Privacy Policy

1. Who is responsible

The controller within the meaning of the GDPR is the operator named in the Imprint. You can reach them with the contact details given there, including for any privacy question.

2. The short version

Ludo has no accounts, no ads and no analytics or tracking. You only enter a name that you choose yourself. We do not sell personal data and we do not build profiles.

3. What we process, and why

The legal basis is Art. 6 (1) (b) GDPR, as far as it is needed to provide the game you asked to play, and otherwise Art. 6 (1) (f) GDPR, our legitimate interest in operating and securing the service.

• Player name: the name you type (or "Guest") is sent to the game server when you create or join a room. Everyone in the room sees it, and if the room is public, the host's name is shown on the discovery page. Please do not use your real name or other personal data if you would rather not share it.
• Game data: room code, seat and color, ready status, room settings, dice rolls and moves. This is needed to run the game and is kept in the server's memory only, not in a database. A room is deleted shortly after its last player leaves (after at most five minutes), and when a rematch replaces it.
• Technical data: when you visit the site or connect to a game, your IP address and request data (such as browser and time of the request) are processed by the web server and the connection to the game server, in order to deliver pages, keep the real-time connection running, and protect against abuse. Such data may appear temporarily in server logs.

4. Cookies and browser storage

Ludo stores the following in your browser. It is only used to provide the features you asked for, and contains no tracking identifiers:

• Cookie ludo_lng (up to one year): remembers the language you picked.
• Local storage ludo-theme: remembers your light, dark or system theme choice.
• Local storage ludo-sound: remembers whether you turned the sound effects off.
• Session storage ludo-player-name: pre-fills your name. It is cleared when you close the tab.
• Session storage ludo-player:<room code>: lets you reclaim your seat after a reload. It is cleared when you leave the room or close the tab.

5. Why there is no cookie banner

The storage above is strictly necessary to provide functions you explicitly use, such as switching the language or theme, or rejoining a room after a reload (§ 25 (2) no. 2 TDDDG). We use no advertising, analytics or other tracking technologies, so there is nothing to ask consent for.

6. Fonts and third parties

Fonts are downloaded when the site is built and served from our own domain, so your browser does not contact Google when you visit. We do not embed third-party scripts, trackers or social media widgets. The GitHub link leaves this site; GitHub's own privacy policy applies once you follow it.

7. Sharing and hosting

The site and game server run on infrastructure operated by the operator. We do not sell or otherwise pass on personal data. Data is only disclosed where the law requires it, for example to authorities.

8. Retention

Game data lives in memory and disappears with the room or when the server restarts. Log data, if any, is kept only as long as needed for security and troubleshooting. Browser storage stays on your device until it expires or you clear it.

9. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can clear your browser storage at any time. Because games are not tied to an account, we may not be able to identify data about you without extra information from you.

You also have the right to lodge a complaint with a data protection supervisory authority.

10. Children

Ludo is not aimed at children and we do not knowingly collect data from them. Please do not enter personal data of others as a player name.

11. Changes

We may update this policy when the service changes. The date at the top shows when it was last updated.