Belt & Box
Play ENDEES

Privacy notice

Last updated: September 29, 2026

In short

No cookies, no ads, no tracking across websites. The game keeps your progress on your own device. While you play, it counts anonymously how often each level is tried, unless you switch that off. A memo to the Director and the survey leave your device only when you send them.

Who is responsible

The person named in the imprint is responsible for this website and the game on it.

Hosting

This website is hosted by Cloudflare, Inc. When you open it, Cloudflare processes the technical data needed to deliver the page and protect it from attacks – for example your IP address, the time and the page requested. This is our legitimate interest in running the site safely (Art. 6(1)(f) GDPR). We do not receive or keep these connection logs. Cloudflare may process data in the USA; it states that it is certified under the EU-U.S. Data Privacy Framework.

What stays on your device

The game saves your progress and settings in your browser’s local storage, so you can carry on where you left off. This never leaves your device and is needed for the game to work (§ 25(2) TDDDG). You can delete it at any time in the game (Settings → Progress) or in your browser.

Anonymous play data

To tune the difficulty of the levels, the game sends a few play events to this website’s own server: that a level was opened, and for each attempt how many tries it took, the stars, hints seen and the layout of the first try, plus the game’s version, language and board look. Each start of the game gets a random number that lives only in memory and is gone when you close the page – nothing is stored on your device for this, and we do not store your IP address with it. So we cannot tell who you are, nor recognise you next time. Legal basis: our legitimate interest in making the puzzles fair (Art. 6(1)(f) GDPR). You can switch it off on the first notice or at any time in the game’s Settings → Privacy. We delete the data once it is no longer needed for tuning, at the latest after two years.

Memos to the Director

If you send a memo from the game, we store your message with the game’s version, language, edition and the level on screen, and forward it by e-mail to our own inbox through Cloudflare’s e-mail routing. An e-mail address is stored only if you give one to be answered; we delete it once the matter is settled, and memos after two years at the latest. Legal basis: our legitimate interest in hearing and answering players (Art. 6(1)(f) GDPR).

The survey (Form 7b)

If you fill in the survey, we store your answers with the game’s version, language and edition. If anonymous play data is on, we also store that session’s random number, so we can see how far the answers’ player got – still without knowing who you are. No name, no e-mail address. We delete the answers after two years at the latest. Legal basis: our legitimate interest in understanding what players think of the game (Art. 6(1)(f) GDPR).

No third parties

The website and the game load no scripts, fonts or images from other providers. There is no advertising and no analytics service.

Your rights

You have the right to access, correction, deletion and restriction of processing of your personal data, and the right to object to processing based on legitimate interest (Art. 15–18, 21 GDPR). Because the play data is anonymous, we usually cannot link it to you. You can also complain to a data protection supervisory authority.

Contact

For questions about privacy, write to the e-mail address in the imprint.

Imprint · Privacy

Made with belts, boxes and too much coffee.