Privacy Policy
Last updated: April 2026
1. Controller
Ferdinand Goecke
Laubsängerweg 7
85356 Freising
Germany
Email: info@namtarra.de
2. Overview of Data Processing
This privacy policy informs you about which personal data we collect in the context of our prediction platform (hereinafter "Service"), how we process it, and what rights you have.
3. Personal Data Collected
During registration and sign-in:
- Email address (required)
- Password in hashed form (required)
- Username and display name (freely chosen, required)
While using the platform:
- Profile picture URL (optional)
- Betting activity (created bets, wagers in virtual currency, score/points)
Automatically collected data:
- IP address (as part of server access logs)
- Time of access
- Technically necessary session data
4. Purposes and Legal Bases of Processing
Provision of the Service
Registration, sign-in, and betting functionality — Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Technical Security and Stability
Ensuring proper operation of the service — Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Optional Features
E.g. profile picture — Legal basis: Art. 6(1)(a) GDPR (consent).
5. Data Retention
- Account data (email, username, display name, profile picture): Stored as long as your account exists. After account deletion, data will be removed within 30 days.
- Betting activity: Deleted together with the account.
- Server access logs (IP addresses, access timestamps): Automatically deleted after 14 days.
6. Sub-processors and Third Parties
We use the following sub-processors to provide the Service:
Supabase Inc.
Purpose: Backend service (database, authentication). Server location: European Union (EU region). Basis: Data Processing Agreement (DPA) pursuant to Art. 28 GDPR. More information: supabase.com/privacy
Vercel Inc.
Purpose: Hosting the web application. Server location: European Union (EU region). Basis: Data Processing Agreement (DPA) pursuant to Art. 28 GDPR. More information: vercel.com/legal/privacy-policy
Both providers are headquartered in the USA. Since the EU region has been selected, data is generally processed within the EU. Should a transfer to the USA occur in individual cases, it is based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission) or EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
7. Cookies and Local Storage
We exclusively use technically necessary cookies and local storage for authentication and session management. These are required for the operation of the Service and cannot be disabled.
No tracking cookies, analytics tools, or advertising cookies are used.
Legal basis: § 25(2)(2) TTDSG (technically necessary).
8. Minimum Age
Use of our Service requires a minimum age of 16 years (Art. 8 GDPR in conjunction with § 7(1) TTDSG). By registering, you confirm that you are at least 16 years old.
9. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): You may request information about what data we have stored about you.
- Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data.
- Right to erasure (Art. 17 GDPR): You may request deletion of your data, provided no legal retention obligations apply.
- Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you may request restriction of processing.
- Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, machine-readable format.
- Right to object (Art. 21 GDPR): You may object to processing of your data based on Art. 6(1)(f) GDPR at any time.
- Right to withdraw consent (Art. 7(3) GDPR): You may withdraw consent given (e.g. for profile picture) at any time with effect for the future.
To exercise your rights, please contact: info@namtarra.de
10. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe the processing of your data violates the GDPR.
The supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de
Website: www.lda.bayern.de
11. Automated Decision-Making
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.
12. Obligation to Provide Data
Providing your email address and a username is required for registration and use of the Service. Without this data, no user account can be created. Providing a profile picture is voluntary and has no impact on the use of the Service.
13. Changes to this Privacy Policy
We reserve the right to update this privacy policy as needed to reflect changes in the legal situation or changes to the Service. The current version is always available through the Service.