Privacy Policy

Controller

tsp.tools (Landing Page)

No login, no tracking, no contact form.

thespielplatz.com

No login, no tracking, no contact form.

games.tsp.tools

• Account data — Email / social identity via Logto. Legal basis: Art. 6(1)(b) GDPR.
• User settings — Display name, color preference. Stored in the games DB under your Logto ID. Legal basis: Art. 6(1)(b) GDPR.
• Friends list — Local player names and colors. Stored under your Logto ID, not shared. Legal basis: Art. 6(1)(b) GDPR.

nab.tsp.tools (Nudge-a-Beat)

• Account data — Email / social identity via Logto (DJ login). Legal basis: Art. 6(1)(b) GDPR.
• Spotify connection — OAuth access token, refresh token, Spotify display name. Read-only access to playback state. Deleted when the DJ disconnects. Legal basis: Art. 6(1)(b) GDPR.

Third party: Spotify

stash.tsp.tools

• Account data — Email address via Logto Magic Link. Legal basis: Art. 6(1)(b) GDPR.
• Lists and entries — List names, currency, and entry content logged by members. Stored under your Logto ID. Legal basis: Art. 6(1)(b) GDPR.
• Member relationships — Links between Host and Member accounts. No additional personal data. Legal basis: Art. 6(1)(b) GDPR.

trips.tsp.tools

• Account data — Email / social identity via Logto. Legal basis: Art. 6(1)(b) GDPR.
• Trip data (Fahrtenbuch) — Date, start/end location, distance, purpose, vehicle. A legally required travel log under Austrian tax law. Legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR.
• MCP API keys — Long-lived keys for AI client access. Revocable at any time. Legal basis: Art. 6(1)(b) GDPR.

Retention: Austrian tax law may require trip records to be retained for up to 7 years.

piggy-bank.tsp.tools

• Access credentials — PIN and optional title, stored in local SQLite. No email required. Legal basis: Art. 6(1)(b) GDPR.
• LNBits connection — LNBits instance URL and read-only API key, stored in local SQLite. Legal basis: Art. 6(1)(b) GDPR.
• Balance and transaction data — Fetched live from LNBits, not stored by Piggy Bank. The LNBits instance operator is responsible for that data.

wps.tsp.tools (WLED Pixel Studio)

• Pixel designs — Stored exclusively in the browser's localStorage. No data is transmitted to any server.

Hosting (all services)

All services are hosted on netcup GmbH (Daimlerstraße 25, 76185 Karlsruhe, Germany). Server access logs (IP address, timestamp, requested URL, browser info) are recorded automatically for all services. Purpose: technical operation and error analysis. Legal basis: Art. 6(1)(f) GDPR. netcup privacy policy: netcup.de/kontakt/datenschutzerklaerung.php

Auth infrastructure (games, nab, stash, trips)

Logto, self-hosted at logto.tsp.tools. No data is shared with external auth providers unless the user explicitly chooses social login (e.g. Google, GitHub).

Your rights

You have the right to access, rectification, erasure, restriction, and objection — contact hello@thespielplatz.com. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).