Privacy policy

Last updated: August 2026

1. Who processes the data

Zoran Simeunović
E-Mail: zoran.simeunovic@outlook.de
Imprint

2. What data we process

• Account: nickname, email address, password (stored only as a hash, never in plain text), chosen language and settings.
• Gameplay: games played, moves, results, medals, club memberships, token balance.
• Technical logs: server errors and security-relevant events (e.g. attempts to act in someone else's name), for troubleshooting and abuse prevention.

3. Public player page

Every account has a public page at yambarena.de/player/<name>. It shows exactly what is visible in the app: nickname, country, clubs, number of games, wins, personal records, medals and a description the player writes. It never shows the email address, token balance, payments or any other personal data.

The page can be switched off at any time: in the settings, under “Public page”, clear the checkbox. After that it no longer exists for visitors and drops out of the sitemap.

4. Counting views of public pages

We count how many times a public page was opened and which category the visit came from (search engine, social network, shared link, direct). No IP addresses, no cookies and no location data are stored - what is counted is the view, not the person. Linking a view to an individual visitor is therefore neither possible nor intended.

5. Cookies

We set a single cookie, yamb_jezik, and only when a language is explicitly chosen. It stores that choice and nothing else. Signing in to the game uses a session token that serves the sign-in only. There are no tracking or advertising cookies.

6. Sharing with third parties

• Brevo - sending emails (confirmation, password reset).
• Stripe - payment processing when buying tokens. Payment details are entered directly with Stripe and never reach our server.
• Cloudflare Turnstile - checking that a move comes from a human.

Beyond this, data is not shared and not sold.

7. How long data is kept

Account data is kept as long as the account exists. Unconfirmed registrations are deleted after 30 days. After a deletion request the account is locked for 30 days and then permanently deleted; any sign-in within that period cancels the deletion. Games played remain afterwards but anonymised, because they are also part of the opponents' statistics.

8. Your rights

Access, rectification, erasure, restriction of processing, data portability and objection. Deleting the account is possible directly in the settings; for anything else an email to the address above is enough. You also have the right to lodge a complaint with a data protection authority.

The German version of this page is legally binding; translations are provided for easier understanding.