Last updated: 25 October 2026. The German version is the binding one.
The controller for data processing on happicon.app and in the Happicon app is:
Robert KlingerWe are not required to appoint a data protection officer.
Happicon is hosted by Vercel Inc. (USA). On every visit, Vercel processes technically necessary data: IP address, time, requested address, amount of data transferred, browser identifier (user agent) and the previous page (referrer). This is needed to deliver the site, find errors and protect it from attacks. The legal basis is our legitimate interest in running the service securely and reliably (Art. 6(1)(f) GDPR). Vercel deletes these logs automatically after a short time.
Fonts and everything else the site needs are served from our own server. Visiting the site does not connect to Google Fonts, ad networks or third-party analytics services.
Your progress, coins, settings and your game account sign-in are kept in your browser's or the app's local storage. We don't set cookies. This storage is strictly necessary for the game you explicitly want to use, so no consent is required (Section 25(2) no. 2 TDDDG). As long as you have no game account, this data does not leave your device. You can delete it at any time by clearing the site data in your browser or uninstalling the app.
As soon as you open the daily puzzle, rate a puzzle, send a puzzle to friends or open a shared puzzle, the game creates a game account. It has a random account ID but no name and no e-mail. Depending on what you use, we store:
What others see: Your player name, avatar and puzzles are visible to anyone with a link to one of your puzzles, including in link previews in chat apps. Your name, avatar and weekly points are also visible to the players you are connected with through puzzles and, once you have points that week, to all players in the "All players" ranking. So it's best to pick a player name that isn't your full real name.
The legal basis is providing the game you want to use (Art. 6(1)(b) GDPR). We process reports of offensive puzzles to keep Happicon free of illegal and hurtful content (Art. 6(1)(f) GDPR and Art. 16 Digital Services Act). When three players report the same puzzle, it is hidden until we have reviewed it.
From the puzzle statistics we only compute totals, such as how many players solve a puzzle and how many come back the next day, to find puzzles that are too hard or unclear and to improve the game. Only we see these figures, never with your name. We never create a game account just for this; it is only recorded if you already have one. The legal basis is our legitimate interest in good puzzles (Art. 6(1)(f) GDPR); you can object at any time.
To keep accounts secure, our service provider Supabase stores the time, IP address and browser identifier of each sign-in session. This helps detect abuse and attacks (Art. 6(1)(f) GDPR).
You can choose to save your game account with an e-mail address or with Google to keep playing on other devices.
The legal basis is Art. 6(1)(b) GDPR. Other players never see your e-mail address.
When you write to us, we process your e-mail address, your name (if given) and the content to answer your request (Art. 6(1)(b) or (f) GDPR). E-mails to hello@happicon.app are forwarded by ImprovMX Incorporation (USA) to our Google mailbox (Gmail). We delete the correspondence once your request is settled, unless we have to keep it for legal reasons.
We share your data only with service providers we need to run Happicon. They process the data on our behalf and on our instructions (Art. 28 GDPR):
Under the Data Privacy Framework the USA provides an adequate level of protection for certified companies (adequacy decision of the European Commission of 10 July 2023, Art. 45 GDPR). Where there is no certification, we rely on standard contractual clauses (Art. 46(2)(c) GDPR) where the provider offers them.
Write to hello@happicon.app if you want your account and all its data deleted. Tell us the e-mail address of your saved account or your player name. We delete it within one month and confirm it to you. A delete button in the app will follow.
Happicon is a game for all ages and has no ads and no purchases. Anyone under 16 should save their account with an e-mail address or Google only with their parents' permission. Parents can write to us at any time if they want their child's account deleted.
We don't make automated decisions within the meaning of Art. 22 GDPR and don't build profiles for advertising. Providing your data is not required by law or contract; without a game account you just can't use the daily puzzle and the friends mode.
You have the right at any time to
Just write to hello@happicon.app.
You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one where you live. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)Where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims. An informal e-mail to hello@happicon.app is enough.
When Happicon gets new features or we use new service providers, we update this policy. The version published here applies.