Privacy Policy

1. Data Controller

The person named in the Legal Notice is responsible for processing personal data in this application.

2. Data We Process

The following personal data is collected and processed when you use this application:

• Email address (for sign-in and identification)
• Username (optional, self-chosen)
• Password (stored exclusively as a bcrypt hash; the plaintext password is never stored)
• Generated lottery tickets and associated timestamps
• Account creation time and last-updated time

3. Purpose and Legal Basis

Data is processed solely to provide the service — specifically for authentication, linking saved tickets to the relevant account, and analysing expected values.

The legal basis is Art. 6(1)(b) GDPR (performance of a contract): processing is necessary to deliver the service in accordance with the terms of use.

4. Hosting and Storage Location

The application and all associated data are hosted on servers operated by Fly.io (data centre Frankfurt am Main, Germany). Data is processed and stored exclusively within the European Union.

5. Disclosure to Third Parties

Personal data is not shared with, sold to, or otherwise transferred to third parties. No analytics, advertising, or tracking services are used.

6. Cookies and Local Storage

The application does not set cookies. In a web browser, the session token is stored in the browser's local storage (localStorage) to maintain your login session. This token contains no personal data and is deleted when you sign out.

7. Data Retention

Data is retained for as long as the user account exists. Upon account deletion, all associated personal data is immediately removed.

8. Your Rights

Under the GDPR you have the following rights:

• Access to your stored data (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

To exercise your rights, please contact the email address listed in the Legal Notice.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority is the state data protection officer of the relevant German federal state.

10. Changes to this Privacy Policy

This privacy policy may be updated when the service or the applicable law changes. The current version is always available at this URL.