Legal
Privacy Policy
The following notice provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. For detailed information, please refer to the full privacy policy below.
1. Controller
The controller responsible for data processing on this website is:
Darko Konrad
Atzelbergstrasse 110
60389 Frankfurt am Main
Germany
Phone: +49 175 5259510
Email: info@kdsoft.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2. Hosting (Vercel)
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”). When you visit the website, Vercel automatically processes information transmitted by your browser in server log files. This includes in particular:
• IP address
• Date and time of the request
• Referrer URL
• Requested file and data volume transferred
• Browser type and version, operating system
Legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing a secure, stable and functional website). Since Vercel may also process data in the USA, the transfer is based on the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR) and the EU-US Data Privacy Framework. A data processing agreement (Art. 28 GDPR) is in place with Vercel. Server log files are retained for a maximum of 30 days and then automatically deleted.
More information: https://vercel.com/legal/privacy-policy
3. Email hosting (IONOS)
My email mailbox (info@kdsoft.de) is hosted by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. If you contact me by email to exercise your data subject rights or for any other reason, the content of your message is delivered through IONOS servers and stored in my mailbox.
Legal basis is Art. 6 (1) (f) GDPR (legitimate interest in handling enquiries) or Art. 6 (1) (b) GDPR for pre-contractual enquiries. A data processing agreement (Art. 28 GDPR) is in place with IONOS. Data processing takes place within the EU.
More information: https://www.ionos.com/terms-gtc/terms-privacy
4. Local storage and cookies
This website does not use tracking cookies, analytics, marketing pixels or third-party embeds. No data is transmitted to third parties for advertising or measurement purposes.
To make the application functional, the following entries are stored locally in your browser via the Web Storage API (localStorage). They never leave your device:
• mystery-bounty-session-v1 — the current prize distribution, reveal history and configuration so you can resume a session after a page reload.
• mystery-bounty-locale-v1 — your language preference (English / Deutsch).
• mystery-bounty-cookies-accepted-v1 — a flag remembering that you acknowledged this notice, so it is not shown again.
These entries are strictly necessary for the service and are stored on the basis of § 25 (2) No. 2 TDDDG. You can clear them at any time via your browser settings (“Clear site data” / cookies and site data).
5. Your rights
You have the following rights regarding your personal data at any time:
• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, an informal message to info@kdsoft.de is sufficient.
6. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is in particular the supervisory authority of the federal state in which you reside or the authority responsible for me:
Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163, 65021 Wiesbaden, Germany
https://datenschutz.hessen.de
7. SSL / TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address bar of the browser starts with “https://” and by the lock symbol in the browser bar.
8. Changes to this privacy policy
I reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to reflect changes to my services. The current version applies to your renewed visit.
Last updated: May 2026