Skip to content

Privacy Policy

For this website, the Dussel app and the web game at games.dussel.vcri.io. In short: no ads, no tracking, no cookies for visitors, no account. Whatever is still technically required is listed here.

Last updated: November 13, 2026

1. Controller

Jan-Derek Vicari
VCRI
Herderstr. 12
24116 Kiel
Germany
Email: support@vcri.io

More details in the legal notice.

2. The short version

  • We show no ads and use no tracking or analytics tools – neither on this website nor in our apps.
  • Visitors to this website receive no cookies. Fonts and images are served from our own server, not from Google or other third parties.
  • Every service we use is listed in section 3.
  • Dussel needs no account. Your player name and settings stay on your device.
  • We do not sell or rent personal data.

3. Hosting and services we use

Cloudflare (hosting, domain, security)

This website, our domain vcri.io and the Dussel game servers run on Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. We use:

  • Cloudflare Workers – the program that serves the pages and the network that delivers them encrypted (HTTPS), including protection against attacks and overload.
  • Cloudflare D1 – the database holding this website’s texts. Location: European Union.
  • Cloudflare R2 – storage for images uploaded through the editing area. Location: European Union.
  • Cloudflare Images – resizes uploaded images for display.
  • Cloudflare Workers KV – stores sign-ins to the editing area (editors only, not visitors).
  • Cloudflare Registrar and DNS – registration and name resolution of the domain.
  • Cloudflare Email Routing – forwards email sent to support@vcri.io to our mailbox.

When you visit the website, Cloudflare processes technically necessary connection data: IP address, time, requested address, amount of data transferred, browser type and operating system, and the address of the previously visited page if your browser sends it. This is needed to deliver the site and protect it against abuse. We do not analyze access logs ourselves and do not create visitor profiles.

The legal basis is our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare (Art. 28 GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses also apply to any transfers to the USA. See Cloudflare’s privacy policy for details.

Content management

We manage the content with the open-source content management system EmDash. It runs entirely in our own Cloudflare account; no data is sent to its makers or other third parties.

Fonts

This website’s fonts (Inter, Bebas Neue, Gochi Hand) are hosted on our own server. No connection to Google Fonts or other font providers is made when you visit.

What we don’t use

No analytics or statistics services (such as Google Analytics), no ad networks, no embedded videos, maps or social media buttons, no newsletter and no contact form. Links to other sites (such as the App Store) are plain links; no data flows until you click them.

Cookies

Visitors to this website receive no cookies. A technically necessary session cookie is set only when someone signs in to the editing area (Section 25(2) TDDDG).

4. Contacting us by email

When you write to us, we process your address and your message to handle your request (Art. 6(1)(b) or (f) GDPR). We delete the message once it has been dealt with, unless statutory retention obligations apply.

5. Dussel (app and web game)

This section applies to the “Dussel” iPhone app and the web game at games.dussel.vcri.io.

No account, no tracking

Dussel contains no ads and no analytics or tracking SDKs, sets no cookies and needs no user account. We do not sell data or share it with third parties for advertising. Playing against bots works fully offline; no data is transmitted.

On your device

Your player name, your settings (sound, language, rules) and small progress hints are stored only locally on your device (app or browser storage) and are not sent to us. To delete them, delete the app or clear the website data for games.dussel.vcri.io in your browser.

Online play

When you play online, the app connects to our game server (also on Cloudflare). It transmits:

  • the player name you chose,
  • your moves,
  • chat messages you write at the table.

We forward this data in real time to the other players at your table. Chat messages are not stored. So that a game can continue after a dropped connection, the table remembers player names and the score. A table nobody has used for 30 days is deleted along with all its data. You don’t have to use your real name – a nickname is fine.

To establish the connection, Cloudflare processes your IP address; we do not store it. The legal basis is providing the game you are using (Art. 6(1)(b) GDPR).

Anonymous statistics

To see how busy things are, we count how many tables and players are online, how many games are started and which countries people play from. The country comes from the country code Cloudflare determines for the connection. We only store numbers per day and country – no IP addresses, no names, no device identifiers. Individual people cannot be identified.

Abuse protection

To prevent spam, we limit how often a connection sends messages or joins the quick-game queue. These counters are kept only briefly in the server’s memory and are not stored permanently.

Invitations

You send invite links via your device’s share sheet. You choose the service (e.g. Messages, WhatsApp, Signal); its privacy terms apply.

Game Center (optional, iPhone only)

If you are signed in to Apple Game Center, Dussel can report your wins to Apple’s leaderboard. Apple processes this under its own privacy policy; your Game Center name and score are visible to others there. We do not receive any personal data. The app works the same without Game Center.

Purchases and data from Apple

Purchases and payment are handled entirely by Apple’s App Store; we receive no payment data. If you agreed in your device settings to share analytics with app developers, Apple provides us with aggregated, anonymized figures, for example about installs or crashes. We cannot identify individuals from them.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). A simple email to support@vcri.io is enough.

You may also lodge a complaint with a data protection supervisory authority, for example the Independent Centre for Privacy Protection Schleswig-Holstein (datenschutzzentrum.de).

7. Children

Dussel is not directed at children under 13. We do not knowingly collect personal data from children.

8. Changes

We update this policy when our services or the law change. The version published here applies.