Privacy Policy
1. Controller
The controller responsible for data processing on this website within the meaning of the GDPR is:
Christopher Müller
Im Hagen 21
59387 Ascheberg
Germany
yourchaos@googlemail.com
2. Hosting
This website is hosted via GitHub Pages, a service provided by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA (a subsidiary of Microsoft Corporation). When you access this website, GitHub automatically collects so-called server log files transmitted by your browser. These typically include: IP address, date and time of the request, the file requested, the amount of data transferred, the status of the request, browser type and version, operating system, and the referring page (referrer URL). This data is processed by GitHub and is not made available to us in personally identifiable form. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free and secure provision of this website). Further information on GitHub's processing is available in GitHub's Privacy Statement: https://docs.github.com/site-policy/privacy-policies/github-general-privacy-statement.
3. Local storage (no cookies)
PaperGames does not use cookies. To function, the site relies solely on the browser's built-in localStorage and sessionStorage. These are used to store, locally on your device: in-progress games, personal settings (e.g. language, board style), your best scores, and — if you sign in for the online chess feature — your Lichess access token. This data never leaves your device and is never transmitted to us or to any third party; it exists solely to provide the functionality you explicitly requested (resuming a game, keeping your settings, staying signed in). This storage is therefore strictly necessary, pursuant to Section 25(2) No. 2 TDDDG (Germany's Telecommunications-Digital-Services-Data-Protection Act), to provide a telemedia service you have explicitly requested. Consent is therefore not required, which is why this site does not show a cookie consent banner. You can delete this data at any time via your browser's settings.
4. Lichess (optional)
The online chess feature is optional and only activates if you explicitly choose to sign in via “Sign in with Lichess”. Doing so opens an OAuth2 connection from your browser to lichess.org; you sign in directly with Lichess, and PaperGames never receives or stores your password. The access token issued by Lichess is stored only locally in your browser (localStorage) and is used solely to exchange moves and games with Lichess's servers on your behalf. Lichess's own privacy policy exclusively governs its processing of your data: https://lichess.org/privacy. PaperGames is an independent project and is neither affiliated with, nor endorsed or authorized by, Lichess.
5. PayPal donation link
The About page offers an optional donation link to PayPal. Simply visiting that page does not transmit any data to PayPal. Only if you actively click the link or QR code and open paypal.com does PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) process your data under its own responsibility and in accordance with PayPal's privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full. The QR code itself is generated locally by this website and does not load any content from a third-party server.
6. No analytics, no advertising, no data sharing
This website uses no analytics or tracking tools, no advertising network, and no web fonts or other third-party embeds that would trigger data transfers to third parties — aside from the technically necessary GitHub Pages hosting and the connections to Lichess or PayPal described above, each of which you explicitly trigger yourself. Your data is not shared with third parties for advertising or analytics purposes.
7. Your rights
To the extent personal data is processed, you have the following rights under applicable law: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). Please contact us at the email address above to exercise these rights.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, poststelle@ldi.nrw.de, https://www.ldi.nrw.de.