Privacy policy

1. Controller

[Name des Betreibers / Firma]

[Straße Hausnummer]

[PLZ Ort]

Deutschland

Email: [kontakt@example.de]

2. Hosting and server log files

The website is hosted by: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA – Server: Frankfurt am Main (fra1). When you open a page, technically necessary data is processed (IP address, date and time, page requested, browser and device information) to deliver the pages and keep the service secure.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, reliable operation).

Static content is delivered through the provider's worldwide network. As the provider is based in the USA, a transfer to the USA cannot be ruled out. It is based on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

3. Your game account

Guest account: when you click “Play as guest”, we create an account with a random name. You don't have to provide any personal details.

Registration: when you save your progress, we also store your display name, email address and password. Passwords are only stored as a hash (bcrypt), never in plain text.

For both account types we store your game progress:

• Language and selected vehicle
• Missions: attempts, score, stars, duration and the driving faults detected in each drive
• Theory: which questions you answered and how often correctly (for spaced repetition), mock exam results
• Virtual credits with all transactions, XP and level, virtual “Flensburg points”
• Completed tasks, your invite code and — if you were invited — by whom
• When the account was created and last used

Purpose: providing the game and saving your progress. Legal basis: Art. 6 (1) (b) GDPR (terms of use).

The data is stored in our database: [Datenbank-Anbieter und Serverstandort, z. B. MongoDB Atlas, Region Frankfurt].

4. Ranking and invitations

Registered players appear in the public ranking with their display name, level, XP and number of missions passed. Guest accounts are not shown. You can use a pseudonym as your display name at any time.

If you arrive via an invite link, we remember the invite code so the referral bonus can be credited. The person who invited you does not see your name, only that an invitation succeeded.

5. Cookies and local storage

We use no analytics, marketing or third-party cookies. We only store:

• fq_session (cookie, 12 months, readable only by the server): keeps you signed in. Strictly necessary (§ 25 (2) no. 2 TDDDG).
• fq_ref (cookie, 30 days): the invite code when you arrive via an invite link, so the bonus can be credited.
• Your browser's local storage: language (fq_locale), camera view (fq_camera), licence class chosen in the theory trainer (fq_licence) and invite code (fq_ref). This data stays on your device, except the invite code when your account is created.

6. Fonts and voice output

Fonts are served from our own server; opening the site does not connect you to Google.

The instructor's voice uses your browser's or operating system's speech synthesis. Depending on your browser, the spoken text may be processed by the browser vendor (e.g. for online voices). We don't transmit anything for this ourselves. You can turn the voice off in the mission briefing and the pause menu.

7. Emails

We only send registered players emails that belong to their account: a welcome email after registering and — when you ask for it — a password reset link. No advertising, no newsletter.

Emails are sent via Resend (Resend, Inc., USA) as our processor. This involves your email address, display name and the content of the email. Transfers to the USA are based on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. Legal basis: Art. 6 (1) (b) GDPR.

Password reset links are valid for 1 hour and work only once; we only store a hashed check value of them.

8. Payments

There are no payments in version 1. We process no payment data.

9. Retention

We keep account data until you delete your account or ask us to delete it.

We may delete guest accounts that have not been used for 12 months.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21).

On your profile, “Download my data” gives you everything we store, and “Delete account” permanently removes your account and history. For anything else, email [kontakt@example.de].

You can also complain to a data protection supervisory authority, for example: [Zuständige Datenschutz-Aufsichtsbehörde Ihres Bundeslandes].

11. Children and teenagers

FahrQuest is made for learner drivers, including teenagers. If you are under 16, please talk to your parents before registering an account.

12. Changes

We update this policy when the game or the law changes. The version published here applies.