Privacy notice

Controller

[email protected]

The controller for data processing on bingostudio.net is the private individual named above. BingoStudio is a private, non-commercial service. For privacy questions, contact us by email or through the contact form.

Overview

BingoStudio only processes data needed to run the service. We use no third-party analytics, tracking or marketing services, show no advertising and load no third-party fonts or scripts. Emails contain no tracking pixels. We do not sell data or pass it on for advertising.

Guests at a bingo night are not recorded: they play with printed cards, without an account and without a smartphone.

In the administration we only see aggregated figures, such as the number of accounts or games, calculated from data that is stored anyway, and the number of visitors per day (see “Visitor count” below). We do not analyse the behaviour of individual people.

Hosting, Cloudflare, access logs and visitor count

The application and the database run on a dedicated server at ZAP-Hosting in Germany. Requests to bingostudio.net are routed through the network of Cloudflare (Cloudflare, Inc., USA). Cloudflare encrypts the connection, protects the site against attacks and delivers it. In doing so, technically necessary connection data is processed: IP address, time, requested address, amount of data transferred, the previously visited page (referrer) and browser information. Cloudflare is certified under the EU-US Data Privacy Framework, which safeguards transfers to the USA.

The web server stores this connection data in access logs to detect errors and attacks. They are deleted after 14 days at the latest.

ZAP-Hosting and Cloudflare process the data on our behalf as service providers.

Visitor count: so that we know how many people use BingoStudio each day, every page you open reports a page view to our own server. From the IP address and browser identifier, the server forms a shortened checksum using a random key that exists only in memory and is replaced every day, and uses it to count the day’s unique visitors and page views. The IP address, browser identifier and key are not stored, no cookie is set and nothing is stored in your browser; visits on different days cannot be linked. After the end of the day only the daily totals remain and the checksums are deleted; we keep the daily totals for 24 months. If “Do Not Track” or “Global Privacy Control” is enabled in your browser, you are not counted. No data is passed on to third parties.

Card generator without an account

If you create cards without an account, we store the chosen settings, the generated cards and the PDF for at most 24 hours. They are then deleted automatically. They are never transferred to an account.

So that only your browser can access these cards, we set the cookie “bs_guest” containing a random access key. We only store a check value (hash) of it.

To prevent abuse, we count requests per shortened network address. The address is made unrecognisable with a key that changes daily and is not stored in plain text. These counters are deleted after two days. We also count the total number of requests per day, without reference to individual people.

Account and sign-in

For an account we store your name, your email address and your password (only as a hash). You confirm your email address with a link that is valid for 24 hours; a password reset link is valid for one hour. You can optionally set up a second factor (authenticator app); we store its secret encrypted.

For each sign-in we store a session with your browser identifier (user agent) so that you can see your signed-in devices and sign them out individually. We do not store IP addresses for this. A session is valid for up to 400 days from its last renewal and ends when you sign out.

To protect against attacks, we limit sign-in attempts. For this we briefly store the IP address together with the requested function and a counter. These entries are deleted after one day without further requests.

We store your account data as long as your account exists. Under “My account” you can request a copy of your data as a ZIP file; it is available for download for 48 hours. If you want your account deleted, write to us; we will then delete your account and the associated data. We also delete unconfirmed registrations on request.

Games, cards and displays

What you create in your account is stored there: games, rounds, card sets with the generated cards and PDFs, the game history and connected displays. Changes to games are recorded in a change history. Connected displays only show the game state; they get no access to your account.

We store this data as long as your account exists.

Emails

To confirm your email address, reset your password, send notices about your account and answer contact requests, we send emails through the operator's own mail server. For delivery it uses the email service SMTP2GO (New Zealand), which processes recipient and sender address, subject, content and technical delivery data for this purpose. The EU Commission has recognised an adequate level of data protection for New Zealand (adequacy decision).

For each email we store the delivery status (queued, handed over, failed). There is no newsletter.

Contact form and requests

Through the contact form we store your name (optional), your email address, subject, message, the page language and the time. If you are signed in, we note your account and whether the address you entered matches the confirmed account address. To prevent abuse, we count submissions per shortened, unrecognisable network address. Only administrators can read requests. We send replies to the address you entered and store them with the delivery status alongside the request. If you write to us directly by email, we use your message and address to reply.

We keep requests and replies as long as needed to handle them and for possible follow-up questions, and delete them afterwards; earlier on request.

Cookies and browser storage

We only use storage that is strictly necessary for the features you use:

• “bs_locale”: your language choice, one year.
• Cookies with the prefix “bs.”: your sign-in; they end when you sign out or when the session expires.
• “bs_guest”: access to your guest cards, at most 24 hours.
• Browser session storage: card generator settings and states of the game controls and display approval; it is cleared when the tab is closed.
• “__cf_bm”: may be set by Cloudflare to protect against automated attacks, at most 30 minutes.

No consent is required for this storage (§ 25 (2) no. 2 TDDDG). We set no cookies for analytics or advertising, which is why there is no cookie banner.

Backups and operational logs

To protect against data loss, we back up the database and stored files daily on the server. Each backup is deleted after 14 days; deleted data may remain in backups until then.

The application keeps operational logs to detect faults. They contain no email or IP addresses and are deleted after 30 days at the latest.

Legal bases

• Account, games, cards, displays, data export and emails about your account: Art. 6(1)(b) GDPR (use of the free service).
• Card generator without an account: Art. 6(1)(b) GDPR.
• Contact requests: Art. 6(1)(f) GDPR (our interest in answering requests); if the request concerns your account, Art. 6(1)(b) GDPR.
• Hosting, Cloudflare, access logs, protection against abuse and attacks, backups and operational logs: Art. 6(1)(f) GDPR (our interest in secure and stable operation).
• Visitor count: Art. 6(1)(f) GDPR (our interest in knowing how the service is used, in aggregated figures); you can object, for example via “Do Not Track” or “Global Privacy Control” in your browser.
• Browser storage: § 25 (2) no. 2 TDDDG.

Your rights

Under the General Data Protection Regulation you have the right of access, rectification, erasure, restriction of processing and data portability. You can object, on grounds relating to your particular situation, to processing based on our legitimate interests. To do so, write to the email address above.

You can also lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, which is responsible for us.

Name, email address and password are required for an account; without them you can only use the card generator. There is no automated decision-making.