Privacy Policy - Trick the Bot

01

General Information

This Privacy Policy explains how data is handled when you play "Trick the Bot". We are committed to protecting your privacy and only process the absolute minimum of data required to provide a smooth and secure gaming experience.

02

Hosting & Server Logs

Our website is hosted on a secure server in Austria (World4You). When you visit, the server automatically collects standard log data (IP address, browser type, time of request) for stability and security. This data is not used to identify you personally.

03

Artificial Intelligence (Google Gemini)

To play the game, your category choice and yes/no answers are sent to the Google Gemini API to generate the bot's responses.

We do not ask for or store your name, email, or any personal identifiers.
Please do not enter sensitive personal information into the game.
Data sent to Google is subject to Google's own privacy policies.

04

External Image APIs

When the bot makes a guess, your browser connects to external APIs to fetch the corresponding image.

Wikipedia (Wikimedia Foundation API): Used for all categories except Internet Meme. Your IP address is visible to Wikimedia servers during this process. Wikimedia's privacy policy applies.
Klipy API (api.klipy.com): Used for Internet Meme categories to fetch animated GIFs. Your IP address is visible to Klipy's servers during this process.

05

Google Web Fonts

We use Google Web Fonts for consistent typography. Your browser establishes a direct connection to Google's servers to load fonts, making your IP address visible to Google. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a uniform presentation.

06

Google Analytics

We use Google Analytics to understand how visitors interact with the site. Data is transmitted to and stored by Google, potentially on servers in the United States.

IP anonymization is enabled — your IP is truncated before transmission.
Analytics collects pages visited, time on site, and device type.
This data is used exclusively to improve the game experience.
We do not combine Analytics data with personally identifiable information.
Opt out via the Google Analytics Opt-out Add-on.

Legal basis: your consent (Art. 6(1)(a) GDPR), provided via our cookie consent banner.

07

Cookies & Consent

When you first visit, a cookie consent banner is shown. We use the following cookie types:

Essential cookies: Required for the game to function (session management for rate limiting). No consent required.
Analytics cookies: Google Analytics — requires your consent.

You can withdraw consent at any time by clearing browser cookies or adjusting browser settings.

08

Game Statistics Log

To improve game performance, we log anonymous game results on our server. Each entry contains:

Timestamp: Date and time of the result.
Category: The chosen category (e.g., Person, Animal, Meme).
Result: WIN or LOSS.
Concept: Voluntarily submitted by the player after a loss, or the AI's correct guess after a win.
Round: Number of questions asked.

No IP addresses, usernames, or device identifiers are stored in the game log. This data is used exclusively for internal analysis and is never shared with third parties.

IP addresses used for rate limiting are stored in hashed form (SHA-256) in temporary server files and are automatically deleted after 24 hours. Raw IP addresses are never stored.

Legal basis: legitimate interest in improving the service (Art. 6(1)(f) GDPR).

09

Your Rights (GDPR)

Under GDPR, you have the right to access, correct, or delete your data. Because we store no personal profiles, there is practically nothing to delete. For questions, contact us via our Legal Notice.