### Privacy Policy

1. Controller

Contact:
Heinrich Ahrens
Pollertstraße 8, 26892 Kluse, Germany
Phone: +49 4963 1740
E-mail: heinz.ahrens@web.de

2. Legal Basis
The processing of your data is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and user-friendly provision of this quiz service.

3. Data Collection and Storage
To ensure the security of our website (e.g., to prevent attacks or for error diagnosis), server log files (such as IP address, date, time, and accessed page) are created with every visit. These data are deleted as soon as the purpose of storage no longer exists and no overriding legal provisions require further retention. Usage is anonymous and does not require registration. This website does not use any analysis tools. Solved riddles are color-coded for your orientation. Progress is neither saved on the server nor in cookies or other persistent local storage media. Therefore, it is completely lost when the page is reloaded or the browser is closed. To protect the security of data transmission, we use SSL/TLS encryption in accordance with the current state of technology.

4. Map Services
To display interactive maps, we use the self-hosted library Leaflet as well as map services from OpenStreetMap and Esri. We utilize a privacy-friendly "two-click solution" for this. The maps are only loaded after you have given your explicit consent by starting a tour. When the map is loaded, data – in particular your IP address – is transmitted to the respective provider to enable the map display. The providers process this data independently in accordance with their own privacy policies.

5. Libraries
Additionally, we use the self-hosted libraries Leaflet.PolylineDecorator, Piexifjs, qrcodejs and Pica. Processing takes place exclusively locally in your browser. The Pica library is only used when uploading new images.

6. Location Data
The "Find location" function uses GPS only with your explicit permission. The data remains locally in your browser.

7. Your Rights
You have the right to information, correction, deletion, and restriction of processing in accordance with the GDPR. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority if you believe that the processing of your personal data is unlawful.