Legal

Privacy policy

Protecting your data is important to me. This policy explains which data I process, when and why, which rights you have — and what you can do.

1. Data controller

Responsible for data processing on this website: Senol Göktürk, Struckerstraße 47, 42859 Remscheid, Germany. Contact by e-mail: kontakt@lon3s.com.

2. Hosting

The website is hosted by Strato AG (Strato AG, Pascalstraße 10, 10587 Berlin). To provide the website (web hosting, server logs) I process data on the basis of Art. 6 (1) (f) GDPR (legitimate interest in operating the website). Strato automatically stores server log files (among others IP address, time of access, pages requested); these are automatically deleted after a limited period.

3. Cookies

This website uses technically necessary cookies. In addition, if you give your consent, the cookie lon3s_consent is used to store your decision regarding the display of YouTube content. It contains no personal data and is stored for a maximum of one year. The technical cookies are set without consent because the website cannot function without them. The fonts (Inter, JetBrains Mono) are self-hosted, i.e. served by this server — no request is made to Google or any other service, and no external tracking tools are in use.

Essential cookies Always active

Technically necessary cookies are required for the operation of the website (e.g. session cookies for login, CSRF protection, language setting). They are always active, are set without consent and cannot be rejected, because the website will not function without them. Legal basis: Art. 6 (1) (f) GDPR.

Fonts (self-hosted) no consent required

The fonts Inter and JetBrains Mono are served directly from this server (self-hosted). No connection to Google Fonts or any other external service is established, no cookies are set and no data is transmitted to third parties — no consent is required. Legal basis: Art. 6 (1) (f) GDPR.

YouTube videos no consent required

Some projects embed YouTube videos. Until you have given consent, they are displayed only as a thumbnail image with a link — the thumbnail is loaded from i.ytimg.com (Google LLC); no connection to youtube.com is made and no video plays. With your consent in the cookie notice (checkbox “YouTube videos”), the videos are embedded in an iframe from youtube-nocookie.com (Google Ireland Ltd.). Your IP address and information about playback and device are transmitted to Google; Google may also set cookies. Legal basis: Art. 6 (1) (a) GDPR. Withdrawal: at any time via the “Cookie settings” link in the footer.

On your first visit a notice about this cookie practice appears, which you confirm with "Got it". You can display this notice again at any time via the "Cookie settings" link in the footer. For evidence purposes (GDPR) the time and the type of your acknowledgment are stored server-side. In doing so, neither your IP address nor your user agent or any other personal data is linked to this acknowledgment.

4. User account, progress and favorites

If you create an account, I process your e-mail address, your display name and your password. The password is stored exclusively as a secure cryptographic hash and not in plain text. The data serves to provide the functions: account management, saved project progress, favorites and the newsletter. If you activate two-factor authentication, the secret keys and recovery information required for it are additionally stored securely. For registration, e-mail changes and newsletter signup (double opt-in) as well as for password resets I send confirmation and link e-mails via an external SMTP service (Strato SMTP, sender: no-reply@lon3s.com). Legal basis: Art. 6 (1) (b) GDPR (contract performance) and, for the newsletter, Art. 6 (1) (a) GDPR (consent).

5. Newsletter

If you subscribe to the newsletter, I process your e-mail address exclusively for sending the newsletter. Signup is done via double opt-in: you receive a confirmation e-mail, and only when you click the link in it does the address become active. A newsletter sent in the future will contain an unsubscribe link. The confirmation e-mail already contains an unsubscribe link with which you can unsubscribe at any time. Legal basis: Art. 6 (1) (a) GDPR.

6. Analytics and tracking

This website does not embed any third-party analytics or tracking services (no Google Analytics, no fingerprinting, no ad networks, no third-party pixels). Instead, I count page views server-side myself: when you open a page, I store among other things the time of the request, the page requested, a shortened IP prefix, the browser you are using, your operating system, the transmitted user-agent string and, if available, the previous page you came from. A full IP address is not stored in the statistics: IPv4 addresses are shortened to a rough network range, IPv6 addresses are reduced to a rough prefix. This data is stored exclusively on this server, never shared with third parties, and no cookies are set for it. It only helps me to gauge the reach of my own content. To detect and defend against abuse, automated requests and repeated login or registration attempts, your IP address may be processed briefly; these data are deleted automatically after about 15 minutes or one hour, depending on the protection mechanism. In addition, for conspicuous automated requests (e.g. form bots), a shortened IP prefix, the user agent and the entered form values are stored for a maximum of 90 days. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in knowing the reach of this website and in protecting the website against abuse).

7. Your rights

With regard to your personal data you have the following rights against me: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). You also have the right to complain to a supervisory authority (Art. 77 GDPR). In Germany the competent authority for me is the data protection authority of the state of North Rhine-Westphalia (LDI NRW).

8. Data storage and transfer

Your data is stored exclusively on servers in Germany or the European Union. No transfer to third countries takes place as a general rule. An exception exists for the display of YouTube preview images: merely loading a preview image establishes a connection to Google, and in particular the browser's IP address is transmitted to Google. After your consent to the display of YouTube videos, the YouTube player is additionally embedded via youtube-nocookie.com. Further details can be found in the "YouTube videos" section. No transfer of your data to third parties for advertising purposes takes place.

9. Retention period

Your data is stored only as long as necessary for the respective purpose. Account data: until the account is deleted (you can request deletion of your account at any time by e-mail to kontakt@lon3s.com). Cookie decisions: indefinitely, as they contain no personal data. Statistics data (anonymised IP, browser, operating system, page, referrer): 90 days; the cleanup takes place automatically as part of the next corresponding request. Arcade scores: 90 days. Server logs: after the hoster's automatic deletion period.

10. Arcade & game high scores

In the arcade under /games you can play browser-based games. If you submit a score after the game ends, I store your freely chosen gamertag (maximum 3 characters), the score and the game. No account is required and no e-mail address is asked. For abuse prevention I process your IP address briefly in this context; only a shortened IP is stored in the table. Score entries are deleted automatically after 90 days.

11. Changes to this policy

I may adjust this privacy policy at any time to keep it in line with current law or functional changes. You will find the current version on this page.

Last updated: October 2026