Privacy policy

Updated: 6 October 2026

This policy applies to Impostor Game at imposter-gaming.com. It describes the current technical setup and the planned advertising integration.

Controller and website operator

Robert SchneiderEngelbergstr. 3270499 StuttgartGermanyu5261955670@gmail.com

Website delivery and hosting

The website is hosted through OpenAI ChatGPT Sites using Cloudflare infrastructure. Requests transmit data such as IP address, time, requested URL, browser and device information, and potentially the referring page to the hosting infrastructure. This enables delivery, troubleshooting and security. The legal basis is GDPR Article 6(1)(f), our legitimate interest in a secure, working service. Providers may retain technical logs for operation, security investigation, abuse prevention and legal obligations; we do not promise a fixed retention period for platform logs. The game database does not store IP addresses in a dedicated field.

Multiplayer on separate devices

A lobby processes your chosen player name, random player identifiers and access tokens, assigned face emoji, lobby code, language, categories and game options. Rounds also store roles, the secret word, reveal status, times, starting player, votes and results to enable participation, synchronization and scoring. The legal basis is GDPR Article 6(1)(b), providing the game you request. You do not need to use your real name; a nickname is sufficient. Your name, emoji and status are visible to others in the same lobby. Roles and results are disclosed according to the game rules. A lobby is accessible for 24 hours after creation. Expired records are removed from the active game database when a subsequent new lobby is created; they may remain technically stored until then. Leaving a lobby removes your player entry from its current state.

Single-phone mode and browser storage

Single-phone mode stores entered names and game state in this browser’s sessionStorage; that mode does not send them to the multiplayer API. Multiplayer sessionStorage holds a lobby code and access token to resume after a reload. Exiting through the app removes the relevant session entry. Otherwise session storage lasts for the browser session; browsers may restore sessions. Your selected language remains in localStorage until changed or until you delete website data. Language may also be detected from browser language settings. These stores support the requested game and language preference, rather than advertising. The legal bases are GDPR Article 6(1)(b) or (f); necessary device storage or access falls under section 25(2)(2) of Germany’s TDDDG. You can delete stored data in browser settings, which may remove access to a game session.

Google AdSense: prepared, no ads yet

The website currently includes only a meta tag to verify our AdSense account. AdSense advertising scripts and an advertising consent banner have not been integrated. The meta tag itself does not load a Google advertising service. The app has no separate audience analytics integration such as Google Analytics. The following information describes planned advertising. Before activation, the actual providers, retention periods and consent options must be checked against the configuration.

Data use when advertising is activated

If AdSense is activated, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), Google LLC and selected advertising partners may process IP addresses, device and browser details, identifiers, ad interactions and consent choices. Google and other vendors may use cookies and similar technologies to select advertisements based on previous visits to this or other websites and measure performance. Personalized advertising and non-essential device storage require consent where applicable (GDPR Article 6(1)(a) and TDDDG section 25(1)). Declining advertising consent must not make the core game dependent on that consent. Actual advertising partners and purposes will be listed in the consent dialog before activation. Consent must then be withdrawable through accessible privacy choices; withdrawal applies going forward. Advertising technology retention depends on the enabled configuration and will be disclosed there. You can also manage personalized Google ads at myadcenter.google.com and other vendors’ choices at optout.aboutads.info.

Email contact

If you email us, we process your email address, any name you provide, message content and delivery information to answer your request. Email delivery and storage use Google Gmail. The legal basis is GDPR Article 6(1)(f), our legitimate interest in answering requests, or (b) where a request concerns the requested game. Messages are kept while needed to handle the inquiry and related follow-up, subject to necessary statutory retention or protection of legal claims.

Recipients and processing outside Europe

Recipients include the named hosting and email providers, members of the same game lobby, and advertising vendors listed in the consent dialog if advertising is activated. International providers may process data outside the European Economic Area, including in the United States. Their linked privacy information explains locations and transfer safeguards, such as adequacy decisions or standard contractual clauses. You may ask the controller for information about the provider agreements and safeguards applicable to this website. AdSense approval does not confirm the legal validity of every provider agreement.

Your rights

Subject to legal conditions, you have rights of access, correction, deletion, restriction and data portability. Where processing relies on legitimate interests, you may object for reasons relating to your particular situation. You may withdraw consent at any time for the future. Contact the address above; your lobby code and nickname may be needed to identify a game session. You may complain to a data protection authority, including the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (baden-wuerttemberg.datenschutz.de). A player name is needed to participate, but a freely chosen nickname is sufficient. Game results are calculated from roles and votes and do not constitute automated decisions with legal or similarly significant effects.