Controller

Libaty GmbH
Am Krummen Graben 23
63150 Heusenstamm
Germany
Email: info at libaty.com

Hosting

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. On every request Vercel processes technically necessary data: your IP address, date and time, the requested address, the referrer and your browser's identifier. Without this data the site cannot be delivered or protected against abuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in running the site securely). Vercel is certified under the EU-US Data Privacy Framework, and a data processing agreement with standard contractual clauses applies as well.

Visitor statistics with Ahrefs

To see which pages get read, we use Ahrefs Web Analytics (Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581). Ahrefs Web Analytics sets no cookies, stores nothing on your device and builds no profiles. It records the page viewed, the referrer, country, device type, browser and operating system; the IP address is used only briefly to determine the country and is not stored. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the site).

Google Analytics – only with your consent

If you choose “Accept” in the notice at the bottom of the page, the site loads Google Analytics 4 (Google Ireland Limited, address as above). Google Analytics then sets the cookies _ga and _ga_04QPQDN883, which are kept for up to two years, and records how you use the site: pages viewed, time spent, where you came from, approximate location, device and browser. Google Analytics 4 does not store IP addresses. The data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. If you decline, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future; the cookies are deleted when you do.

Storage in your browser

The site keeps a few entries in your browser's local storage. They stay on your device and are never sent anywhere:

s66consent – your choice about Google Analytics
s66lang – the language you last chose
s66cfg – your game settings, such as bot level and deck
s66stats – your game statistics

These entries are needed for the features you use (§ 25(2) no. 2 TDDDG). You can delete them at any time in your browser settings.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)). Just send us an email.

You can also lodge a complaint with a data protection supervisory authority, for example the one where you live.

Last updated: 26 September 2026