Privacy Policy

Last updated: 1 September 2026

wafflzz.xyz is a private, non-commercial website. It has no user accounts, no login, no comment section, no contact form, no shopping cart and no advertising. This page explains, service by service, what actually happens with data when you visit - nothing here is boilerplate for features this site does not have.

1. Short version

• This site sets no cookies and uses no cross-site tracking.
• There is no form on this site, so you cannot submit personal data through it.
• Icons, scripts and stylesheets are served from this site itself - no icon CDN, no tag manager, no status widget.
• Three things involve someone other than me: the web host in Germany, an anonymous analytics service, and Google Fonts.
• Two things are stored on your device and never sent anywhere: your light/dark theme choice and, if you play them, your game saves.

2. Who is responsible

This website is operated privately by the owner of the domain wafflzz.xyz. Questions about this policy or about data processing can be sent to Robbenbomber87@icloud.com.

3. Hosting and domain

• Hosting: a private server at Hetzner Online GmbH, data centre Falkenstein, Germany
• Domain registrar: Namecheap, Inc. (United States), which holds the registration of the domain itself

Whenever a page is opened, your browser sends technical data to the server that is required to deliver the page at all:

• IP address
• Date and time of the request
• The file or page requested
• Browser type and operating system
• Referring URL, if your browser sends one

These server logs exist so the site can be delivered, kept secure and repaired when something breaks. The legal basis is the legitimate interest in operating a functioning and secure website (Art. 6(1)(f) GDPR). The server stands in Germany, so no transfer to a country outside the EU takes place for hosting.

4. Analytics (GoatCounter)

To see which pages are visited, this site loads a small script from GoatCounter, a privacy-focused analytics service.

• GoatCounter sets no cookies and does not follow you across other websites.
• It records the page visited, the referrer, browser, operating system, screen size and country.
• Your IP address is used only briefly to derive the country and to generate a daily, non-reversible hash for counting unique visits; it is not stored.
• No profile is built and no data is sold or shared for advertising.

Legal basis: legitimate interest in understanding basic usage of the site (Art. 6(1)(f) GDPR). Details: goatcounter.com/privacy. If you block scripts or use a tracking blocker, the site works exactly the same.

5. Google Fonts

The typefaces used on this site (Roboto Condensed and, for the logo, UnifrakturCook) are loaded from Google's font servers at fonts.googleapis.com and fonts.gstatic.com. To deliver the font files, your browser connects directly to Google, which means your IP address and browser information are transmitted to Google (Google LLC / Google Ireland Limited), possibly to servers in the United States. No cookies are set by this request.

Legal basis: legitimate interest in a consistent presentation of the site (Art. 6(1)(f) GDPR). Google's privacy information: policies.google.com/privacy and the Google Fonts privacy FAQ.

6. Settings and game saves stored in your browser

This site has a light/dark switch. When you use it, your choice is saved in your browser's local storage under the key theme, so the site opens in the same mode next time. This is not a cookie, it is never transmitted to me or to anyone else, and it contains nothing but the words light or dark.

The games under /games/ save your progress the same way, under keys beginning with wafflzz. (for example wafflzz.tycoon). A save holds nothing but game numbers - points, levels, items and a timestamp used to work out idle progress. It never contains personal data, it is never sent anywhere, and it exists only in the browser you played in. Waffle Tycoon also has a box for copying a save code between your own browsers; that box does nothing but read and write your own local save. Each game has a reset button, and clearing your browser's site data removes everything described in this section.

7. Links to other platforms

The Socials and Contact pages link to external platforms - Twitch, YouTube, Discord, TikTok, X, Instagram, Ko-fi and Throne. These are plain hyperlinks, not embedded players, feeds, buttons or widgets. Nothing is loaded from those platforms while you are on this site, and they learn nothing about your visit unless you click a link. Once you do, you leave this site and the privacy policy of the platform in question applies.

The "Classic" links point to legacy.wafflzz.xyz, an older version of this site under the same domain and the same hosting arrangement described in section 3.

8. Contacting me by email

The Contact page offers an email address as a normal mailto: link - clicking it opens your own mail program, and nothing is sent through this website. If you write to me, I receive whatever you choose to put in the message (at minimum your email address and its content) and process it to answer you (Art. 6(1)(b) or (f) GDPR). The mailbox is hosted by Apple (iCloud Mail). I keep such messages only as long as needed to deal with the matter and delete them afterwards.

9. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. In practice this site stores no personal data about you that I could look up: there is no database, no account and no contact form. These rights are therefore mostly relevant to emails you have sent me, and to the providers named above, whom you can contact directly.

You also have the right to lodge a complaint with a data protection supervisory authority in your country of residence.

10. Changes to this policy

If the site starts using a service that processes data differently, this page is updated before that service goes live, and the date at the top changes with it.