Privacy
Last updated: 31 July 2026
Legal notice: this text describes the technical state of our measurement in full. The operator still has to complete and approve the provider identification and contact details.
Controller
The controller for data processing on zock.me is the operator of this site. You can reach us by email at contact@zock.me.
This statement covers all of zock.me — the start page as well as the minigolf game at zock.me/minigolf.
Operation and server logs
zock.me runs on our own server inside the European Union. When you open a page, the server processes technically necessary connection data (IP address, time, requested address, browser identifier) in order to deliver the page, detect faults and fend off attacks. The legal basis is Art. 6(1)(f) GDPR.
The multiplayer connection of the minigolf game uses the same server. During a round your player name and your moves are processed so that the other players can see them; once the round ends they are not kept.
Account and sign-in
You only need an account if you want to play against other people. We then store your email address, your display name, a profile picture if you upload one, and the sign-in service you used (Google or Apple, if you choose that route).
Signing in works without a password, via a link or a six-digit code sent by email. Those emails are sent on our behalf by Amazon Web Services (SES) from servers inside the European Union. The legal basis is the performance of our user relationship (Art. 6(1)(b) GDPR). You can ask us to delete your account at any time.
Audience measurement (self-hosted, without cookies)
We measure which pages and games are used so that we can improve zock.me. This runs entirely on our own server inside the European Union, using a self-hosted instance of the open-source tool Umami. No Google, no third parties, no cookies and no other access to your device. That is why zock.me works without a cookie banner.
We record: the page you opened, your language, the page type, clicks on buttons and outbound links, the step from the start page into the game, and events inside the game itself (game start, courses started and completed including stroke count and duration, end of game with the overall result, multiplayer rounds with the number of players, the settings chosen and any errors), plus the referring page, device and browser category, screen size and country of origin.
Your IP address is only used in passing, to derive the country and a daily rotating, irreversible identifier; it is never stored. Nobody — including us — can recognise you beyond the day or link visits to you as a person. Your name, your email address and your player name are never part of the measurement.
The legal basis is our legitimate interest in understanding how zock.me is used (Art. 6(1)(f) GDPR). Section 25 TDDDG does not apply because nothing is stored on or read from your device. The daily visitor key expires after 24 hours; the remaining, non-personal event data is kept for trend analysis.
You can object at any time. We automatically honour the browser signals “Do Not Track” and Global Privacy Control, or you can use the switch below. It only writes an objection marker to your browser's local storage; its sole purpose is to respect your objection. The objection applies to the whole site, including the minigolf game.
We will show the status for this browser as soon as the page has fully loaded. Without JavaScript no measurement takes place.
What is stored on your device
The audience measurement stores nothing on your device. Independently of it, a few features do store something so that they can work at all:
zock-lang (cookie and local storage, one year): your language choice.
Sign-in session (cookie, only if you sign in) plus short-lived cookies during the sign-in process: these keep you logged in.
minigolf-nick and minigolf-place (local storage): your player name and the course you last played in minigolf.
zock-stats-off (local storage): only created if you explicitly object above.
zk-internal (cookie, only during our own testing): removes our own visits from the measurement.
The legal basis for these strictly necessary entries is Section 25(2) TDDDG in conjunction with Art. 6(1)(b) or (f) GDPR.
Your rights
You have the right to access, rectification, erasure and restriction of processing, as well as data portability (Art. 15 to 20 GDPR). You can object at any time to processing based on our legitimate interest (Art. 21 GDPR) — for the audience measurement the switch above is enough.
Just write to us at contact@zock.me. You also have the right to lodge a complaint with a data protection supervisory authority.