Privacy

Who is responsible

The controller for the processing described here is:

Name

Peter Griffin

Address

Oberholzweg 10, 73110 Hattenhofen, Germany

Email

vexacasino@protonmail.com

Cookies — there are none

This site sets no cookies. That is measured, not phrased: after a full page load in a cleared browser profile, the cookie store is empty.

There is no analytics, no advertising, no audience measurement and nothing embedded from a social network. So there is nothing to ask your consent for — and therefore no consent banner.

What the browser does store exists solely to provide the service you asked for (§ 25 Abs. 2 Nr. 2 TDDG).

What is stored in your browser

Four entries, all local to your device. None of it leaves the browser on its own, and you can clear all of it through your browser's site data.

Sign-in session

Keeps you signed in. Without it you would have to sign in again on every page. Technically an IndexedDB store belonging to the Firebase SDK.

Demo or real money

Remembers which wallet you had open last.

Favourites

The games you starred.

Referral code

Only if you arrived through an invite link. It is redeemed at sign-up and deleted afterwards.

What is stored on the server

An account only exists once you register. Anyone who is just looking around or playing the demo gets an anonymous session with no name and no email address attached.

Account

Username, email address, and when you registered. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

Balance and ledger

Every deposit, stake, win and payout, with its time and amount. This is the record of where your money went — without it a balance could not be evidenced. Contract performance, plus statutory retention under commercial and tax law, Art. 6(1)(c) GDPR.

Payouts

The receiving crypto address and the transaction hash of the transfer.

Support messages

Your message and the address we should reply to. Legitimate interest in answering you, Art. 6(1)(f) GDPR.

IP address

Processed to limit overload and automated abuse, but only counted in memory and never written down. It appears in no database and is gone when the server process ends. Legitimate interest, Art. 6(1)(f) GDPR.

Who else sees it

Three providers, all necessary to run the site. When you open a page, your browser itself contacts Google — your IP address is transmitted in the process, before you register anything.

Google (Firebase)

Sign-in and database. The database is held in the EU (europe-west region) and the application servers are in Frankfurt. The provider is Google Ireland Limited; access from the United States cannot be ruled out.

Vercel

Delivers the site. Every request passes through their network; the application itself runs in Frankfurt. Vercel Inc. is based in the United States.

NOWPayments

Crypto deposits and payouts. Only involved once you start a payment — at that point you leave this site, and the payment details are created there rather than here. Of a deposit we store only the amount, the currency and the status.

How long

Account data for as long as the account exists. We will close it whenever you ask.

Ledger entries are kept beyond that. They evidence which money actually moved; deleting them would make the books wrong, and statutory retention periods of up to ten years apply.

Support messages are deleted once the matter is settled.

Your rights

You may request access to your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format (Art. 15–21 GDPR). An informal email is enough.

You may also complain to a data protection supervisory authority. The competent one here is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

18 and over

This service is for adults only. Accounts belonging to minors are closed and their data deleted.