Privacy Policy

This privacy policy explains how personal data is processed on bingokarten-erstellen.de. The operator is based in Switzerland, so the Swiss Federal Act on Data Protection (FADP) applies. Where we address people in the EU, the General Data Protection Regulation (GDPR) and the German TDDDG apply in addition.

1. Data Controller

The person named below is responsible for data processing on this website. To protect against spam, the contact details are only shown after a click.

2. Hosting and Server Log Files

When you visit the website, our hosting provider processes technically necessary connection data (e.g. IP address, time of access, page requested, browser type) in order to deliver the website securely and reliably (Art. 6(1)(f) GDPR). The provider processes this data on our behalf (Art. 28 GDPR). Log files are deleted after 14 days at the latest, unless they are needed to investigate a security incident.

3. Strictly Necessary Session Cookie (bc_sid)

We use a strictly necessary, cryptographically signed cookie (bc_sid) that links your browser to your games and cards without a user account (Section 25(2) No. 2 TDDDG, Art. 6(1)(f) GDPR). We store bingo terms, issued card numbers and marks. For spam protection and rate limiting, we use IP addresses only as an irreversible hash (HMAC-SHA256). Your language choice (cookie bc_locale) and your cookie decision (your browser's local storage) are also stored.

4. Consent and Google Ads Conversion Tracking

Only if you select “Accept all” in the cookie banner do we load the Google tag (gtag.js) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This lets us measure whether visitors found us via a Google ad and then created a bingo or bought cards (conversion tracking). In the process, cookies may be set and identifiers, your IP address and information about the ad click may be transmitted to Google. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). We use Google Consent Mode; without consent, the Google tag is not loaded. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time via “Cookie settings” in the footer. More information: https://policies.google.com/privacy and https://adssettings.google.com

5. Google Analytics (Web Analytics)

If enabled, and only with your consent, we use Google Analytics 4 (Google Ireland Limited) to statistically analyze the use of the website. Google Analytics 4 does not store complete IP addresses. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings”.

6. Payment Processing via Stripe

For paid card upgrades, we use Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Payment data is processed directly in Stripe Checkout for the performance of the contract (Art. 6(1)(b) GDPR). We never gain access to your complete payment or credit card details. Stripe's privacy policy: https://stripe.com/de/privacy

7. Spam Protection with Cloudflare Turnstile

To protect against automated requests, Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, USA) may be used when creating a bingo. Technical browser data and your IP address are transmitted to Cloudflare in order to detect bots (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.

8. Your Rights

Under the Swiss FADP you have in particular the right of access (Art. 25 FADP), rectification and erasure (Art. 32 FADP) and the right to receive or transfer your data (Art. 28 FADP). People in the EU additionally have the rights under Art. 15 to 21 GDPR (access, rectification, erasure, restriction, data portability, objection). You can withdraw consent at any time with effect for the future. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch. People in the EU may also lodge a complaint with the supervisory authority of their country of residence (Art. 77 GDPR).

9. Retention and Deletion

As the host, you can delete your bingo at any time in the management area. The game, all cards and drawn terms are then immediately removed from the database. Session data is deleted no later than 180 days after your last visit.