Privacy policy

for the website hitrally.net · Last updated: 18 October 2026

1. Controller

3D Daniel Obenland, owner Daniel Obenland
Henkelgraben 21, 74360 Ilsfeld, Germany
Email: info@obenhinaus.de

We are not legally required to appoint a data protection officer. Please send any data protection questions to the email address above.

2. Scope

This policy applies to the website hitrally.net and all its subpages (including www.hitrally.net). The apps “HitRally: Time Attack” and “HitRally Mini”, and the game server api.hitrally.net, which only the app “HitRally: Time Attack” connects to, are covered by the app privacy policies linked above.

3. Visiting the website

3.1 What data is processed

When you open a page, your browser automatically sends data to our server. Without it, the page cannot be delivered:

• your IP address,
• date and time of the request, the requested address (URL) and the amount of data transferred,
• information from your browser: browser identifier (user agent), preferred languages and, if your browser sends it, the address of the previously visited page (referrer).

3.2 Purpose and legal basis

We process this data to deliver the website to you and to keep it secure and stable. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a working and secure website.

3.3 Retention

Our web server keeps no access log. Connection data is processed in memory only for the duration of the transfer. If a technical error occurs (for example an aborted or faulty connection), the web server may write an error message to the server's system log that can contain an IP address. This log is deleted automatically after at most 14 days and is only read to fix errors.

3.4 Language selection

The start page forwards you to the matching language version based on your browser's language setting. This happens only in your browser; your choice is not stored.

4. No cookies, no tracking, no third-party content

We set no cookies and use neither local storage nor similar technologies. We do not store or access information on your device unless this is strictly necessary to display the page (Section 25(2) no. 2 TDDDG, for example your browser's normal cache). There are no analytics, statistics, advertising or tracking services, no social media plugins, no embedded videos, maps or fonts from other providers and no forms.

5. Hosting

The website and the game server run on a virtual server that we rent from Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus, and operate ourselves. Server location: Germany (European Union). The provider supplies the data centre, network and virtual server and processes the data listed above only on our behalf. A data processing agreement under Art. 28 GDPR is in place; where the provider may access data from outside the European Economic Area as part of its services, the European Commission's Standard Contractual Clauses apply (Art. 46(2)(c) GDPR). Legal basis: Art. 6(1)(f) GDPR.

All pages are transferred encrypted via HTTPS (TLS).

6. Contact by email

If you email us, we process your email address, your name if given and the content of your message in order to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract (for example a purchase in one of our apps), otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering requests). We delete the message once your request has been dealt with, unless a statutory retention obligation applies (for example for business letters under commercial or tax law). Our mailbox is hosted by an email provider that processes messages on our behalf (Art. 28 GDPR).

7. Links to the App Store and Google Play

The App Store and Google Play buttons are plain links. Only when you tap one does your device open Apple's or Google's offering; their privacy policies apply there. Nothing is sent to Apple or Google before that. The short links under hitrally.net/app/… forward your device directly to the matching store depending on its operating system; the operating system is detected only in your browser.

8. Recipients

The only recipients of data are the processors named above (hosting, email). Data is not passed on to other third parties unless we are legally obliged to do so. We do not sell data, we make no automated decisions and there is no profiling.

9. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Just send us an email.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

You are not required by law or contract to provide data. Without the connection data from section 3, however, the website cannot be displayed.

10. Security

All pages are transferred encrypted (HTTPS) only. The server is protected against unauthorised access and receives security updates regularly.

11. Changes

We update this policy when the website or the legal situation changes. The version published here applies.

Deutsche Fassung: Datenschutzerklärung