Card Counter

Privacy notice

Last updated: November 2, 2026

1. Controller

Ben Stiebeiner
Parkstraße 50
27798 Hude
Deutschland

Email: info@benn20002.de

2. Summary

3. Hosting and server logs

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit it, Cloudflare processes technically necessary data (e.g. IP address, time, requested URL, browser identifier) to deliver the pages and to fend off attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place. More information: cloudflare.com/privacypolicy.

4. Storage in your browser (local storage, cache storage)

So that you can continue player groups, matches and unfinished rounds later, the app stores this data as well as your language and theme preferences in your browser's local storage. The data is never transmitted to us or third parties. This storage is strictly necessary for the service you explicitly requested (§ 25 (2) no. 2 TDDDG). You can delete the data at any time in the app (deleting matches and groups) or via your browser settings. Backups are files you create on your own device.

So that the app also works without an internet connection (e.g. via a phone's hotspot), a service worker stores the website's own files (pages, scripts, styles, icons) in your browser's cache storage and updates them when a new version is released. No personal data and no game data is stored there. This, too, is strictly necessary for the service you requested (§ 25 (2) no. 2 TDDDG). You can remove the cache via your browser settings (clear site data).

5. Live table (connecting phones directly)

When you start or join a live table via "Connect phones", your browser opens a direct, encrypted WebRTC connection to the other phones in the same local network. The player group (name, player names), its matches and rounds and which player you are on this device are transmitted – exclusively to the devices at the table. No servers are involved, including ours: no STUN, TURN or signalling servers are used; the connection data is exchanged directly between the devices via QR codes. Connected devices see the local network address of your device (usually an anonymised ".local" address). So that a connection also works without a shared Wi-Fi (e.g. over mobile data), the app additionally offers your device's public IPv6 address if you allowed the camera – only then do browsers reveal it; the camera runs just briefly while connecting, nothing is recorded or transmitted. The address only goes to the devices at the table, not to us or third parties. You can choose the connection type "Local only" in the live table under "Settings" (then no camera and no public address). To scan the QR codes, the app may use the camera – only after you allow it; images are processed locally only and are neither stored nor transmitted. Connection and sync state are kept in local storage. The legal basis is Art. 6 (1) (b) GDPR and § 25 (2) no. 2 TDDDG (a feature you explicitly requested). "Leave live table" ends the connection; the data stays on each device until it is deleted there.

6. Affiliate links (Amazon)

Links marked "Ad" lead to Amazon. Only when you click such a link are you redirected to Amazon, where Amazon Europe Core S.à r.l. (or Amazon.com, Inc.) is responsible for data processing and may set cookies to attribute the purchase to our website. No data is collected on our site in the process. The legal basis is Art. 6 (1) (f) GDPR (financing this free service).

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).