only in the server's memory while the table exists and are never stored permanently. One exception: when you report someone in the chat, we keep the report (who reported whom, table, time) with the table's last 20 messages for 30 days to review it; if either account is deleted, the report is deleted too. Legal basis: Art. 6(1)(f) GDPR (keeping the tables civil).

10. Backups

The server backs up its database every 6 hours and keeps the last 7. Deleted data therefore also leaves the backups within two days.

11. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). In the game under Account you can download your data and delete your account or guest data yourself; your results then stay in the statistics without any link to you. For anything else, write to the e-mail address above. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).