Last updated 18 October 2026

Privacy Notice

This notice explains what personal data is processed when you visit pascal-schrage.com or llamigos.pascal-schrage.com, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

In short: neither site uses cookies, analytics or tracking, or loads anything from other companies. The server logs record no IP addresses and are deleted after 14 days. Only the Llamigos game passes data on: in its storytelling and translation features, what players type is sent to Anthropic for processing.

1. Who is responsible

The controller responsible for processing personal data on both sites is:

Both sites are run privately by one person. Write to this email address about anything in this notice, including to exercise your rights.

2. Hosting

Both sites run on a server rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its data centre in Nuremberg, Germany. Hetzner processes data only on my behalf and under my instructions, under a data processing agreement as required by Art. 28 GDPR.

3. Server logs

To deliver a page, your browser has to connect to the server, so your IP address reaches it. The server uses it to send the response and does not store it. For every request it writes one log entry with:

• the date and time of the request,
• the site and the address requested (for example /privacy/),
• the request method and protocol,
• the response status, its size and how long it took.

The log does not contain your IP address, your browser's identification (user agent) or the page you came from (referrer).

Purpose and legal basis: keeping the sites running and secure, and finding faults. This is my legitimate interest under Art. 6(1)(f) GDPR.

Retention: log files are deleted automatically, so that no entry is kept longer than 14 days.

4. Cookies and browser storage

Neither site sets cookies, uses analytics or tracking tools, or loads fonts, scripts or other content from third parties. Fonts and icons come from the same server as the page.

A few settings are kept in your browser's local storage, only on your device, and are never sent to me:

• on pascal-schrage.com, whether you chose the light or the dark theme (pascal-theme), once you use the switch;
• on llamigos.pascal-schrage.com, what section 7 describes under “On your phone”.

Storing and reading these entries is strictly necessary for a function you asked for, so it is allowed without consent under § 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can delete them at any time in your browser's settings.

5. Contacting me

If you write to me, I process your message and your contact details to answer it. The legal basis is my legitimate interest in replying to you, Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where your message concerns a contract or steps before one. I delete the correspondence once your request is dealt with, unless the law requires me to keep it longer.

6. Links to other sites

This site links to GitHub and LinkedIn. They are plain links: nothing is loaded from those services until you follow one. From then on, their privacy policies apply.

7. The Llamigos party game

Llamigos is a party game. One computer shows the game on a TV, and players join with their phones at llamigos.pascal-schrage.com using a room code. Nobody needs an account, an email address or their real name.

What the game processes

• Your nickname (up to 12 characters) and what you enter during a game: answers, choices, votes and plans. The game server keeps this in memory only, for the room you are in, and deletes it when the room closes or the server restarts. It is never written to disk or to the logs.
• Your IP address, held in memory for up to one minute to limit how often one device may try to join a room, so that nobody can guess their way into other people's rooms. It is never logged.
• Log entries as described in section 3, plus game events such as a room opening or closing, with the room code, times and technical codes, and for the AI features the amount of text processed and its cost. They contain no nicknames, no text players typed and no IP addresses, and are deleted within 14 days.

Purpose and legal basis: running the game you chose to join. This is my legitimate interest under Art. 6(1)(f) GDPR, which matches yours in playing.

The storytelling and translation features

In the story game Llamalot, the game sends the players' nicknames and hero names and what they type to the API of Anthropic so that its AI model can write the story. When players in a room choose different languages, what they type is sent the same way to be translated. Nothing is sent in games that do not use these features.

• Recipient: Anthropic, PBC, USA, as my processor under its data processing addendum (Art. 28 GDPR).
• Transfer to the USA: safeguarded by the EU Standard Contractual Clauses (controller to processor) that form part of that addendum, Art. 46(2)(c) GDPR.
• Retention at Anthropic: Anthropic deletes the content within 30 days. It may keep content for up to two years if its automated systems flag it as breaking Anthropic's usage policy, or longer where the law requires. Under its commercial terms, Anthropic may not use this content to train its models.
• Legal basis: my legitimate interest in offering these features, Art. 6(1)(f) GDPR. You can play without them by choosing a game that does not tell stories and a room where everyone uses the same language.

Please use a nickname, not your full name, and don't type personal details about yourself or others into the game.

On your phone

The game's page keeps three things in your phone's browser:

• the room code and a random seat code, so that you get your seat back if the connection drops (local storage, until you leave the room or a new game replaces it);
• the language you chose (local storage);
• text you have not sent yet, so a reload does not lose it (session storage, deleted when you close the tab).

Section 4 explains why this needs no consent.

Children

Families may play Llamigos together. The game asks for no age and no identifying details. Children should play with a parent or guardian who has read this notice.

8. Your rights

Under the GDPR you have the right to:

• access the personal data I hold about you (Art. 15),
• have incorrect data corrected (Art. 16),
• have your data erased (Art. 17),
• have processing restricted (Art. 18),
• receive your data in a portable format (Art. 20).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work, or where you believe the infringement took place.

Because the game deletes nicknames and answers when a room closes and the logs hold no IP addresses, I usually cannot link any stored data to you afterwards. I will tell you if that is the case.

You are not required by law or contract to provide personal data. Without a nickname you cannot join a game. I do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Changes to this notice

I update this notice when the sites change what they do with data. The date at the top shows the current version.