Privacy Policy

Protecting your personal data is a priority for us. This policy informs you about how we collect and process data on epfr.eu, elfpedia.eu and its subdomains, specifically within the Gamecenter and Power Rankings, in accordance with the General Data Protection Regulation (GDPR).

1. Controller

The controller for data processing on this website is the person or entity mentioned in the Imprint.

2. SSL/TLS Encryption (HTTPS)

This website uses SSL/TLS encryption for security and to protect the transmission of confidential content. You can recognize an encrypted connection by the "https://" and the lock symbol in your browser line.

3. Hosting & Infrastructure

Our website and database are hosted by ALL-INKL.COM - Neue Medien Münnich (Germany). To ensure system stability and security, server log files are stored for a period of 190 days. To protect your privacy, IP addresses in these logs are anonymized immediately by masking the last two octets (e.g., 192.168.xxx.xxx). This technical data is processed based on our legitimate interest (Art. 6 Para. 1 lit. f GDPR).

4. Data Collection & Purposes

A. Registration and Account Data

We collect and store data necessary to provide the game services (Art. 6 Para. 1 lit. b GDPR):

• Username: For public leaderboards and profile identification.
• Email Address: Used for account verification and password recovery.
• Password: Stored only as a secure salted hash.
• Game Data: Submitted predictions and rankings.

B. Prize Fulfillment & Winners

If you participate in the Pick'em Challenge and win a prize, the following applies (Art. 6 Para. 1 lit. b GDPR):

• We will contact you via the email address provided to request shipping details (Name, Address).
• Data Sharing: To deliver your prize, we may share your shipping details with the respective Prize Provider/Sponsor of that specific challenge. This is strictly for fulfillment purposes only.
• We do not store your physical address on a permanent basis in your user profile; it is only erquested and processed in the event of a win.

5. Communication

We send essential transactional emails (verification, winning notifications). There are no marketing newsletters. If you do not wish to be contacted regarding prizes, you can request the deletion of your account and all associated personal data at any time.

6. Analytics (Matomo)

This website uses the self-hosted web analytics service Matomo. We have configured Matomo to be highly privacy-respecting:

• IP Anonymization: Your IP address is masked by 2 bytes (e.g., 192.168.xxx.xxx) before any data is stored. This makes it impossible to identify individual visitors.
• Pseudonymization: User IDs are automatically replaced with a pseudonym.
• Data Sovereignty: All analytics data remains on our own server at All-Inkl and is never shared with third parties.

Processing is based on our legitimate interest in the statistical analysis of user behavior to optimize our game services (Art. 6 Para. 1 lit. f GDPR).

7. Cookies

Provider	Name	Purpose	Retention
Cloudflare	cf_clearance	Security verification / Bot protection.	1 year
Gamecenter	PHPSESSID	Maintains your login session.	Session
Gamecenter	csrf_token	Prevents security attacks (CSRF).	Session
Matomo	pk_id / pk_ses	Anonymized analytics data.	13 months

8. Data Retention & Account Deletion

Account data (Email, Password hash) is stored as long as your account exists. You can request the deletion of your account and all associated personal data at any time. Since there is currently no automated "Delete Account" button in the user interface, please send an informal request to the email address provided in the Imprint. Upon request, we will remove your personal identifiers (Email, Password) within 30 days. Historical game data (Predictions) may be kept in an anonymized form to maintain the integrity of past leaderboards.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to access and rectification.
• Right to erasure ("Right to be forgotten").
• Right to restrict processing or object to processing.
• Right to data portability.

To exercise these rights, please contact us at: ue.aidepfle@ofni. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority.

Last Updated: April 21, 2026