heimatliga.lol
DE

Privacy Policy

Short version: no account, no advertising trackers, no stored IP addresses.

This is a courtesy translation. The German version is the legally binding one; where the two differ, the German text prevails.

1. Controller

Name, address and email as in the imprint. See the imprint.

2. Voting: the IP address as a hash

Counting one vote per connection requires connections to be distinguishable. What is stored for that is not an IP address but a SHA-256 hash formed with a secret salt. The address cannot be recovered from that value, and changing the salt invalidates every existing hash.

  • Purpose: preventing multiple voting, keeping the result meaningful.
  • Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a vote that cannot be manipulated.
  • Stored: the hash, the chosen district, and when it was first set and last changed.
  • Retention: until the vote is changed or the poll ends.

For the “X online” figure a second, separately salted hash is stored with a timestamp. It is only counted, never analysed.

3. Bot protection: Cloudflare Turnstile

An invisible Cloudflare Turnstile check (Cloudflare, Inc., USA) runs before a vote is accepted. Technical details of your browser and your IP address are transmitted to Cloudflare in the process. Cloudflare states that it does not build profiles for Turnstile and does not use the data for advertising.

  • Legal basis: Art. 6(1)(f) GDPR — protection against automated access.
  • Third-country transfer: USA, on the basis of the standard contractual clauses and/or the EU-US Data Privacy Framework.

4. Payment: Stripe

Princely titles are processed through Stripe (Stripe Payments Europe Ltd., Ireland). Card details are entered only at Stripe; heimatliga.lol never sees them. From the payment we receive only what the entry and the bookkeeping need: transaction reference, amount, time, status, and the billing address you entered.

  • Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (statutory retention duties for tax purposes).
  • Retention: payment records until the statutory retention periods expire (generally 10 years).

Stripe's own privacy notice: stripe.com/privacy.

5. Public entries

A prince's handle or address is publicly visible — that is the point of the entry. It also stays visible in the line of succession after the throne has moved on. On request we remove an entry from public display.

6. Hosting and server logs

The site runs at enter host, e.g. Vercel Inc., USA. Technically necessary log data (IP address, time, requested address, user agent) is produced there on every request. Legal basis: Art. 6(1)(f) GDPR; retention according to the host's policy.

The voting data sits in a Postgres database at enter database provider and region, e.g. Neon, EU.

7. No tracking cookies

No advertising or analytics cookies are set. Your browser's localStorage only records whether you want the site light or dark. That setting never leaves your device.

8. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a supervisory authority.

One note for honesty's sake: for access to or erasure of your vote we can only identify you through the hash of the connection you are on. From a different connection the vote cannot technically be attributed to you — which is exactly the price of not storing IP addresses.

9. Changes

If the processing changes, this notice changes. Last reviewed: enter the date of the last review.