Privacy

Privacy Policy

This privacy policy explains how personal data is processed when you visit the Mutexmachine website and use the browser-based system architecture game.

1. Controller

Sandro Vogel
Klingsorstr. 66
12167 Berlin
Germany

Email: sandrovogel@pm.me

2. Local Game State

Mutexmachine runs in your browser. The game stores progress and preferences locally in your browser's local storage. This may include the selected screen, scenario progress, architecture choices, simulation history, completed scenarios, best contract scores, tutorial state, sound preference, pending deployments, and incident history.

This local game state is stored on your device and is not sent to us for ordinary gameplay. We do not have access to your browser's local storage. You can remove it by clearing this site's browser data.

3. Technical Access Data

When you visit the website, technically necessary access data may be processed to deliver the site and maintain security and stability. This may include your IP address, date and time of access, requested URL, referrer URL, user agent, status codes, and error data.

4. Purposes and Legal Bases

The website is provided on the basis of Article 6(1)(f) GDPR. The legitimate interest is to provide a secure, stable, and functional website and browser game.

Local browser storage is used only where necessary to provide save-state, progress, tutorial, and preference features requested by the user. The legal basis for storing and reading this information on your device is Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

5. Hosting

This website is intended to be hosted on Vercel. As part of hosting, Vercel may process technically necessary access data, including IP addresses, request metadata, timestamps, status data, and error data.

Vercel may process data in the United States and other countries outside the European Economic Area. Where required, such transfers must be based on appropriate safeguards, such as standard contractual clauses or other legally recognized mechanisms.

6. Browser Storage

Mutexmachine uses local browser storage for gameplay state and preferences as described above.

7. Voluntary Feedback

If you use the feedback form, the selected sentiment, optional message, current screen, topic identifier, a shortened user agent, and timestamp are sent to a serverless endpoint and forwarded to a configured feedback webhook. The form is voluntary and is intended only for product feedback and troubleshooting. We do not add identifiers or store IP addresses in the feedback payload.

8. Recipients

For ordinary website access, recipients of personal data may include technical hosting providers, currently expected to be Vercel. Feedback messages may be processed by the configured webhook provider. Local gameplay data is not transmitted to us and therefore has no external recipients unless you choose to share screenshots, exports, feedback, or gameplay information yourself.

9. Retention

Local game state remains in your browser until you clear the site's browser data. Technical access logs and voluntary feedback are retained only as long as necessary for operation, product improvement, security, troubleshooting, and abuse prevention, unless longer retention is legally required.

10. Your Rights

Subject to the statutory requirements, you have the right to request access, rectification, erasure, restriction of processing, data portability, and objection to processing. You also have the right to withdraw consent with effect for the future where processing is based on consent.

Because local game state is not transmitted to us, these rights mainly concern technical data processed when the website is accessed or hosted.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. In Berlin, the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.

12. Automated Decision-Making

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

13. Changes to This Policy

We may update this privacy policy if the application, hosting setup, or legal requirements change. The current version is published on this page.

Last Updated

June 11, 2026