Privacy notice

This notice explains how personal data is handled when you visit pinochlelounge.com (Articles 13 and 21 GDPR). Last updated: November 2026.

Controller

Haris Hadzic, Am Heuchelbach 1, 61350 Bad Homburg vor der Höhe, Germany. E-mail: operations@dinarica.store

Hosting and server logs

The site is delivered through Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which acts as hosting provider and content delivery network and processes the data on our behalf as a processor (Art. 28 GDPR). When you open a page, your IP address and technical request data (browser type, time, requested page) are processed to deliver the site securely and to protect it against abuse. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a secure and reliable website). We do not keep these logs ourselves; Cloudflare keeps them only as long as needed for these purposes, as described in its privacy policy (cloudflare.com/privacypolicy). Cloudflare is certified under the EU-U.S. Data Privacy Framework, on which data transfers to the USA rely.

No cookies

The site sets no cookies. Only if Cloudflare detects suspicious traffic can it show a security check and store a strictly necessary technical cookie (for example cf_clearance).

The game in progress, your settings (level, speed, game target) and your win/loss count are saved in your own browser (local storage) so that you can continue where you left off. This is strictly necessary for the game you asked to play, so no consent is required (Section 25(2) no. 2 of the German TDDDG). The data never leaves your device, and you can delete it at any time in your browser settings.

Web analytics

We use Cloudflare Web Analytics, a privacy-focused measurement service of Cloudflare, Inc. (address as above), to count visits: which pages are viewed, which website referred you, your country, browser and device type, and page load times. According to Cloudflare, the service sets no cookies, stores nothing in your browser, does not use fingerprinting, and does not track individual visitors across visits or sites; your IP address is discarded and is not used to identify you. We cannot identify you from this data. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in understanding how the site is used and keeping it fast). Data transfers to the USA rely on the EU-US Data Privacy Framework or standard contractual clauses. If we add advertising or other tracking later, we will update this notice and ask for your consent first where the law requires it.

Contact by e-mail

If you write to us, we process your message and address to answer you. The legal basis is Art. 6(1)(f) GDPR. We delete the data once the matter is settled, unless retention duties apply. Our e-mail is handled through Google Workspace by Google, which processes messages on our behalf as a processor; for any transfers to the USA, Google is certified under the EU-U.S. Data Privacy Framework.

Required data and automated decisions

To visit the site, your browser has to send the technical request data; without it the page cannot load. There is no other obligation to provide us with data. We do not make decisions based solely on automated processing, including profiling.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Articles 15 to 20 GDPR). To exercise them, write to the address above. You can also complain to a data protection authority, for example the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Wiesbaden.

Right to object

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). Simply write to the address above.