Legal Notice

Last updated: 12 November 2026

Content

I build and run the games and tools listed here in my free time. I try to keep them working and correct, but I cannot guarantee that they are complete, accurate or always available. They are provided as they are, free of charge.

Links to other websites

This site links to external pages, such as GitHub. I have no control over their content and am not responsible for it. If I become aware of illegal content behind a link, I will remove the link.

Copyright

Text, design and code on this site are mine unless marked otherwise. The fonts Orbitron and VT323 are used under the SIL Open Font License (Orbitron, VT323). The games use further fonts under the same license (Cinzel, PT Sans, Fredoka, Gochi Hand, Patrick Hand, Young Serif, Hanken Grotesk, Geist Mono); each game serves its license files next to the fonts.

Krackel is an unofficial companion app for the drawing game Krakel Orakel. It is not affiliated with or endorsed by the game's publisher. Recipes runs on the open-source software Mealie (AGPL-3.0). Song search results in Song Guesser come from the Spotify Web API; Spotify is not involved in or responsible for this game.

Terms of Use for Accounts

These terms apply to the two services with accounts: Zotero Sync and Recipes. Accounts are by invitation only.

• Free and private. Both services are free, private favours for friends, family and colleagues. There is no contract for payment and no service level.
• No guarantee. I try to keep them running, but they can be slow, offline or lose data. I make no backups of Zotero Sync data; keep your own copy of anything important. Zotero itself keeps your library database on your computer and on zotero.org; only attachment files are stored here.
• Your content. You stay responsible for what you upload. Do not upload anything illegal, anything you have no right to share, or other people's sensitive personal data.
• Ending. You can ask me to delete your account at any time; I then delete it and its data. I may close accounts or end a service, and will tell you by email beforehand where I can, so you can download your data.
• Liability. As these are unpaid, I am liable only for intent and gross negligence, as far as the law allows.

Privacy Policy

This policy covers this front page on patola-mountains.com and robin-kollmann.de (with and without www.) and every service listed on it, on its subdomains of both domains. Sections 1 to 7 apply to all of them; section 8 adds what each service does on top.

1. Controller

The controller under the General Data Protection Regulation (GDPR) is Robin Kollmann, reachable at robin.kollmann@gmail.com.

2. What the front page does not do

• No cookies, no local storage.
• No analytics, tracking pixels or advertising.
• No external resources: fonts, styles and images are all served from this server, so your browser does not contact Google or any other third party when you open this page. The same is true for all services, with one exception that you have to switch on yourself: the YouTube player in Song Guesser.
• No contact forms. If you email me, I use your message and address only to reply.

3. Server log files

When you open this page or any of the services, the web server (Caddy) automatically records a log entry for each request containing:

• your IP address,
• date and time of the request,
• the requested address (host and path) and HTTP method,
• the status code and size of the response,
• the browser identifier (user agent) and, if your browser sends it, the referring page.

Purpose: keeping the server running and secure, finding errors and defending against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
Retention: log files are deleted automatically after 14 days at the latest. The services themselves keep no access logs of their own. They are not combined with other data, not used to build profiles and not shared, unless required by law.

4. Hosting

The server is rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, and is located in the EU. Hetzner processes data only on my behalf under a data processing agreement (Art. 28 GDPR).

5. Encryption

All connections use HTTPS (TLS). Certificates are issued automatically by Let's Encrypt; this does not involve any visitor data.

6. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). To use these rights, email me.

You can also complain to a data protection supervisory authority. For this website, that is the Dutch Autoriteit Persoonsgegevens, or the authority in the EU country where you live or work.

7. Changes

I update this policy when the site changes. The date at the top shows the current version.

8. The individual services

None of the services use cookies for tracking, analytics or advertising. Some keep small settings in your browser's local storage (for example your nickname, so you don't have to type it again). That data stays on your device, is not sent anywhere on its own, and is needed for the feature you use (Art. 6(1)(f) GDPR; strictly necessary storage under Art. 11.7a of the Dutch Telecommunications Act). You can delete it at any time in your browser's site data settings.

Game rooms are held in the server's memory only. Nicknames, room codes and game moves are visible to the other players in your room and disappear when the room ends or the server restarts, unless said otherwise below. Please use a nickname, not your full name.

Gridlock

Your nickname and current room code are kept in local storage so you can rejoin after losing the connection; your label setting is kept there too. Rooms exist in memory only.

Scrapshot

Your nickname and last room code are kept in local storage. Rooms exist in memory only.

Antics

Your nickname, ant color/hat and sound setting are kept in local storage on your phone; the TV screen remembers its room code for the current tab (session storage). Colonies are saved on the server permanently: the colony name you choose, when it was created and last played, and the stars and best score per level. The list of colonies is shown to everyone who opens the TV screen, so don't use personal names. Player nicknames are not saved with the colony. Email me to have a colony deleted.

Krackel

Your name and a random player ID are kept in local storage so you keep your seat when you reload. Everything else (words, turn order, votes) is held in memory only and is gone when the game is reset.

Bingo

Which tiles you ticked, and your language, are kept in local storage. The board is shared: when someone replaces a tile's task, the new text, its translations and the time are saved on the server and shown to everyone. Nothing about who changed it is stored. To translate a new task into all languages, the server sends its text (only the text, not your IP address) to the OpenAI API (OpenAI, USA); under OpenAI's API terms it is not used to train their models. Please don't write personal information into tiles.

Song Guesser

• Your name and room code are kept in session storage (cleared when you close the tab). Names, song picks and guesses are visible to your room and held in memory only.
• When you search for a song, the search words go from this server to the Spotify Web API (Spotify AB, Sweden). Your IP address is not passed on. Album covers and previews are also loaded through this server, so your browser does not contact Spotify.
• YouTube player, only with your consent. Songs are played with the YouTube player on the host's screen. Nothing is loaded from YouTube until the host clicks Load YouTube player. Then the browser connects to YouTube, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google receives your IP address and browser details and may store data on your device; data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. The player runs in YouTube's privacy-enhanced mode (youtube-nocookie.com).
  Legal basis: your consent (Art. 6(1)(a) GDPR). It is remembered for the current tab only; close the tab to withdraw it. See Google's privacy policy.

Broken Model Hunt

Your answers and progress are kept in local storage only and are never sent to the server. The fonts are embedded in the page.

Plant Monitor

Shows soil moisture readings from sensors in my own plant pots. The page collects nothing about you; your browser connects back to this server (MQTT over a secure WebSocket) to receive live readings.

Recipes

• Accounts are by invitation. Mealie stores your name, username, email address, a hashed password, your settings, and the recipes, meal plans and shopping lists you create. Your recipes are visible to the members of your group.
• Login cookie: when you log in, a cookie keeps you logged in. It is needed to use your account and is not used for anything else.
• AI features: if you use the AI-assisted recipe import or ingredient parsing, the recipe text, web page content or image you submit is sent to the OpenAI API (OpenAI, USA) to turn it into a recipe. Under OpenAI's API terms this data is not used to train their models. Don't submit anything personal through these features. Nothing is sent to OpenAI unless you use them.
• Importing from a link: the server fetches the recipe page itself; your browser does not contact that site.
• Legal basis: providing the account you asked for (Art. 6(1)(b) GDPR). Retention: until you or I delete the account.

Zotero Sync

• Sign-up (zotero-signup.patola-mountains.com): you choose a username and password. The password is stored only as a bcrypt hash. I get an email with your username (sent through Yahoo Mail, Yahoo EMEA Limited, Dublin, Ireland) and approve or ignore the request. Requests that are not approved are deleted after 7 days.
• Sync (zotero.patola-mountains.com): Zotero uploads your attachment files (PDFs, snapshots, notes) to a folder only your account can access. These files can contain personal data, for example in notes or annotations. I don't look at them, but as the server operator I technically could.
• Legal basis: providing the account you asked for (Art. 6(1)(b) GDPR). Retention: until you or I delete the account. No backups are made.