This policy explains how Jingames.com processes personal data and the rights available to you.
1. Controller
Max Mustermann
Musterstraße 1
12345 Musterstadt
Email: kontakt@jingames.com
See the imprint for provider details.
2. Hosting and server logs
This website uses an external hosting provider: [insert hosting provider's name and address]. A data processing agreement under Article 28 GDPR applies.
The web server records IP addresses, request dates and times, requested URLs, referrers, browser and operating system information to deliver the service and ensure security. The legal basis is Article 6(1)(f) GDPR. Logs are deleted within 14 days unless needed longer to investigate a security incident.
3. Cookies and local storage
Session cookies maintain your login and preferences. XSRF-TOKEN protects forms against cross-site request forgery. Your theme choice is stored only on your device in localStorage under jingames-theme. Your language choice is stored in the session and in the jingames_language cookie for one year. Without an explicit choice, we use your browser's preferred language.
These requested functions use necessary storage under section 25(2)(2) TDDDG and Article 6(1)(f) GDPR. Session cookies expire with the session; the language cookie has its own one-year expiry. Third-party game storage is described below.
4. Accounts, bookmarks and votes
You can play without an account. For accounts we process your display name, email, securely hashed password, bookmarks, votes and registration/update timestamps to provide the requested service under Article 6(1)(b) GDPR.
Password reset requests and registration trigger emails. You can play and bookmark immediately, but voting requires verification. Unverified non-admin accounts are deleted during the next daily cleanup after their seven-day deadline, including bookmarks, votes, database sessions and password reset tokens. New verification links do not extend the deadline. Admin accounts are exempt. Other account data is retained until account deletion is requested, subject to statutory retention obligations.
5. Embedded games
Games from GamePix (play.gamepix.com), GameDistribution (html5.gamedistribution.com, Azerion group, Netherlands) and Famobi (play.famobi.com, Famobi GmbH, Cologne) connect directly to the providers when you open a game page. This transmits your IP address, browser information, page URL and request time. Famobi URLs may contain our affiliate identifier.
Providers and their partners may show advertisements, measure usage, store progress and use cookies or similar technologies. Data may be processed outside the EU, including in the USA. Providers obtain consent for non-essential storage and personalised advertising through their own in-game dialogs under section 25(1) TDDDG and Article 6(1)(a) GDPR.
Embedding games serves our legitimate interest in offering games under Article 6(1)(f) GDPR. We do not control providers' processing. Consult GamePix, GameDistribution and Famobi for their policies. Do not open game pages if you do not want to connect to these providers.
6. Email contact
We process your messages to respond under Article 6(1)(b) or (f) GDPR and delete them after handling the enquiry unless retention is legally required.
7. Security
The website uses HTTPS with TLS encryption.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction and data portability under Articles 15–20 GDPR, and withdraw consent under Article 7(3). Under Article 21 you may object to processing based on legitimate interests for reasons relating to your situation. You may also complain to a data protection supervisory authority.
9. Updates
We update this policy when processing or legal requirements change. The published version applies.