Privacy policy of this website

Last updated: 21 August 2026

Translation for convenience. Only the German version is legally binding: read the German original. Where the two differ, the German text prevails.

This policy covers this website. The Snaky app has its own: privacy policy of the app. Saved games, rankings, accounts and advertising are covered only there.

Controller

Peter Bagaric, Martin-Luther-Str. 6, D-85567 Grafing, Germany
snaky@snakyapp.com
Further details in the imprint.

In short

This website is a static site. It sets no cookies for analytics or advertising and embeds no tracking pixels, analytics services or ad networks. Exactly one thing is loaded from an external server: the Cloudflare Turnstile check on the two pages that carry forms (contact and Creator Corner). It keeps automated bulk submissions out and is therefore necessary to operate those forms; no consent banner is required for it. On every other page nothing is loaded from outside.

Hosting and server logs

The site is delivered by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary connection data, in particular your IP address, the date and time, the address requested, the amount of data transferred and details of your browser and operating system. Without this data a page cannot technically be delivered.

The legal basis is Art. 6(1)(f) GDPR: the legitimate interest in secure and reliable operation. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. As Cloudflare is based in the USA, a transfer to a third country may take place; it is covered by the European Commission’s standard contractual clauses.

Cloudflare may set technically necessary cookies to fend off automated access. These serve security only and are not used to analyse your behaviour.

Getting in touch by email

If you write to us, we process what you tell us in order to deal with your request (Art. 6(1)(f) GDPR, or (b) for contractual matters). We do not pass it on and delete it once the matter is settled, unless statutory retention periods apply.

Contact form and Creator Corner

There are forms on contact and in the Creator Corner. What you enter there is not stored in a database: it is assembled straight into an email to snaky@snakyapp.com and not retained anywhere else afterwards. The message then sits in our mailbox and is subject to the same rules as an email you write to us directly.

What is processed:

• Contact form: your name, your email address and your message. We need the address in order to reply.
• Creator Corner: the name to appear alongside the submitted level in the app, and the level itself (clue, lead word, words, grid, language, difficulty). No email address is asked for here — a submission requires no contact details at all.

The legal basis is Art. 6(1)(f) GDPR. For the Creator Corner, Art. 6(1)(a) GDPR applies in addition: the name you submit appears in the app if the level is published. Submission is voluntary, and you can withdraw your consent for the future at any time with a message to snaky@snakyapp.com.

Cloudflare Turnstile

Both forms are protected against automated submissions by Cloudflare Turnstile. Turnstile checks whether the input comes from a human being and processes technical characteristics of your browser as well as your IP address for that purpose. Turnstile is expressly meant as an alternative to conventional captchas: it sets no puzzles, builds no usage profile and, according to the provider, does not use the data for advertising. The legal basis is Art. 6(1)(f) GDPR — without this protection the forms would be open to bulk submissions.

Sending via Cloudflare Email Sending

The email produced from the forms is delivered via Cloudflare Email Sending, using forms.snakyapp.com as the sender domain. Cloudflare processes the contents of the message as a processor under Art. 28 GDPR. The standard contractual clauses named above cover the transfer to the USA.

You are free to skip the forms and write to snaky@snakyapp.com directly instead. Turnstile and Email Sending are then not involved at all.

Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object to processing based on legitimate interests (Art. 21). A message to snaky@snakyapp.com is enough.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority here is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.

Deleting your player account

You delete an account in the app yourself, and fastest — how it works and what is removed is described under deleting your account and data.

Changes

We adapt this policy when the website changes. The version published here is the one that applies.