Privacy Policy

epicsoft LLC is responsible for data processing on this website and in the TAC Mini App. Full contact details can be found in the Legal Notice. For questions regarding data protection, you can contact us at info@tac-game.club.

This website is hosted as a static page on Cloudflare Pages (Cloudflare, Inc.). When you access the website, technically necessary access data automatically transmitted by your browser are processed. Cloudflare processes this data as a data processor to provide the website securely and stably. To prevent attacks and automated access, Cloudflare may set a technically necessary security cookie (cf_clearance); it serves security purposes exclusively and contains no tracking or marketing functions. The legal basis is our legitimate interest in secure and efficient provision (Art. 6(1)(f) GDPR).

The following data are automatically collected and temporarily stored in server logs with every access:

• IP address (shortened/anonymized where possible)
• Date and time of access
• Page or file accessed
• Amount of data transferred
• Browser type and operating system
• Referrer URL

This data is used exclusively for technical provision and the prevention of attacks and is not merged with other data sources.

This website does not use cookies for tracking or marketing purposes and does not use cookie-based recognition for tracking or marketing purposes. Technically necessary settings (e.g., language selection) may be stored locally in your browser; this information is not transmitted to us.

For the statistical analysis of website usage, we use Umami—analytics software that we operate on our own infrastructure (self-hosted). No data is transmitted to third parties.

Umami is completely cookie-free and does not create cross-device profiles. Only anonymized usage data is collected (e.g., pages visited, approximate origin at the country level, browser or device type used, and the referrer page). IP addresses are not stored and cannot be traced back to individuals; personal identification is therefore excluded. The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6 (1)(f) GDPR).

To optimize the delivery of images, media files may be provided via a content delivery network. When loading external media files, your IP address may be transmitted to the respective provider, which is technically necessary for delivery.

Media and image files – for example, club logos and icons – are hosted in object storage provided by Wasabi Technologies and are loaded directly from there when the respective page is accessed. In this process, your IP address is transmitted to Wasabi Technologies, which is technically necessary for the delivery of the file. Storage takes place in a data center within the European Union (Amsterdam region, Netherlands). We use Wasabi Technologies as a data processor; the legal basis is our legitimate interest in the secure and efficient provision of content (Art. 6(1)(f) GDPR).

This website displays information about TAC clubs as well as aggregated game statistics. This data is sourced from the TAC platform. Members can determine in the settings of the TAC Mini App whether their name is published on the website. If publication is disabled, the individuals concerned will be displayed exclusively in an anonymized form.

The TAC Mini App is an application that runs within the Telegram messenger and allows members of TAC clubs to manage games, results, and statistics. The app communicates with our server (backend), where the entered data is stored and processed.

The backend is hosted on a server infrastructure operated by us from the provider Hetzner Online GmbH in a data center in Finland (Helsinki) – thus within the European Union. The data is stored in a PostgreSQL database. The legal basis for the provision and operation of the app is the fulfillment of the user relationship (Article 6(1)(b) GDPR) as well as our legitimate interest in a secure and functional operation (Article 6(1)(f) GDPR).

When you log in via Telegram in the Mini App, Telegram transmits the identity data associated with your Telegram profile to us. We process and store the following:

• your Telegram user ID (Telegram ID)
• your first name and, if applicable, last name
• your Telegram username (if available)
• your Telegram profile picture (if available)
• your preferred language code

Additionally, we store the display name (nickname) you choose in the app. This data is required to create your account, identify you, and provide you with the functions of the app. The legal basis is Art. 6(1)(b) GDPR.

When using the app, we process data entered by you or other members regarding gameplay, specifically:

• your memberships in clubs and your role in the respective club
• recorded games and results in which you participated
• statistics and ratings calculated from these
• participation in scheduled dates and events

This data is displayed to other members of your clubs as part of the app functions. You can control how you are represented within the app via the visibility settings. The legal basis is Art. 6(1)(b) GDPR as well as our legitimate interest in providing the club functions (Art. 6(1)(f) GDPR).

The Mini App can automatically evaluate a photo of the starting position and a photo of the final position of a game to pre-fill the positions of the marbles in the entry form. For this purpose, the two photos are transmitted to a Google AI service (Gemini API, Google LLC) and processed there.

This feature is disabled by default. Each club decides for itself whether to use it: a club administrator must explicitly enable it in the club settings. Until this is done, no photo leaves our infrastructure – the process works completely, just without pre-filling.

By enabling it, the club assumes responsibility for ensuring that the use of the service is permitted in its country and that Google's terms are complied with. We recommend informing members in advance.

Only the two photos are transmitted; names, Telegram identifiers, or other account data are not sent. The photos show the game board but may depict hands and, in some cases, other people. According to the Google terms applicable to us, the transmitted content may also be used to improve Google products and may be viewed by employees.

The photos are additionally stored on our infrastructure and assigned to the respective game; the service's response is kept alongside the photo and deleted together with it. The legal basis is our legitimate interest in facilitating result entry (Art. 6 Abs. 1 lit. f DSGVO); transmission only occurs if the respective club has activated the feature.

For authentication, we verify the login data signed by Telegram and subsequently issue an access token (bearer token), with which your requests to the backend are authenticated. The token is stored locally in the app and serves exclusively to securely associate your requests with your account. The legal basis is our legitimate interest in secure access (Art. 6(1)(f) GDPR).

If you have enabled this in Telegram, our Telegram bot will send you notifications regarding club-related events (e.g., new dates or invitations). You may disable the receipt of these notifications at any time via Telegram. The legal basis is our legitimate interest in informing members (Art. 6(1)(f) GDPR).

The Mini App runs within the Telegram messenger, which is operated by Telegram FZ-LLC. When accessing the app and during login, Telegram processes data as an independent controller in accordance with its own privacy policies; we have no influence over this. Depending on Telegram's location, data may be transferred to countries outside the European Union. Further information can be found in Telegram's privacy policy.

If you contact us by email, we process the data you provide (e.g., email address, name, and message content) to handle your inquiry. The legal basis is our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR) or the initiation or performance of a contract (Art. 6(1)(b) GDPR). The data will be deleted as soon as they are no longer required for this processing.

This website contains links to external third-party websites. We have no influence over their data processing. The respective provider is solely responsible for the content and data protection of the linked pages.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)

To exercise your rights, an informal message to info@tac-game.club is sufficient.

If you believe that the processing of your data violates applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services. The version current at the time of your next visit will then apply.