Privacy, plainly.

• GDPR-compliant hosting in Germany. Spermtan runs on Hetzner servers in Germany (EU), under a GDPR data processing agreement.
• We never sell your data. We don't share it with anyone for advertising.
• See or delete everything, yourself. Your profile has a "My data" page with a download and a delete button.

Controller: mbrlla e.U., Gürtelstraße 17, 4020 Linz, Austria. Full details are in the Impressum.

1. What stays on your device

So the game remembers you, your browser keeps these on your device, in its local storage. They're needed for the game to work the way you play it, so they need no consent:

• your settings, which tips you've already seen, your result cards (the last 100), your victory titles and how often you won them, your best time and distance, and a recording of your best run (the "ghost" you race against);
• a stock of run tokens from our server, runs waiting to be sent while you're offline, and the receipts that let you claim them when you join the leaderboard;
• your choice about play statistics, and how often you've pressed "Play again" (we ask about statistics on the third time);
• once you join the leaderboard: a sign-in cookie (rush_session, HttpOnly, 180 days), used only to keep you signed in.

You can delete all of it by clearing this site's data in your browser. If you steer by tilting your phone, the game reads its tilt while you play, on your device only.

2. Runs and fair play (everyone)

• Every run is played on a course our server picks (a "run token"). When a run ends, the game sends the run's inputs (when you steered and lunged) and its result. Our server plays the run again to check it, so nobody can submit a fake score.
• This happens for every run, whether or not you're on the leaderboard. If you haven't joined, the run isn't linked to you.
• With each token request and run we process your IP address, your browser's user agent and your device type, to stop abuse and cheating. The full IP address is kept for 7 days, then only a keyed hash of it until day 30; then it's deleted. Run inputs are deleted after 30 days; results stay with your account.
• Legal basis: our legitimate interest in fair leaderboards and in protecting the service (GDPR Art. 6(1)(f)).

3. The leaderboard and accounts (if you join)

• Joining gives you a guest name (like "Brave_Tadpole_48213977") and puts your checked runs on the boards.
• Public: your name, flag, places on the boards, stats and recent eggs are public. So are your previous names, if you change yours.
• Accounts use passkeys only: no password, no email. Your device keeps the private key; we store only the matching public key, a counter and the device type. You choose a username (changeable every 7 days, with every name kept) and a flag (once per season).
• Legal basis: providing the leaderboard and account you asked for (GDPR Art. 6(1)(b)).

4. Sharing a result

• A shared link contains only your run's numbers (result, title, time or distance, gold rings) and a short link ID.
• When the link is opened, or a chat app shows its preview, our server draws the card and counts the open, with the IP address, user agent and device type (same retention as section 2). This shows which shared links bring new players. Legal basis: legitimate interest (Art. 6(1)(f)).
• Only with your consent (section 5) do we connect the link to what a new player does next: playing, joining, creating an account.

5. Play statistics (only if you say yes)

• We ask once, after a few runs. If you say yes, your device gets a random statistics ID, and the game sends us how you play: the buttons you press, how runs start and end (and where), tips you see, settings you change, how smoothly the game runs, and the share and sign-up steps. Each event includes your device type, browser and screen size and, as in section 2, your IP address.
• It helps us find what's too hard, what's broken and what's fun. It goes only to our own server.
• Raw statistics are anonymised after 30 days: we delete them and keep only anonymous daily totals.
• You can say no, or switch it off anytime in Settings. The game and the leaderboard work exactly the same.
• Legal basis: your consent (GDPR Art. 6(1)(a); for the ID on your device, § 165 (3) TKG 2021).

6. Website statistics (DataFast)

• Every page loads DataFast's cookieless script from datafa.st. It sets no cookies and stores nothing on your device.
• It records page views, the referring site, your browser, device type and country. To count unique visitors, DataFast derives a hashed identifier from signals such as your IP address, browser user-agent and our domain, with a salt that changes about every 24 hours, so you are not linked across days.
• DataFast processes this on our behalf (a processor under GDPR Art. 28). The start page shows the resulting totals: visitors online now and visitors today.
• Legal basis: our legitimate interest in knowing how many people visit (GDPR Art. 6(1)(f)).

7. Delivering the site

To send you pages, the game and card images, our server necessarily processes your IP address and the request. Our application does not store them beyond what's described above.

8. How long we keep things

• Full IP addresses: 7 days. Hashed IP addresses, raw play statistics, share opens, run tokens and run inputs: 30 days.
• Your account, names, runs and places: until you delete your account.
• Anonymous daily totals: kept, because they identify no one.

9. Your rights, and the buttons for them

You can see all your data and download it (a zip with JSON, HTML and CSV) on the My data page in your profile. In its danger zone you can delete your account: everything linked to it is deleted from our database at once. You can also ask for access, correction, deletion, restriction or a copy of your data, and object to processing based on legitimate interest, via the contact details in the Impressum. You may complain to the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).

This page describes the website as it works today.