Privacy Policy

Philipp Horwath
Schemerlhöhe 377, 8076 Vasoldsberg, Austria
hello@thespielplatz.com

No login, no tracking, no contact form.

• Account data — Email / social identity via Logto (DJ login). Legal basis: Art. 6(1)(b) GDPR.
• Spotify connection — OAuth access token, refresh token, Spotify display name. Read-only access to playback state. Deleted when the DJ disconnects. Legal basis: Art. 6(1)(b) GDPR.

Third party: Spotify

• Account data — Email address via Logto Magic Link. Legal basis: Art. 6(1)(b) GDPR.
• Lists and entries — List names, currency, and entry content logged by members. Stored under your Logto ID. Legal basis: Art. 6(1)(b) GDPR.
• Member relationships — Links between Host and Member accounts. No additional personal data. Legal basis: Art. 6(1)(b) GDPR.

• Account data — Email / social identity via Logto. Legal basis: Art. 6(1)(b) GDPR.
• Trip data (Fahrtenbuch) — Per-trip date, start/end location, distance, purpose, and vehicle info; business-trip records (Taggeld / Nächtigung); and your tax profile (legal name and address). A legally required travel log under Austrian tax law, stored under your Logto ID. Legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR.
• MCP API keys — Long-lived Logto keys for AI client access. Revocable at any time. Legal basis: Art. 6(1)(b) GDPR.
• AI assistant (MCP) — If you connect your own AI assistant via MCP, trip data you send to it is processed by your chosen AI provider under your own arrangement — outside trips' control.

Retention: Trip data is kept while your account is active; Austrian tax law (BAO) may require records to be retained for up to 7 years after deletion.

No database — pogo does not persist any data of its own.

• Account data — Email / social identity via Logto. Legal basis: Art. 6(1)(b) GDPR.
• Beta access — Whether your Logto account holds the pogo-beta role. Assigned by hand in Logto; pogo stores no record of its own. Legal basis: Art. 6(1)(b) GDPR.
• Waiting list — The waiting list is a plain mailto link — if you use it, your own email client sends a mail to fil@thespielplatz.com. Handled as ordinary correspondence. Legal basis: Art. 6(1)(f) GDPR.

All services are hosted on netcup GmbH (Daimlerstraße 25, 76185 Karlsruhe, Germany). Server access logs (IP address, timestamp, requested URL, browser info) are recorded automatically for all services. Purpose: technical operation and error analysis. Legal basis: Art. 6(1)(f) GDPR. netcup privacy policy: netcup.de/kontakt/datenschutzerklaerung.php

Logto, self-hosted at logto.tsp.tools. No data is shared with external auth providers unless the user explicitly chooses social login (e.g. Google, GitHub).

Only strictly necessary cookies are used — no analytics, tracking, or advertising cookies. All services set a theme-preference cookie (Dark/Light), and tsp.tools, trips.tsp.tools and pogo.tsp.tools additionally set a language-preference cookie. Services with login (nab, stash, trips, pogo) set a Logto session cookie for authentication. Legal basis: Art. 6(1)(f) GDPR / strictly necessary.

You have the right to access, rectification, erasure, restriction, and objection — contact hello@thespielplatz.com. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).