Privacy Policy

Last updated: August 18, 2026

1. Data Controller and Contact

The party responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:

Tobias Neuhaus
Ostpreußenstraße 27
58089 Hagen
Germany

E-Mail: ...@.......


2. Fundamentals of Data Processing

Note on Commercial Intent: This website is an entirely non-commercial fan-made hobby project. It does not generate any revenue, features no advertising, and does not serve any commercial or financial interests (100% free of monetization). Data is processed solely for absolute technical necessities.

What Data We Process

We process personal data only to the extent necessary to provide a functional website and our content. This includes:

  • Technical Log Data: Automatically collected by the web server: IP addresses, browser type, date and time of access, and the requested page (URL).
  • Contact Data: E-mail addresses, in case you contact us directly.
  • Game & Discord Profile Data: In case you use the "Robopup Games Hub" and voluntarily submit your highscores via Discord for the leaderboard.

Legal Basis

We process your data based on the following legal grounds (Art. 6 GDPR):

  • Legitimate Interest (Lit. f): For security, error-free technical operation, and website optimization.
  • Consent (Lit. a): For voluntary authentication via Discord to participate in public leaderboards and render your user profile in the games.

3. Hosting, Log Files, and Security

Our website is hosted on the servers of an external service provider. When you access our website, technical information is automatically recorded (server log files). This includes your IP address, date/time, browser, and operating system.

This data is required to technically deliver the website and detect system abuse (e.g., DDoS attacks). IP addresses in general server log files are automatically deleted after a maximum of 3 days. We use SSL/TLS encryption (https) to protect your data during transmission.


4. Interface Usage & Logging (API Usage)

We provide a public Application Programming Interface (API) for developers and third-party integrations. When accessing the API, technical data is processed to maintain server stability and prevent abuse (rate limiting):

  • Requests WITHOUT an API Key: If requests are made without an API key, your IP address is kept volatile in temporary system memory (cache) for exactly 60 seconds to enforce rate limits. No permanent storage in database logs or files takes place.
  • Requests WITH an API Key: For requests using an API key, technical request metrics (endpoint, HTTP method, status code, duration, user-agent) are recorded to display usage statistics in the dashboard. The client IP address is immediately **anonymized** (masking the last octet, e.g., 192.168.1.xxx) to prevent direct identification of individuals.

All API request logs are automatically and permanently deleted after a maximum period of 3 days.


5. "Robopup Games Hub" & Leaderboard

We provide the games hub on our website. All games (such as "Roboless") can be played completely anonymously without accounts or any personal data required.

a) Voluntary Discord Login & Collected Data

Logging in via Discord is completely voluntary and exclusively serves to record your highscores in Hardcore mode on the public leaderboard and generate custom share cards. If you optionally choose to connect your Discord account via OAuth2, we solely request the minimal identify permission scope. The following data is processed:

  • Your Discord User ID (for unique identification)
  • Your Discord Username / Display Name
  • Your achieved Highscores / Streaks and chosen snippet durations

b) Privacy-Friendly Avatar Caching (No Third-Party Tracking)

To protect your privacy and prevent your IP address from being transmitted to Discord (USA) on page load, our server retrieves your avatar image once via backend, converts it into a WebP graphic, and stores it locally on our own server. Visitors viewing the leaderboard load all avatars directly from our server without any connection to Discord.

c) Automatic Highscore Updates & Self-Deletion (Right to be Forgotten)

When logged in, your scores are recorded on the leaderboard. Via the "Delete Data" button in the games hub, you can delete your profile, all recorded highscores, and your cached avatar permanently and instantly at any time.


6. Music Embeds and Links (Spotify, SoundCloud, Apple Music & YouTube)

On our song, lyrics, and certain game pages (such as "Roboless"), we provide direct streaming links ("Listen on") as well as optional embedded media players for supported platforms like Spotify and SoundCloud. Furthermore, we also provide links to platforms such as Apple Music and YouTube where the music is available.

a) Data Processing via External Embeds

If you choose to load an embedded audio player (e.g., Spotify or SoundCloud) by giving your consent or selecting your preferred player in our cookie settings, a direct connection to the respective platform provider's servers is established. Depending on the service, these providers are: Spotify AB (Sweden), SoundCloud Ltd. (Ireland/UK), Apple Inc. (USA/Ireland), or Google Ireland Limited (Ireland) / Google LLC (USA) for YouTube. Through this connection, technical data such as your IP address, browser details, and the requested page are transmitted to the respective third-party provider, which may use cookies or tracking technologies according to their own privacy policies.

b) External Links

If you click on external streaming links (such as Apple Music, YouTube, Spotify, SoundCloud, etc.) to open them on their respective platforms, you leave our website. We have no control over data processing practices on external third-party websites.


7. Integration of Graphic Elements & Icons (Pandacy.org)

For technical simplification and centralized asset management, graphical elements (SVG icons) are served directly from Pandacy.org. This allows us to bundle and maintain icons in one central location instead of storing and managing them individually across every single website.

These assets are delivered exclusively through our own server infrastructure within the Pandacy network. No data is transmitted to uninvolved third parties, and no user tracking takes place. For further details on data processing within the Pandacy network, please consult the Privacy Policy of Pandacy.org.

Any technical connection and security logs are automatically deleted after a maximum period of 3 days.


8. Cookies & Browser Settings

Our website uses cookies or similar technologies (Local Storage / Session Storage) to store purely technical preferences (e.g., language, timezone, login state for Discord or team members, and player preferences) and temporary unsubmitted game results. Technically necessary cookies and player preference choices are deployed based on our legitimate interest or your explicit choice.

You can configure your browser to inform you about the placement of cookies or disable them entirely. Please note that disabling cookies may limit the functionality of our website.


9. Your Rights

You have the right to request access to your stored personal data, rectification of incorrect data, deletion of your data, restriction of processing, and the right to object to the processing of your data. Please contact us via ...@........ You also have the right to lodge a complaint with the competent supervisory authority (LDI NRW).