Privacy

As of October 2026. Juballo works without an account, without ads and without cookies. Saved games stay on your device.

Controller

Moritz Steinbach, Edelweißstraße 26a, 82110 Germering, Germany. Email: [email protected]

Hosting and delivery

The website is delivered through Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you open a page, Cloudflare processes technically necessary data such as IP address, time, page and browser identification to deliver the page and protect it from attacks. The legal basis is our legitimate interest in a secure and fast website (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply.

Audience measurement

We use Cloudflare Web Analytics to understand which pages are visited and where visitors come from (for example a search engine or a direct visit). It sets no cookies, stores nothing on your device and builds no profiles of individuals. Only aggregated figures such as page views, referrer, country, device type and load times are evaluated. The legal basis is our legitimate interest in improving the website (Art. 6 (1) (f) GDPR).

Usage analytics in the app

To improve Juballo, we record how the score sheets are used: which game is started, how far a game gets, how long it takes, how many people play and which features are opened (for example dice, rules or sharing). Language, device type, browser and screen width are added. Player names, scores and typed text are never sent.

Without your consent, nothing is stored on or read from your device for this. To count visits, our service provider forms a hash from IP address and browser identifier that changes daily; the IP address is discarded afterwards. The legal basis is our legitimate interest in improving the app (Art. 6 (1) (f) GDPR).

Only if you agree ("Help make Juballo better"), Juballo stores a random ID in your browser's local storage. This shows us whether people come back and how use develops over weeks. The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw it at any time under "More → Usage analytics"; the ID is then deleted.

The data is passed through an endpoint of this website at Cloudflare to PostHog (PostHog Inc., USA) and stored in its EU data centre in Frankfurt am Main. A data processing agreement is in place with PostHog. The data is deleted once it is no longer needed for analysis, after two years at the latest.

Local storage in your browser

Saved games, player names and avatars are stored only on your device, in your browser's database (IndexedDB). Settings such as the light or dark theme, sound on or off and the answers from the introduction (what you use Juballo for, your games, your group) are kept in the browser's local storage (localStorage). This data is not sent to us or to anyone else.

You can delete it at any time: with "New game" in a score sheet, or in your browser's settings for this website. "Saved game → Save as file" only creates a file when you choose to.

No cookies are set. An ID for usage analytics is only stored with your consent (see above). Fonts are served by this website itself.

Feedback

When you use the feedback form, the following is sent: the type you chose (request, bug, game suggestion), your text, the page, the game, the language and technical details about your device (browser identification, window size, chosen theme). An e-mail address is optional.

Cloudflare Turnstile is used to protect the form from automated submissions. Cloudflare processes technical data from your browser for this. Turnstile is only loaded once you open the form.

The message is filed through a service at Cloudflare as an entry (issue) in this website's non-public project repository on GitHub (GitHub, Inc., USA, certified under the EU-US Data Privacy Framework). The email address is not included in that entry; it only notes that a follow-up question is possible. The legal basis is your consent by sending the form (Art. 6 (1) (a) GDPR). Entries are deleted once they have been handled and are no longer needed.

Offline use

So that a running game keeps working without internet, a service worker stores the pages and program files in your browser's cache. No personal data is transferred for this.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can withdraw consent at any time. Write to [email protected]. You can also lodge a complaint with a data protection authority; the authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA).