← Back

Privacy Policy

1. Overview

We take the protection of your personal data very seriously. This privacy policy informs you about how we collect, process, and protect your personal data when you use ChatGames.

2. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

ShishaWG, Inhaber Marvin Dutiné
Wiesenstr. 3
63110 Rodgau
Germany

Phone: 0151 - 44555845
Email: info@shishawg.de

3. Data We Collect

When you use ChatGames, we process the following data:

  • Authentication data: When you log in via Twitch, we receive your Twitch username, display name, email address, and profile picture from Twitch via OAuth. This data is stored by our authentication provider Supabase.
  • Game data: During gameplay, your Twitch username and in-game actions (such as moves, votes, and scores) are processed in real time to enable the game functionality.
  • Technical data: Our hosting infrastructure may automatically collect server logs including IP addresses, browser type, and access times for security and operational purposes.

4. Legal Basis

We process your data based on the following legal grounds:

  • Performance of a contract (Art. 6(1)(b) GDPR): Processing your authentication and game data is necessary to provide the ChatGames service.
  • Legitimate interest (Art. 6(1)(f) GDPR): We have a legitimate interest in ensuring the security and functionality of our service through server logs.

5. Third-Party Services

  • Twitch (Amazon): We use Twitch OAuth for authentication. When you log in, data is exchanged with Twitch according to their privacy policy (https://www.twitch.tv/p/legal/privacy-notice/).
  • Supabase: We use Supabase for authentication and session management. Your authentication data is stored on Supabase servers. See their privacy policy at https://supabase.com/privacy.

6. Cookies

ChatGames uses only strictly necessary cookies for authentication and session management (Supabase auth cookies). These cookies are essential for the functionality of the service and do not require consent under the ePrivacy Directive. We do not use any tracking, analytics, or marketing cookies.

7. Local Storage

We use the browser's local storage to save your language preference. This data stays on your device and is not transmitted to any server.

8. Data Retention

Your authentication data is stored as long as your account exists. Game data (scores, moves) is only held in memory during active game sessions and is not permanently stored. You can delete your account at any time by contacting us.

9. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at info@shishawg.de.

10. Changes

We reserve the right to update this privacy policy. The current version is always available on this page.

Last updated: March 2025