Privacy Policy
1. Controller
The controller responsible for data processing on this website within the meaning of the GDPR is:
Christopher Müller
Im Hagen 21
59387 Ascheberg
Germany
yourchaos@googlemail.com
2. Hosting
This website is hosted via GitHub Pages, a service provided by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA (a subsidiary of Microsoft Corporation). When you access this website, GitHub automatically collects so-called server log files transmitted by your browser. These typically include: IP address, date and time of the request, the file requested, the amount of data transferred, the status of the request, browser type and version, operating system, and the referring page (referrer URL). This data is processed by GitHub and is not made available to us in personally identifiable form. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free and secure provision of this website). Further information on GitHub's processing is available in GitHub's Privacy Statement: https://docs.github.com/site-policy/privacy-policies/github-general-privacy-statement. Data may be transferred to the USA in the process. According to its Privacy Statement (section “International data transfers”), GitHub generally bases such transfers on the Standard Contractual Clauses of the European Commission, and GitHub is certified under the EU-U.S. Data Privacy Framework.
3. Local storage (no cookies)
PaperGames does not use cookies. To function, the site uses the browser's built-in localStorage and sessionStorage. These store, locally on your device: in-progress games, personal settings (e.g. language, board style), your best scores, and — if you sign in for the online chess feature — your Lichess access token. Games, settings and scores stay on your device and are not transmitted to us or to third parties. Only if you use the Lichess connection is the token you created sent to Lichess, so that moves can be exchanged with Lichess on your behalf (see section 4). The stored data serves solely to provide the functions you explicitly requested (resuming a game, keeping your settings, staying signed in). This storage is therefore strictly necessary, pursuant to Section 25(2) No. 2 TDDDG (Germany's Telecommunications-Digital-Services-Data-Protection Act), to provide a telemedia service you have explicitly requested. Consent is therefore not required, which is why this site does not show a cookie consent banner. You can delete this data at any time via your browser's settings.
So that the games also work without an internet connection, this website registers a service worker in your browser. On your first visit it stores the game files (pages, scripts, images) and the rules texts in the language you chose in the browser's Cache Storage on your device. These files are not sent to us or to third parties. When the website is updated, the stored files are replaced by the new version. This storage serves solely to provide the offline use you requested and is therefore strictly necessary pursuant to Section 25(2) No. 2 TDDDG. You can delete the stored files at any time via your browser's settings (for example by deleting the site data of this website).
4. Lichess (optional)
The online chess feature is optional and only activates if you explicitly choose to sign in via “Sign in with Lichess”. Doing so opens an OAuth2 connection from your browser to lichess.org; you sign in directly with Lichess, and PaperGames never receives or stores your password. The access token issued by Lichess is stored only locally in your browser (localStorage) and is used solely to exchange moves and games with Lichess's servers on your behalf. Lichess's own privacy policy exclusively governs its processing of your data: https://lichess.org/privacy. PaperGames is an independent project and is neither affiliated with, nor endorsed or authorized by, Lichess.
5. PayPal donation link
The About page offers an optional donation link to PayPal. Simply visiting that page does not transmit any data to PayPal. Only if you actively click the link or QR code and open paypal.com does PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) process your data under its own responsibility and in accordance with PayPal's privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full. The QR code itself is generated locally by this website and does not load any content from a third-party server.
6. No analytics, no advertising, no data sharing
This website uses no analytics or tracking tools, no advertising network, and no web fonts or other third-party embeds that would trigger data transfers to third parties — aside from the technically necessary GitHub Pages hosting and the connections to Lichess or PayPal described above, each of which you explicitly trigger yourself. Your data is not shared with third parties for advertising or analytics purposes. The link “Report an idea or bug” in the games only opens your own email program with a prepared message (game, version, language, browser and window size); nothing is sent until you send the email yourself. We use emails you send us only to answer you and to improve the games.
7. Your rights
To the extent personal data is processed, you have the following rights under applicable law: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). Please contact us at the email address above to exercise these rights.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, poststelle@ldi.nrw.de, https://www.ldi.nrw.de.
As of: 25 October 2026