Data Privacy

This notice explains the data used when you visit or play PuckShift.

Controller

Hosting and access logs

When the site is requested, the hosting provider necessarily processes technical connection data such as IP address, request time, requested resource, browser information, referrer, and response status. This is required to deliver and secure the service. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is reliable and secure operation. Log retention and processing locations depend on the hosting provider selected for deployment and must be added here once selected.

Local browser storage

PuckShift stores your display name, selected color, hat, arena, puck skin, training drill, ruleset, graphics preference, mute setting, and music and sound-effect volumes in local storage on your device. This makes the game remember your preferences. The data remains on your device until you clear site data and is not transmitted merely because it is stored. The legal basis is Section 25(2)(2) TDDDG for storage strictly requested by the user and Article 6(1)(f) GDPR for convenient game operation.

Online matches

If you choose an online match, your display name, selected color, room code, connection data, control inputs, and live match state are transmitted through the PuckShift WebSocket server. Your opponent receives the display name, color, and match data needed to play. Lobby and match state is held in server memory and removed when the room closes; PuckShift currently has no account or match-history database. Processing is necessary to provide the online match you request under Article 6(1)(b) GDPR.

Audio and external services

Game audio is served from the same website. PuckShift does not use analytics, advertising trackers, social-media pixels, or third-party font services. Links to external credit pages are only contacted when you choose to open them.

Recipients and international transfers

Technical data may be processed by the hosting provider acting as a processor. If that provider processes data outside the European Economic Area, the deployment owner must document the applicable transfer safeguard here before launch.

Retention

Live room data is deleted when the room closes. Local preferences remain until you clear them. Hosting security logs are retained only for the period configured by the selected host; that concrete period must be added after deployment.

Your rights

Subject to the legal requirements, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may also complain to a competent data-protection supervisory authority. Contact the controller using the address above.

Changes

This notice should be updated whenever hosting, persistence, analytics, accounts, or other data flows change.