Privacy Policy

1. Controller

The controller responsible for data processing is:

[TO COMPLETE: first and last name or company]
[TO COMPLETE: street and number]
[TO COMPLETE: postal code and town], Switzerland
Email: datenschutz@wappenalbum.ch

2. Which personal data we process

Depending on how you sign in and play, we process:

• Account data. When you sign in via Google or Facebook, the chosen provider gives us your name, your email address and — if available — your profile picture. If you sign in as a guest, an anonymous account is created with no name or email address.
• Profile and game-state data. Your chosen home (country, canton, municipality), your collector’s album, your Taler balance, points and leaderboard ranking, trade offers, opened packs, activity history and an optional personal coat of arms.
• Technical data. An encrypted sign-in cookie (session token) that keeps you logged in. Server and access data arise for technical reasons at our hosting providers (see section 6).

We use no analytics, advertising or tracking services and embed no social-media plugins. Fonts are served locally, so no data flows to third parties when the page loads.

3. Purposes and legal bases

We process this data in order to:

• sign you in and keep you signed in;
• provide the game — album, packs, atlas, trading post, leaderboards and the Taler economy;
• prevent abuse and operate the services securely.

The legal basis is the performance of the usage relationship with you and our legitimate interest in a secure, functioning game. Signing in is voluntary and at your own initiative.

4. Sign-in via Google and Facebook

If you use “Continue with Google” or “Continue with Facebook”, you are redirected to the respective provider and sign in there. We then receive only the profile data mentioned above — no password. The privacy terms of the respective provider (Google LLC or Meta Platforms Ireland Ltd.) apply in addition.

5. Cookies

We use exclusively a technically necessary sign-in cookie. It contains a signed token that keeps you logged in and serves no analysis of your behaviour. Without this cookie, signing in is not possible.

6. Hosting, processors and disclosure abroad

To operate the service we use carefully selected providers that process data on our behalf and on our instructions:

• Vercel Inc. — hosting and delivery of the application.
• Neon Inc. — database in which account and game-state data are stored.

In doing so, data may be transferred to countries outside Switzerland and the EEA — in particular to the USA. We ensure an adequate level of protection through appropriate safeguards (including EU standard contractual clauses).

7. Retention period

We retain your data for as long as your account exists and it is necessary for the stated purposes. Thereafter it is deleted or anonymised, unless statutory retention obligations apply. We may periodically remove inactive guest accounts.

8. Your rights

Within the scope of applicable law, you have the right to information, rectification, deletion and restriction of processing, as well as to data portability and objection. To exercise them, contact the address named in section 1. You also have the right to lodge a complaint with the competent supervisory authority (in Switzerland: the Federal Data Protection and Information Commissioner, FDPIC).

9. Data deletion

You can request the deletion of your account and the associated data at any time. To do so, send us an email to datenschutz@wappenalbum.ch with the subject “Delete account”. We delete your account and the associated profile and game-state data within 30 days, unless statutory obligations apply. If you signed in via Facebook, you can additionally revoke access in your Facebook settings under “Apps and Websites”.

10. Changes to this policy

We may amend this policy when the application or the legal situation changes. The version published here at the relevant time prevails.

11. Contact

For data protection questions you can reach us at datenschutz@wappenalbum.ch.