Note: This English version is a courtesy translation. The German version is the legally binding one and prevails in case of any discrepancy. See Datenschutzerklärung (DE).
1. Controller
OK-MARKED LLC 30 N Gould St Ste R Sheridan, WY 82801, USA Represented by: Olaf Kranz Email: info@tt-playbook.de
2. What this site does not do
We keep data processing deliberately lean. On this site:
- we set no cookies without your consent — our Umami analytics is cookieless; Google Analytics does set cookies but is only loaded after you agree (see section 6),
- we load no external fonts (Inter is referenced in the stylesheet; in practice the browser falls back to the device’s system fonts),
- we embed no external videos, maps or social-media widgets,
- we pass no usage data to third parties for profiling or advertising.
3. Visiting the site (server logs)
When you visit the site, the hosting provider automatically processes technical access data:
- IP address (anonymised/truncated where technically possible)
- Date and time of access
- Requested URL
- Referrer URL
- Browser and operating system
Purpose: operation and security of the site, troubleshooting. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in stable, secure operation). Retention: up to 7 days, then deletion or anonymisation. Processor: Mittwald CM Service GmbH & Co. KG, Königsberger Str. 4–6, 32339 Espelkamp, Germany.
4. Contact form
Through our contact form we process the data you provide: name, email, selected topic, message.
Purpose: handling your request. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual/contractual) or (f) (legitimate interest in responding to requests). Retention: until the request is closed, plus statutory retention periods. Delivery provider: Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA — data processing agreement under Art. 28 GDPR; third-country transfers covered by EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
5. Waitlist (TT Playbook Player)
If you join the Player app waitlist, we process your email address via double opt-in: you first receive a confirmation email and are only added to the waitlist after clicking the confirmation link.
Purpose: informing you about the Player launch and closely related product updates. Legal basis: Art. 6 (1) (a) GDPR (consent). Withdrawal: you can withdraw your consent at any time, e.g. via the unsubscribe link in every email or by message to info@tt-playbook.de. Retention: until withdrawal or until launch and final launch communication. Processor: Resend (see above).
6. Usage analytics
6.1 Umami — cookieless, no consent required
We use Umami Cloud (Umami Software, Inc., 2261 Market Street #4458, San Francisco, CA 94114, USA), a privacy-friendly analytics tool that works without cookies and creates no personal profiles. Only aggregate, anonymised metrics are collected (page views, dwell time, referrer, device type, approximate country-level region). IP addresses are hashed and not stored.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in anonymous reach measurement to optimise our offering). Retention: aggregate metrics are stored permanently but contain no personal reference. Third-country transfer: server locations in the EU and USA; transfer based on the EU-U.S. Data Privacy Framework. Opt-out: since no cookies are set, an individual opt-out is not required. You can block the Umami script via any browser tracking blocker (uBlock Origin, Brave Shields).
More info: umami.is/privacy.
6.2 Google Analytics 4 — only with your consent
We use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The service sets cookies on your device and collects data about how you use this site: pages viewed, time on page, approximate location derived from a truncated IP address, device and browser, and the source you arrived from.
Cookies set: _ga and _ga_SEPRGNQPTC, each with a lifetime of two years,
used to recognise returning visitors.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). The Google Analytics script is only loaded after you click “Accept” in the banner. Before that, no connection to Google is made and no cookies are set. Without your consent we use only the cookieless Umami (see 6.1).
Withdrawal: You can withdraw your consent at any time with effect for the future, via the “Cookie settings” link in the footer of every page. Withdrawing deletes the Google Analytics cookies that were set.
No advertising features: We transmit no data for personalised advertising.
The consent signals ad_storage, ad_user_data and ad_personalization are
permanently set to “denied”.
Retention: User- and event-level data is deleted automatically after 14 months. Aggregated reports are retained without any personal reference.
Third-country transfer: Google also processes data in the USA, on the basis of EU standard contractual clauses and Google LLC’s certification under the EU-U.S. Data Privacy Framework. A data processing agreement under Art. 28 GDPR is in place with Google.
Further information: Google Privacy Policy and How Google uses data.
7. Data processing in the “TT Playbook Player” app
The following applies to the mobile TT Playbook Player app (iOS/Android), not to this website.
Local storage. All content you create (matches, opponent profiles, notes, statistics, profile pictures and videos) is stored exclusively locally on your device. We do not transfer this content to our servers and have no access to it. Only your account data (see “Account & sign-in”) is stored on a server, if you create an account with a password.
Account & sign-in (optional). You can use the app entirely without an account. If you create one, we process: your email address, your password (only as a cryptographic hash, never in plain text), your display name and an internally assigned user identifier (UUID). The sign-in service also logs technical security data (e.g. sign-in timestamps, IP address in short-lived server logs). Purpose: signing in and protecting your account, password reset, and the basis for future features such as cloud backup and device switching. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract). Retention: until you delete your account. Processor: Supabase, Inc. (970 Toa Payoh North #07-04, Singapore); your account database is operated in Frankfurt am Main (AWS region eu-central-1, Germany). Data processing agreement under Art. 28 GDPR; any third-country access is covered by EU Standard Contractual Clauses. Confirmation and reset emails are sent via Resend (see below). Deletion: at any time in the app via “Delete account” or by writing to info@tt-playbook.de; details at Delete account.
Camera, microphone and photos. The app requests access to your camera, microphone and photo library so you can select/take profile pictures and import or record videos of your games. This media stays local on your device. Access only occurs after your explicit system-level permission.
Purchases / subscriptions (RevenueCat). We use RevenueCat, Inc. (USA) to handle in-app subscriptions. This processes a pseudonymous app user identifier (your user UUID; for accounts from older app versions, transitionally the email address) and purchase-related data (product, purchase status, timestamp) to provide your Pro status across devices. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract). Payment itself is handled by Apple or Google; we do not receive payment data.
myTischtennis (optional, only when connected). If you connect your myTischtennis account, your credentials are used to retrieve your TTR rating. Communication happens directly with myTischtennis; credentials are stored only locally on your device.
Anonymous usage counts. To see which features are being used, the app counts certain events — for example “an opponent profile was created” or “the subscription screen was opened”. No identifiers are transmitted: no user or device identifier, no installation ID, no session identifier and no advertising ID. Only the event name, the operating system (iOS or Android) and the app version are sent. No usage profile can arise and no personal reference is possible; all that is stored is the number of events per day — on our own server in Germany, with no third party involved.
No advertising, no tracking. The app contains no ad networks and no cross-device tracking for advertising purposes.
8. Recipients and processors
We pass personal data only to the following processors, each on the basis of a data processing agreement under Art. 28 GDPR:
| Service | Purpose | Location |
|---|---|---|
| Mittwald CM Service GmbH & Co. KG | Hosting, server logs, mail relay | Germany |
| Supabase, Inc. | App account & sign-in (servers located in Frankfurt, Germany) | Singapore / EU hosting |
| Resend, Inc. | Transactional emails (contact, waitlist, app account confirmation and password reset) | USA (DPF-certified) |
| RevenueCat, Inc. | Handling in-app subscriptions (app only) | USA |
| Umami Software, Inc. | Cookieless website analytics (section 6.1) | USA (DPF-certified) |
| Google Ireland Limited | Google Analytics 4, only after consent (section 6.2) | Ireland / USA (DPF-certified) |
9. Third-country transfers
Where data is transferred outside the EU/EEA (in particular to Resend and RevenueCat in the USA, and to Supabase for support and administration access), this is based on the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses pursuant to Art. 46 GDPR.
10. Your rights
You have the right at any time to:
- access the personal data we hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing (Art. 21 GDPR),
- withdraw consent with effect for the future (Art. 7 (3) GDPR),
- lodge a complaint with a supervisory authority (Art. 77 GDPR).
To exercise your rights, a plain message to info@tt-playbook.de is enough.
11. No automated decision-making
No automated decision-making within the meaning of Art. 22 GDPR takes place on this site.
12. Changes to this policy
We update this policy when services or legal requirements change. The version published on this page is the one that applies. Last updated: 18 August 2026.