Privacy policy

This English version is a courtesy translation. The German version is the legally binding one.

1. Controller

Mathias Krömer
Karl-Marx-Str. 31
15741 Bestensee
Email: game.lists.free@gmail.com

2. What this is about

"Kaso's Gamelist's" is a website where members keep shared game lists (suggest games, vote, plan sessions). Without an account only the start page and the login page are visible.

3. Which data we process and why

Account: the name you choose (a pseudonym is enough), a password hash (the password itself is never stored), a security question of your choice with a hash of the answer for recovery, your chosen language, and the time of creation and last login. Purpose: login and access protection. Legal basis: Art. 6 (1) (b) GDPR (use of the service).
Profile picture (optional): If you upload a profile picture, it is stored in the database (cropped square and reduced in size) and is only visible to logged-in people with whom you share at least one list. You can remove it at any time; it is deleted with your account. Legal basis: consent (Art. 6 (1) (a) GDPR). Please only upload pictures you have the rights to.
Content: game suggestions, votes (likes/dislikes), events with participant lists, lists and memberships. These are visible to the members of the respective list, including your name. Purpose and legal basis as above.
Session cookie: A technically necessary cookie keeps you logged in (up to 30 days). It contains no advertising or tracking identifier. In addition, your browser stores locally the list you opened last, the chosen view and language, and the name you used last. This information does not leave your device.
Connection data: Your IP address is technically required when you visit. The application does not write access logs. To protect against abuse (limiting requests and failed attempts) it keeps IP addresses in memory only briefly. The server operator may briefly log connection data for technical reasons; it is deleted after 7 days at the latest. Legal basis: Art. 6 (1) (f) GDPR (security and stability).
Discord (optional): If you link your Discord account, we store your Discord ID so that the bot can assign votes and events to your account and mention you. Legal basis: consent (Art. 6 (1) (a) GDPR), which you can withdraw by deleting the link or your account.
Reports: If you send a report ("Report a problem"), we store your name and the text until it has been handled.

4. Recipients and third-party services

Hosting: netcup GmbH, Karlsruhe, Deutschland. A data processing agreement (Art. 28 GDPR) exists with the provider.
Game data: Search terms and game IDs are sent from the server to IGDB (Twitch Interactive, Inc., an Amazon company, USA) and the Steam store (Valve). No user data is transmitted.
Images: Our server loads covers and screenshots and delivers them itself. Your browser does not connect to IGDB or Steam for this.
Videos: Only if the operator has enabled ads with YouTube videos does your browser connect to youtube-nocookie.com (Google). Your IP address is transmitted in that case.
We do not sell data and do not pass it on for advertising purposes.

5. Storage period

As long as your account exists. If you delete it, the account, votes, memberships, profile picture and Discord link are removed. Your game suggestions and events remain without your name ("Deleted account"). Lists in which you were alone are deleted. In backups the data may persist for up to 14 more days.

6. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15 to 21 GDPR). In your account you can download all your data, change your name and delete your account. For anything else write to game.lists.free@gmail.com. You can also lodge a complaint with a data protection supervisory authority, e.g. the state data protection authority responsible for your place of residence.

7. Security

The connection is encrypted with HTTPS. Passwords and answers to security questions are stored only as hashes. Access to the administration is restricted to the operator.

8. Age

Use is intended for people aged 16 and over.

Last updated: 08/10/2026