Shadow Saloon
STAGING SYSTEM
STAGING SYSTEM
🔑 Log in 📝 Sign up

Privacy Policy

This English text is a convenience translation. In case of any discrepancy, the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Jan Fuhrmann
c/o flexdienst – #21214
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Deutschland
Email: saloon.game@outlook.de

2. Which data is collected?

This application stores only the data required to operate the game. Specifically:

2.1 During registration

  • Display name (required) – shown in the game
  • Password – stored exclusively as a hashed value (PBKDF2, 100,000 iterations)
  • Email address (optional) – used for password reset and email verification, not for advertising
  • Time of creation and time of last login

2.2 When signing in via an external service (OAuth)

When you sign in via an external service, we receive and store from the provider a user ID, a display name and – if the provider transmits it – your email address. The email is adopted as your account address and is considered confirmed because the provider has already verified it. Which data arrives per provider:

  • Google – user ID, display name, email address
  • Microsoft – user ID, display name, email address
  • Discord – user ID, username, email address
  • Steam – user ID and display name (Steam transmits no email address)

We store no further profile information (e.g. profile pictures/avatars) from the provider. The adopted email address is – like one provided during registration – used only for password reset and verification, not for advertising.

2.3 While playing

  • Game statistics per game mode (number of games played, wins, scores)
  • Lobby memberships with game states during ongoing games

Guests (players without an account) leave no persistent data – their entries are deleted when they leave the lobby.

Game replays: For every game – except the real-time games Klapperschlange, Spukstollen and Frachtgut – we store the course of the game and the game's chat as a replay. Only administrators can see replays; they are kept without a time limit. When an account is deleted, we replace its name in all replays with “Deleted user”; the names of guests stay in the replay.

2.4 Technically necessary cookies

  • shadowsaloon.auth – authentication cookie after a successful login. HttpOnly, SameSite=Lax. Valid for up to 400 days and renewed with every visit (at most once a day) – you stay signed in until you sign out.
  • shadowsaloon.external – intermediate cookie for OAuth logins. Deleted once the login is complete.
  • ssHomeView – remembers whether you want the game list on the home page in the classic view (A–Z) or grouped by game family. Only set once you switch the view. SameSite=Lax, valid for one year.
  • .AspNetCore.Culture – remembers the interface language. Set when you switch the language, open a page through an address with a language code (for example /fr/Rules), or sign in with an account that has a language stored. SameSite=Lax, valid for one year.

Signed-in devices: For each sign-in we store a session id, the way you signed in (e.g. password or Google), a short device name made of browser and operating system (e.g. “Chrome · Windows”), the time of the sign-in and the day of the last visit – no IP address and not the full browser identifier. This lets you see in your profile where you are signed in and sign out single devices. Signed-out sessions stay stored as ended so that their cookie never counts again; every session is deleted once its last visit lies more than 400 days (plus a week) back, at the latest with your account.

We use no tracking cookies, no analytics, no advertising.

2.5 Server logs

The web server logs accesses (IP address, timestamp, path). These logs are used for troubleshooting and are deleted after a maximum of 30 days.

3. Legal basis

Data processing is carried out on the basis of Art. 6 (1) lit. b GDPR (performance of a contract – the game cannot function without the data mentioned) and Art. 6 (1) lit. f GDPR (legitimate interests in stable operation).

4. Storage period

Account data is stored as long as your account exists. Statistics remain linked to your account. If you delete your account, all personal data is deleted within 24 hours. Game histories you participated in are retained in anonymized form (your name is replaced by a placeholder).

5. Your rights

You have the right at any time to:

  • request information about your stored data (Art. 15 GDPR)
  • rectification of incorrect data (Art. 16 GDPR) – you can change your display name directly in your profile
  • erasure of your account (Art. 17 GDPR) – in your profile under "Delete account"
  • data portability – in your profile under "Download my data" as a JSON export
  • withdraw consent (Art. 7 (3) GDPR) – by deleting your account
  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

6. Data sharing

We do not pass your data on to third parties. The app runs on a privately operated server. When signing in via an external service (OAuth), technically necessary communication takes place with the respective provider – in which case the provider's privacy policy additionally applies.

7. Contact

For questions about data protection, please contact:saloon.game@outlook.de

As of: October 2026

Verbinde… Verbindung verloren