5.1 Server Operations and Logs

When you access the website, technically required log data may be processed (for example, IP address, timestamp, requested resource, status code, user agent) to ensure stable and secure operation.

5.2 Location Data During Gameplay

For location-based game functions (for example, proximity to waypoints), browser/device location data may be used. Location access is subject to browser and operating system permissions. Location data is not stored server-side.

5.3 GPX Upload and Game Generation

Uploaded GPX data is processed server-side to generate routes, waypoints, and quiz content. The coordinates contained are used exclusively for internal waypoint calculation and for anonymized queries to public POI data sources (Wikipedia, Nominatim).

5.4 Game State and Local Storage

Game-related data (game progress, completed waypoints, last selected difficulty) may be stored in your browser's localStorage to preserve progress between sessions. This storage resides exclusively on your device and is not transmitted to our servers.

5.5 Payment Processing (PayPal)

Payments are processed via PayPal. Payment-related data (in particular the payer's email address, transaction ID, amount, currency) is transferred to PayPal and stored by us after successful payment for accounting and tax purposes.

Recipient: PayPal (Europe) S.a r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

More information: https://www.paypal.com/de/legalhub/paypal/privacy-full

5.6 External APIs Used for Core Features

Depending on the feature used, the following external services are called server-side (no direct connection between your browser and these services):

5.7 Bot Protection (Cap.js)

To protect public forms (for example, GPX upload) against abusive automated requests, we use Cap.js. The Cap.js instance is self-hosted within our own cluster and does not share data with any third party.

5.8 Analytics (Matomo)

We use Matomo (self-hosted in our own cluster) to analyze page views and navigation patterns. Matomo is configured to set no cookies (cookieless tracking) and to anonymize IP addresses before any storage. No data is shared with third parties.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in anonymized usage statistics for service improvement).

5.9 AI-Assisted Quiz Generation(Transparency notice under Art. 50 EU AI Act)

Quiz questions, answer options, and explanatory texts are generated using AI language models provided via the OpenRouter service (USA). The inputs consist exclusively of publicly available Wikipedia texts and geographic place names — no personal user data is transmitted to the AI model.

In accordance with Art. 50 of the EU AI Act, we inform you that the quiz content is AI-generated. Wikipedia source references are provided to support factual plausibility.

5.10 Game Ratings and Content Reports

Users may optionally submit game ratings (overall score 1–5, optional sub-scores and comment) and report inaccurate quiz content. These submissions do not contain personal data (no name, no email address) and are stored server-side.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in quality assurance and improvement of game content).

5.11 Internal Email Notifications

Incoming content reports and game ratings are forwarded as internal notifications by email to the operators. We use the SMTP service of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) for this purpose. No personal user data is included in these emails.