Privacy Policy
This policy explains what personal data is processed when you use Hue Harmony (the “Service”) and on what legal basis. We aim to collect as little data as possible.
1. Controller
Max Freytag
Valparaisostr. 6
22761 Hamburg, Germany
Email: mfreytag.studio@gmail.com
2. Hosting
The Service is hosted on Vercel (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access the site, Vercel automatically processes technical data in server logs — such as your IP address, browser type, referrer, and the date and time of the request — which is technically required to deliver the site and to ensure its security and stability.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in operating a secure, functional website). Data may be processed on servers in the USA; appropriate safeguards (EU Standard Contractual Clauses) apply. See Vercel’s privacy policy at vercel.com/legal/privacy-policy.
3. Anonymous game statistics
When you complete a daily puzzle, the Service records your move count, the difficulty, the puzzle date, and a timestamp to compute the day’s world record and world average shown in the game. These entries are anonymous — no name, account, or other identifier is stored with them, and we cannot link an entry back to you.
This data is stored in Google Cloud Firestore (Firebase), operated by Google Ireland Limited / Google LLC. Entries are automatically deleted approximately two days after the puzzle date via an automatic time-to-live policy. Custom puzzles are generated entirely in your browser and send no result data at all.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in providing aggregate daily statistics).
4. Local storage
To remember which puzzles you have played and your results, the Service stores small values in your browser’s local storage (not cookies). This data stays on your device and is not transmitted to us, except for the anonymous move count described above. You can clear it at any time via your browser settings.
5. Web fonts
The Service loads the “Dancing Script” font from Google Fonts. When a page loads, your browser requests the font files from Google servers, which transmits your IP address to Google. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a consistent presentation).
6. Support (Ko-fi)
The game offers an optional “Thank me with a coffee” button. Nothing is loaded from Ko-fi during normal use — only when you actively click that button does an embedded panel from Ko-fi (Ko-fi Labs Ltd, United Kingdom) open on the page. At that point your browser connects to Ko-fi and Ko-fi may set cookies and process the information you enter to complete a voluntary donation. We never receive your payment details. Legal basis: Art. 6 (1)(a) GDPR (your consent, given by opening the panel). See Ko-fi’s privacy policy.
7. No analytics or advertising
We do not use analytics, tracking, advertising, or third-party marketing cookies.
8. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interests (Art. 21).
To exercise any of these rights, contact us at mfreytag.studio@gmail.com. You also have the right to lodge a complaint with a supervisory authority — for our location, the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).
9. Changes
We may update this policy as the Service evolves. The current version always applies.