Mulatschak needs no account and uses no cookies, advertising trackers or personal usage analytics. Games against the computer stay on your device. Only the web version, online games and a feedback email you choose to send need a connection.
The current game, settings, language, statistics, achievements, player names and score sheets are stored locally only. The same applies to recent room codes and random tokens that return you to your seat after a dropped connection. I cannot read this data. Remove it by uninstalling the app or clearing the site's data in your browser.
The web version and online rooms run at mulatschak.metzner.uk on the platform
of Cloudflare, Inc. When you connect, Cloudflare processes the IP
address, time, requested address and technical connection data. These details are used only
to deliver and secure the service and diagnose faults. The currently enabled Worker logs are
kept for up to three days. The legal basis is the legitimate interest in a
secure and reliable service under Article 6(1)(f) GDPR. Cloudflare may also process data in
the United States under the contractual safeguards in its data processing agreement. When a
room is opened or a technical error is reported, the IP address is also converted into an
hourly changing short identifier to limit automated abuse. It is held in memory only and
expires with the hour.
An online game additionally sends the name you enter (16 characters at most), the four-character room code, a random seat token, the selected rules and your moves. Players in a private room see one another's names; quick matches hide every name. There is no chat. The room and all of its contents are deleted automatically after 24 hours without activity. This processing is necessary to provide the online game you requested (Article 6(1)(b) GDPR).
Beyond the rooms themselves, only two daily totals are kept: the number of rooms opened and
games played.
The web version — never the Android app — also reports uncaught technical errors to the
first-party /api/oops endpoint. Only the app version, a one-way error
signature and its count are stored; identical errors are aggregated. No stack traces, addresses,
room codes, names, tokens or IP addresses are stored. These totals and error signatures are
deleted after 30 days.
The feedback button sends nothing by itself. It opens your mail app with visible, editable text containing the app, Android and WebView versions, language and online status — no room code, token, name or device model. Only if you send the email yourself are its contents and your sender address processed by your mail provider and mine. I use them only to handle your message and keep them only as long as needed for that purpose. The legal basis is the legitimate interest in responding to feedback (Article 6(1)(f) GDPR).
No data is sold, no advertising profiles are built and no automated decisions are made. In particular, you have rights of access, rectification, erasure, restriction and objection. You may also lodge a complaint with the Austrian Data Protection Authority.
Controller: Daniel Metzner, 8010 Graz, Austria · legal@metzner.uk
The German version is legally binding; this English version is a courtesy translation.
As of: 2026-10-04