Datenschutzerklärung

1. Verantwortlicher / Controller

Leon Breitenborn, [[STRASSE HAUSNUMMER]], [[PLZ]] Berlin, Deutschland. E-Mail: [[KONTAKT-E-MAIL]].

This notice explains which personal data is processed when you use www.chordata-systems.com and play.chordata-systems.com, and on what legal basis.

2. Hosting und Server-Logs (Cloudflare)

Both sites are served by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) via Cloudflare Pages. Cloudflare processes connection data (IP address, user agent, requested URL, timestamp) to deliver the site and protect it from attacks. Cloudflare acts as a processor under its Data Processing Addendum; transfers to the USA are covered by the EU standard contractual clauses and the EU-US Data Privacy Framework.

Legal basis: Art. 6 (1) (f) GDPR — my legitimate interest in a secure, fast delivery of the site.

3. Cloudflare Web Analytics

I use Cloudflare Web Analytics, a cookieless, privacy-focused measurement tool. It loads a small script (beacon.min.js) and records aggregated page views, referrers and performance metrics without storing cookies, fingerprinting or tracking you across sites. The IP address is not stored.

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in understanding how the site is used. No consent banner is required because no identifiers are stored on your device.

4. Kontaktformular (Cloudflare Turnstile, Resend)

When you use the contact form, your name, e-mail address and message are sent to a Cloudflare Pages Function and forwarded to me by e-mail through Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Nothing is stored in a database; the message exists only as an e-mail in my inbox and in Resend’s delivery logs for a short period.

Before sending, Cloudflare Turnstile checks that the request comes from a human. Turnstile loads from challenges.cloudflare.com and may process your IP address and browser signals for that purpose.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual communication at your request) and Art. 6 (1) (f) GDPR (spam protection). Messages are kept as long as needed to handle your enquiry, then deleted.

5. Child of Anon (play.chordata-systems.com)

The game runs entirely in your browser. Progress and preferences are kept in your browser’s localStorage/sessionStorage and never sent to me. The online VS mode opens a WebSocket connection to a Cloudflare Worker that relays your chosen display name and in-game positions to your opponent for the duration of a match; nothing is stored after the match ends.

Legal basis: Art. 6 (1) (b) GDPR — providing the game you chose to play.

6. Keine Cookies / No cookies

This site sets no cookies of its own. Cloudflare may set a technically necessary cookie (e.g. __cf_bm) when protecting the site from bots; it expires after 30 minutes and is not used for tracking.

7. Ihre Rechte / Your rights

You have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing of (Art. 18), port (Art. 20) and object to the processing of (Art. 21 GDPR) your personal data, and to lodge a complaint with a supervisory authority — for Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

To exercise these rights, write to [[KONTAKT-E-MAIL]].