Privacy policy

Controller

Marvin Bay

c/o Online-Impressum.de #6018, Europaring 90, 53757 Sankt Augustin, Germany

Email: contact@marvinbay.de

Hosting and server logs

This website is hosted externally by netcup GmbH in Germany. Server logs can include technical access data such as IP address, time of access, requested URL, referrer, browser, and operating system. This processing is used for secure and reliable operation. Legal basis: Art. 6(1)(f) GDPR.

Game data

Elgalf creates a random local installation ID in your browser. The server stores only a hashed form of this ID to keep one daily game state per installation and to validate guesses without revealing the daily answer to the browser.

For active and recent rounds, the server stores the puzzle ID, mode, hashed installation ID, selected answer, attempts, submitted guesses, reveal mask, and completion state so the round can be resumed and duplicate guesses can be rejected. Opaque flag URLs are short-lived and do not expose the answer in the client payload.

Completed games are additionally stored as minimal aggregate records: date, mode, win or loss, number of attempts, and timestamp. These aggregates are used for overall game statistics. Free-text entries are not stored.

Local storage

Your browser stores the local installation ID, your privacy decision, local game statistics, selector assist preference, and per-puzzle assist-mode locks. This is necessary to keep the game usable across page reloads and to prevent switching from Normal to Easy or Very Easy after a round has started.

Optional Umami analytics

With your consent, this site loads self-hosted Umami analytics. The script is not loaded before consent, honors Do Not Track, and is restricted to elgalf.marvinbay.de. Events are limited to game started, guess submitted, and game completed with mode, result, and attempt count.

The legal basis for optional analytics is consent under Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. Analytics data is deleted after no more than 90 days. You can withdraw consent using the privacy settings button on this page. Withdrawal does not affect the lawfulness of processing before withdrawal.

Fonts and external requests

Fonts are served locally by this application. Flag files are copied into the project at build time and are not hotlinked from Wikimedia at runtime.

Clipboard sharing

The share button writes a result summary to your clipboard only when you click it. The generated text contains the game name, date or practice label, score, an emoji result grid, and the Elgalf URL.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. You also have the right to lodge a complaint with a supervisory authority.