Privacy Policy

Last updated: September 21, 2026

1. Who is responsible?

The controller for this website under the General Data Protection Regulation (GDPR) is:

Tim Viergutz
Schwedter Str. 39
17291 Prenzlau
Germany

2. Playing RANGELY

RANGELY is a static browser game. It has no accounts, login, game server, global leaderboard, advertising or application analytics. Your guesses and scores are not sent to us. Game logic runs on your device. Website hosting still involves the technical processing described below.

3. Website delivery and security

RANGELY uses Cloudflare Workers with static assets for hosting and delivery. Cloudflare, Inc. and its service infrastructure receive technical request data, including IP addresses and traffic information, to serve files and protect the service. Our purpose is reliable, secure website delivery; the legal basis is Article 6(1)(f) GDPR, our legitimate interest in operating this website.

Cloudflare processes customer data on customers’ instructions and also processes certain network data for its own purposes. Its roles differ by processing activity. See the Cloudflare Privacy Policy and Data Processing Addendum.

Processing may take place outside the EEA, including in the United States. Cloudflare’s DPA provides safeguards for restricted transfers, including EU standard contractual clauses. Information about applicable safeguards can be requested from us.

We do not maintain a separate application access log. Cloudflare’s retention depends on processing purposes, security needs and legal obligations as explained in its policy. No uniform fixed log-retention period is promised here.

4. Storage in your browser

When you start a daily, RANGELY stores progress, guesses, content snapshots, results and completion dates in localStorage. These provide resume, Already Played, View Results, statistics and streaks. The keys start with rangely:v2:day:. Earlier preview saves under rangely:v1:day: remain available separately. Your selected appearance is stored under rangely:theme; otherwise the game uses your device’s light/dark preference.

This storage stays in your browser for this website address. The game does not upload it. It has no automatic expiry: it remains until you clear site data or your browser removes it. Different browsers, devices and website addresses have separate saves. If saving is blocked, the game uses temporary memory for the current visit and shows a notice.

Storage and access are used to provide the game-saving and appearance functions you request, on the basis of Section 25(2)(2) TDDDG. To the extent personal data are processed, Article 6(1)(f) GDPR applies: our legitimate interest in providing the requested functional game experience. The application sets no cookies and uses no tracking identifiers. No advertising or analytics storage is included.

5. Sharing and copying

Nothing is shared automatically. Only when you press Share result does the game ask your browser to open the device’s share sheet. You choose the recipient or app. The text contains the daily number, date, total score, category result tiles and, on a public address, the game URL. It omits your individual answers.

Copy result writes the same text to your clipboard after your click. If sharing or clipboard access is unavailable, the game displays selectable text. Your operating system, clipboard settings and chosen receiving app govern any subsequent processing. We do not receive a copy. The purpose and our legitimate interest under Article 6(1)(f) GDPR are to carry out your requested sharing action.

6. Contact by email

If you email us, we process your address, message and any details you provide to handle the enquiry. General enquiries are processed under Article 6(1)(f) GDPR, our legitimate interest in responding. Article 6(1)(b) applies where the enquiry concerns a contract or steps you request before one. Providing an email is voluntary; without contact information we may be unable to reply.

The contact mailbox uses Gmail. Google processes messages and associated technical information to deliver the email service; its services may involve processing outside the EEA. See Google’s Privacy Policy for its entities, roles and international-transfer information. Please send only information needed for your enquiry.

We retain correspondence as long as needed to resolve the enquiry and any related follow-up. Where statutory retention duties or the establishment, exercise or defence of legal claims require longer retention, the relevant material is kept for that purpose and deleted when the requirement ends. Article 6(1)(c) applies to mandatory retention and Article 6(1)(f) to legal claims.

7. External sources

Fact-source and privacy-document links open other websites only when you follow them. Those providers then receive the requests needed to display their pages and apply their own policies. Images, fonts and game scripts are served from this website; there are no third-party embeds.

8. Your rights

Subject to the GDPR’s conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on Article 6(1)(f) on grounds relating to your particular situation. If processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

Contact the controller above to exercise your rights. We cannot remotely identify or delete game records stored only in your browser; you can remove them using your browser’s site-data settings. We do not use automated decision-making producing legal or similarly significant effects. Calculating a game score is not such a decision.

You may lodge a complaint with a supervisory authority, especially in the EU member state of your habitual residence, workplace or an alleged infringement. The authority in Brandenburg is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg.

9. Provider details

Our Legal Notice is permanently available in the footer.