Privacy policy

Who is responsible

The controller is Ofir Wienerman, ISA After Hours AI, 86356 Neusäß, Germany. Contact: ofir.wienerman@gmail.com. The website operator's details are in the Impressum.

Reading the site

Vercel Inc. hosts this website. Delivering and securing a page involves processing technical request data such as your IP address, requested URL, request time and browser information. Our legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing a reliable, secure website.

Public pages do not load Vercel Web Analytics or a replacement browser-based visitor counter. Fonts and video preview images are served from this website; loading them does not contact Google's font servers or YouTube.

Following an external link sends you to another provider. Your browser then contacts that provider, whose privacy terms apply.

Member accounts and events

For an email account, we process your first and last name, email address, account identifier and authentication records. Supabase Auth stores a hash of your password. If you choose Google sign-in, Google and Supabase exchange authentication information and basic profile information, such as your name and email; this site does not receive your Google password.

Providing the registration information is necessary to create an account. You can read public articles without providing it. The basis for account and requested event services is Article 6(1)(b) GDPR.

When you respond to an event, we link your attendance response and Zoom preference to your account and the event. Event administrators can view attendee details to organise the event. Liking a news item stores that choice with your account until you remove the like. Older profiles can also contain a school-grade field from earlier registration forms; the current registration form does not request it.

The former Mundial game is no longer available from the site. Records from earlier use can include predictions, points, league membership and messages, quiz answers, notification subscriptions, email preferences, banner interactions and error reports. Removing the game from navigation does not itself delete those records. You can include these records in a data-access or deletion request.

Browser storage

The member application uses local storage to keep your sign-in session and limit repeated sign-in attempts. The news feed uses session storage to restore your scroll position. The interactive Claude Code guide saves your chapter progress in local storage under ccq_en2. These functions support the account or guide you use; they are not advertising identifiers.

Signing out removes the application's current sign-in session. You can remove saved guide progress and other local preferences through your browser's site-data controls. Session storage normally ends when its browser tab is closed. Removing browser data does not delete your server-side account or records.

YouTube videos

Before activation, an article shows a local preview and a notice. No YouTube player is requested until you choose to play. Activating the player connects your browser to YouTube, a Google service, and transfers your IP address, browser/device details and the requested video. Google may store or read information on your device and associate activity with your Google account if you are signed in.

We use youtube-nocookie.com embeds, which do not mean that no personal data is processed. Activation is optional. The basis for this optional connection is your consent under Article 6(1)(a) GDPR and, where device access requires it, section 25(1) TDDDG. To stop further loading of a player on this page, reload the page and leave it unactivated. This does not undo information already sent. See Google's privacy policy for its processing and controls.

Messages and email

If you contact us, we process your email address and message to answer your request, using Gmail. Depending on the request, the basis is Article 6(1)(b) GDPR for a requested service, Article 6(1)(c) for a legal obligation such as a data-rights request, or Article 6(1)(f) for ordinary correspondence. Our legitimate interest is answering enquiries and resolving problems.

Account confirmation and password-reset messages support the account you requested. The former game's optional email digest used a separate opt-in preference and Gmail delivery. Contact us to withdraw an older digest opt-in or ask about an existing notification subscription; no new digest consent is obtained by registering for an account.

Providers and international processing

Our main providers are Vercel Inc. (website hosting), Supabase Pte. Ltd. (authentication, database and file storage), and Google (Google sign-in, YouTube and Gmail). Authorised administrators can access member and event records for operating the service. We do not make member email addresses part of the public blog.

These providers operate internationally, including outside the European Economic Area. A server's location does not cover every support, security or subprocessor operation. Supabase's data-processing addendum describes its processing and standard contractual clauses for relevant international transfers. Vercel describes its processing in its privacy notice; its published data-processing addendum states that it applies to Pro and Enterprise plans. This website currently uses Hobby, so we do not represent that agreement as confirmed for this account.

Google's privacy information above explains its international processing. You may contact us for information about the safeguards applicable to your data. Provider-contract coverage and transfer documentation remain under review; the links above are not a statement that those questions have all been resolved.

How long information remains

Account, event and older game records can remain after inactivity or after a feature is removed. We have not verified a fixed automatic deletion deadline for these records. You can ask us to assess whether particular records are still needed and to delete them where the law requires.

Correspondence may be kept while the enquiry or a related legal obligation or claim remains relevant. Provider security logs and backups have their own retention arrangements; we have not verified a single deletion deadline covering all provider copies. Browser-storage lifetimes are described above. We do not promise immediate deletion from every backup when an account is removed.

Your rights and how to make a request

Subject to the GDPR's conditions, you can request access and a copy of your personal data, correction, deletion, restriction, portability, and objection to processing based on legitimate interests. You can withdraw consent for optional processing without affecting processing that was lawful before withdrawal.

Email ofir.wienerman@gmail.com, preferably from the address linked to your account, and say what you need. We may need proportionate information to confirm your identity. Do not send your password. Account deletion is handled by a request, rather than a self-service delete button.

You can complain to a supervisory authority, including the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), or the authority where you live, work or believe an infringement occurred. A prior request to us is not required.

We do not use member data for automated decisions producing legal or similarly significant effects. Automated news sorting does not decide your eligibility for an account or event.

Changes

We update this page when the site's processing changes. The version date appears at the top.