1. Controller
Next Round GbR
Schellingstraße 15
07548 Gera
Germany
Represented by Nicolas Brechlin and Thorben Datz
Email:
nextround67@gmail.com
2. Scope
This Privacy Policy applies to the NextRound website, web app and mobile app. NextRound is a party and gaming application with multiplayer lobbies, optional user accounts and optional premium features.
We do not sell personal data. We do not use advertising SDKs, Google Analytics, Firebase Analytics, Crashlytics, Sentry, Meta Pixel, TikTok Pixel or comparable analytics and advertising services.
3. Accessing the Website
Our website is provided through GitHub Pages. When you access it, technically necessary access data is processed, in particular your IP address, date and time, requested file or page, amount of data transferred, browser type, operating system and, where applicable, the previously visited page.
Processing serves to provide, secure and maintain the stability of the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.
Provider: GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. Further information: GitHub Privacy Statement.
4. User Account and Gameplay
Use Without an Account
Free use is generally possible without registration. In this case, we process your chosen player name as well as technically necessary session and lobby data to the extent required for the relevant game round.
User Account
An account is required for certain features, in particular premium features and use across multiple devices. For this purpose, we process in particular your email address, authentication data, profile settings as well as premium and subscription status.
The purpose is to provide and manage the account and to assign features and premium access. The legal basis is Article 6(1)(b) GDPR.
Multiplayer, Lobbies and Statistics
We process player names, lobby codes, player and session information, votes, scores, game-related assignments and round results. Processing serves to create, run and synchronize game rounds as well as to display results and game statistics. The legal basis is Article 6(1)(b) GDPR.
Your player name is visible to other participants in the same lobby. Therefore, do not use a name containing sensitive personal information.
Feedback and Technical Data
If you send feedback, we process the text you enter and, if you are logged in, the association with your account. This serves to fix errors, evaluate suggestions and improve NextRound. The legal basis is Article 6(1)(f) GDPR.
For operation, stability, error analysis and prevention of misuse, we may process IP addresses, device information, access times and server logs. The legal basis is Article 6(1)(f) GDPR.
5. Base44 Platform Provider
The web app and mobile app are technically operated via the Base44 platform. Base44 provides authentication, database and backend services in particular, and processes data on our behalf as a processor pursuant to Article 28 GDPR. The basis is Base44's Data Processing Agreement, which forms part of its Terms of Service.
Base44 is operated by the Base44/Wix entity responsible for the respective Base44 services. Base44's servers are located in the United States. According to its published subprocessors list, Base44 uses subcontractors for, among other things, data storage, hosting, server operations, media hosting, email delivery and technical logging.
Further information: Privacy Policy, DPA and Subprocessors List.
6. Sign in with Google
You may voluntarily sign in with Google Sign-In where this login method is available. You will be redirected to Google. Google provides us with the information required for login, in particular your email address and an account identifier. We do not receive your Google account password.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose is to create and sign in to a user account. The legal basis is Article 6(1)(b) GDPR.
Google also processes data under its own responsibility as part of the login process. Privacy information: Google Privacy Policy .
7. Payments and Premium Subscriptions
Website Purchases via Stripe
Website subscriptions are processed through Stripe. Stripe processes payment method data, name, email address, billing address, amount and transaction data in particular. We do not receive complete payment data, but only the information required to process the contract, enable premium access and manage subscriptions, in particular transaction and subscription status.
Provider: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.
The purpose is payment processing, subscription management and fraud prevention. The legal basis is Article 6(1)(b) GDPR; where Stripe processes data for fraud prevention, Article 6(1)(f) GDPR may also apply. Privacy information: Stripe Privacy Policy .
Android Purchases via Google Play
Purchases in the Android app are processed through Google Play Billing. The purchase process takes place with Google. We receive the purchase identifier and the subscription status in order to enable premium access and check the subscription period.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Article 6(1)(b) GDPR.
Future iOS Purchases
If an iOS version is offered, purchases will be processed through Apple. The provider will then be Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. This Privacy Policy will be updated before an iOS purchase option becomes available.
8. Storage on Your Device
We use technically necessary storage, in particular session identifiers for login, data relating to the current lobby and settings such as language or display preferences. This storage is required to provide the service expressly requested by you. The legal basis is Section 25(2)(2) TDDDG.
Should we use non-essential cookies or comparable technologies in the future, we will obtain any required consent in advance.
9. Recipients and Third Countries
We use the following recipients in particular:
- GitHub, Inc. for providing the website in the United States
- Base44 or the responsible Base44/Wix entity for backend, database and authentication in the United States
- Stripe Payments Europe, Limited for website payments in Ireland
- Google Ireland Limited for Google Sign-In and Google Play Billing in Ireland
- Apple Distribution International Ltd. only for future iOS purchases in Ireland
- Authorities and courts where legally required
Some processing takes place outside the European Union or European Economic Area, in particular in the United States through Base44 and GitHub Pages. Base44 identifies adequacy decisions, EU Standard Contractual Clauses pursuant to Commission Implementing Decision (EU) 2021/914 and, where applicable, the EU-US Data Privacy Framework as transfer mechanisms.
Base44 identifies subprocessors in the United States, Germany, the United Kingdom and Israel. The European Commission has issued adequacy decisions for the United Kingdom and Israel. In the case of transfers to the United States, residual risks may remain despite appropriate safeguards.
10. Storage Periods
- User account and profile settings: until the account is deleted
- Game statistics: until the account is deleted
- Lobby and session data: up to 30 days after the end of the lobby
- Feedback: no longer than 12 months
- Premium and subscription status: until the end of the contract; thereafter only where legally required
- Invoice and accounting data: 10 years where tax or commercial-law obligations apply
- Server logs: generally 30 days
Where statutory retention obligations prevent deletion, processing will be restricted for the duration of the obligation and the data will then be deleted.
11. Account and Data Deletion
You can request deletion of your account in the profile section or send an email with the subject line “Account Deletion” and your registered email address to nextround67@gmail.com. We process requests without delay and generally within one month.
When an account is deleted, the email address, authentication data, player name, profile settings, associated game statistics and associated feedback are deleted in particular, unless legal obligations prevent this.
An active subscription is not automatically cancelled when the account is deleted. Website subscriptions must be cancelled via the cancellation button on the website or in the designated profile section. Google Play subscriptions must be cancelled through subscription management in the Google Play Store.
Base44 creates automatic backups. Data from accounts that have already been deleted may remain in these backups until the respective backup interval expires. Such data is no longer actively used and is removed during the routine deletion of the backup.
12. Your Rights
You have the right to access, rectification, deletion, restriction of processing, data portability, objection to certain processing activities and withdrawal of any consent you have given with effect for the future.
To exercise your rights, contact: nextround67@gmail.com .
13. Right to Lodge a Complaint
Data subjects may lodge a complaint with a data protection supervisory authority. The competent authority is in particular:
Thuringian State Commissioner for Data Protection and Freedom of Information
Häßlerstraße 8
99096 Erfurt
Germany
Email:
poststelle@datenschutz.thueringen.de
14. Age Restriction and Security
NextRound is approved for users aged 16 and over. Optional categories containing adult content must be actively enabled and are restricted to persons aged 18 and over. Alcohol is not required to use the app; drinking tasks are voluntary.
We take appropriate technical and organisational measures to protect personal data. Transmission is encrypted using TLS/HTTPS.
14. Changes to this Privacy Policy
We update this Privacy Policy when our offering, processing activities or legal requirements change. The current version is available on the website and in the app.
15. Changes to this Privacy Policy
We may amend this Privacy Policy if the web app, services used or legal requirements change. The current version will be published on this website.