RaPix
RASTERPIXEL · REAL-TIME GUESSING GAME
Privacy Policy
Information on the processing of personal data pursuant to Art. 13 GDPR.
1. Controller
MR Development, owner Manuel Rödig
Email: m.roedig@gmail.com
Address: see the legal notice.
2. Hosting
RaPix runs on a virtual private server (VPS) provided by IONOS SE in a data centre in Germany. Operation takes place within the scope of processing on behalf of the controller (Art. 28 GDPR); IONOS processes personal data exclusively on instruction and to provide the infrastructure.
3. Data processed, purposes and legal bases
Email address — for passwordless sign-in via magic link (a one-time sign-in link is sent to the address).
Legal basis: Art. 6 (1) (b) GDPR.
Display name (handle) and friend code — to identify you to other players and to connect friends.
Note: Your display name is public and visible to others (e.g. in the gallery and to fellow players).
Legal basis: Art. 6 (1) (b) GDPR.
Friends list — to provide the friend and invitation features.
Legal basis: Art. 6 (1) (b) GDPR.
Drawn pictures and game statistics — to run the game, to display them in the gallery and to evaluate your statistics.
Note: Saved pictures appear publicly in the gallery together with your display name.
Legal basis: Art. 6 (1) (b) GDPR.
Discord user data (via Discord Activity) — When the app is launched via Discord Activity, the following data is transmitted from Discord to RaPix via the OAuth scope "identify": Discord user ID, username (global name), avatar and locale. This data is used to automatically provision a RaPix account and to provide social features that are internally keyed to the discord_id. The data is stored linked to your RaPix account and can be fully deleted at any time via the existing account-deletion flow in the app. Discord's privacy policy: https://discord.com/privacy
Legal basis: Art. 6 (1) (b) GDPR.
IP address — is processed in the server and proxy logs (Caddy) for technical delivery and to prevent abuse.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure operation).
Local storage (localStorage) — only the technically necessary session token is stored so that you stay signed in. No tracking takes place; consent is not required for this.
Usage analytics (Matomo) — For anonymous reach and usage analysis we use the self-hosted open-source tool Matomo (on musikersuche.org). It records aggregated page views and clicks — cookie-free and with a shortened/anonymised IP address. Your browser’s “Do Not Track” setting is respected: if it is enabled, nothing is recorded. No data is shared with third parties.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure operation).
4. Storage period
Magic link tokens expire after 15 minutes. Sessions remain valid for up to 90 days or until you sign out. Account and game data are stored until you delete your account.
There is no disclosure to third parties other than the host named above. There is no tracking, no advertising and no use of cookies — with the exception of the technically necessary session token.
5. Your rights
Under the GDPR you have the following rights:
- Access to the data stored about you (Art. 15 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Complaint to a data protection supervisory authority
Note: You can request access to or export your data and completely delete your account at any time directly in the app under “My account”.