1. Controller
Responsible for data processing on this website is buddycore Studio. All operator details and contact options can be found at studio.buddycore.com.
This privacy policy follows the Swiss Data Protection Act (revFADP) and – where applicable, for example for visitors from the EU/EEA – the General Data Protection Regulation (GDPR).
2. What data we process
2.1 Server logs
When you visit the website, the web server technically processes: IP address, date and time of access, requested page, browser type and operating system (user agent) and the referrer URL. This data is required to deliver the website, keep it stable and prevent abuse (legitimate interest or Art. 6 (1) (f) GDPR). Log data is deleted after 30 days at the latest and is not combined with other data sources.
2.2 Estimation rooms (core feature)
Estimation rooms work without registration. When joining, you choose a display name (a pseudonym is possible and recommended – or none at all, in which case a neutral name like «Bestimater 1» is assigned) and a role. During a session the following data is processed: room code, display name, role, played card values, round titles and the round history.
This data is held exclusively in the server's working memory, is not stored in a database and is automatically and irretrievably deleted no later than two hours after a room's last activity. There is no analysis, no profiling and no disclosure of this content.
2.3 Local storage (localStorage)
For convenience, your browser stores locally on your device: your most recently used display name, your role, your language choice, your last selected card deck and your cookie/advertising consent. This data never leaves your device and can be deleted at any time via your browser settings. The legal basis is our legitimate interest in a user-friendly service; the storage is purely technical-functional.
2.4 Hosting (Cloudflare)
This website is operated on the infrastructure of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, as our processor. Cloudflare processes connection data (in particular IP addresses) to deliver and protect the website. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which Switzerland also recognises as providing an adequate level of protection (Swiss-U.S. DPF). More information: cloudflare.com/privacypolicy.
2.5 Fonts (Google Fonts)
This website currently loads the fonts «Space Grotesk» and «Inter» from Google Fonts. Your IP address is transmitted to Google in the process. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information: policies.google.com/privacy.
3. Advertising (Google AdSense)
To fund this free service we embed ads from Google AdSense on the content pages. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland («Google»).
AdSense uses cookies and similar technologies (e.g. localStorage, device identifiers) to deliver ads, measure their effectiveness and – with personalised advertising – tailor ads to your interests. Google processes, among other things, your IP address, device and browser information and information about your interaction with ads. Data may be transferred to Google LLC servers in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework, which Switzerland also recognises as adequate (Swiss-U.S. DPF).
Ads are only loaded after you have agreed in the consent banner (consent, Art. 6 (1) (a) GDPR). Without consent the ad spaces stay empty. You can change or withdraw your decision at any time via the «Cookie settings» link in the footer; withdrawal applies to the future.
Further information from Google:
- Privacy policy: policies.google.com/privacy
- How Google uses data from partner sites: policies.google.com/technologies/partner-sites
- Personalised advertising settings: adssettings.google.com
4. Cookies and consent
BESTIMATE itself sets no tracking cookies. The only first-party storage is your consent decision (localStorage, entry «bm_consent_v1»). Third-party cookies arise exclusively through Google AdSense after your consent (see section 3).
5. Disclosure of data
Personal data is only passed on to third parties as described in this policy (Cloudflare as hosting provider, Google AdSense, Google Fonts), where required to fulfil legal obligations, or where you have consented.
6. Your rights
Within the scope of applicable law you have the right to information about the data processed about you, to rectification, erasure, restriction of processing, data portability and the right to withdraw consent at any time. Please use the contact options available at studio.buddycore.com. Please note: since estimation rooms are not stored permanently, we usually no longer hold any content data about you once a session has expired.
In Switzerland you may also contact the Federal Data Protection and Information Commissioner (FDPIC); in the EU/EEA, the supervisory authority responsible for you.
7. Data security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access, in particular transport encryption (HTTPS/WSS), data minimisation through ephemeral storage and regular updates of the software in use.
8. Changes
We may amend this privacy policy at any time, for example when the service or the legal situation changes. The version published here applies.
Last updated: August 2026