Privacy Policy (Datenschutzerklärung)

1. Controller and Data Protection Officer

Responsible for data processing:

Marvin Messenzehl

c/o IP-Management #7928

Ludwig-Erhard-Str. 18

20459 Hamburg

Germany

Email: info@marvinmessenzehl.com

2. General Information

This privacy policy explains what personal data we collect when you use Benchmark, how we use it, and what rights you have regarding your data.

We take the protection of your personal data seriously and process your data in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection regulations.

3. Data We Collect

4. How We Use Your Data

• Create and manage your user account
• Store and display your game statistics and analysis
• Provide the core functionality of Benchmark
• Ensure the security and proper functioning of our service
• Respond to your inquiries and support requests

We do not use your data for marketing purposes, and we do not sell or share your data with third parties for their marketing purposes.

5. Data Storage and Security

5.1 Storage Location

Your data is stored securely on servers provided by Supabase, located in Germany (EU). This ensures compliance with European data protection standards.

5.2 Frontend Hosting

Our application frontend is hosted by Vercel. Vercel may process technical data (such as IP addresses) necessary for content delivery. You can review Vercel's privacy policy at: https://vercel.com/legal/privacy-policy

5.3 Security Measures

• Encrypted password storage
• Secure HTTPS connections
• Regular security updates
• Access controls and authentication

6. Data Retention

• Active accounts: Your data is stored as long as your account remains active
• Deleted accounts: When you delete your account, all associated data (account information and game logs) is permanently deleted from our systems

We may retain anonymized or aggregated data for statistical purposes, but such data cannot be linked back to you.

7. Third-Party Services

7.1 Supabase (Database and Authentication)

We use Supabase for data storage and user authentication. Supabase processes data on our behalf and is bound by a data processing agreement. Supabase servers are located in Germany (EU). More information: https://supabase.com/privacy

7.2 Vercel (Hosting)

Our frontend is hosted on Vercel's infrastructure. Vercel may process technical data necessary for content delivery. More information: https://vercel.com/legal/privacy-policy

7.3 Buy Me a Coffee (Optional Donations)

If you choose to support Benchmark through Buy Me a Coffee, you will be redirected to their external platform. Any payment information is processed solely by Buy Me a Coffee, and we do not have access to your payment details. Please review their privacy policy: https://www.buymeacoffee.com/privacy-policy

7.4 Sentry (Error Monitoring)

We use Sentry (Functional Software, Inc.) to monitor and diagnose errors in order to maintain the stability and security of the service. When an error occurs, technical information such as error messages, stack traces, the URL path, and basic device/browser metadata may be transmitted to Sentry. We aim to avoid processing personal data in error reports and do not send content you submit within the application.

Legal basis: Our legitimate interests in operating a reliable and secure service (Art. 6(1)(f) GDPR). Data may be processed in the United States subject to appropriate safeguards (e.g., Standard Contractual Clauses). Additional automatic scrubbing of sensitive fields is applied in Sentry where feasible. More information: https://sentry.io/privacy/

Optional features: If enabled, performance monitoring and/or session replay may collect additional technical telemetry such as request timings and UI interaction metadata. Where these are active, we configure sampling to limit volume and avoid capturing sensitive content.

8. Cookies and Local Storage

Benchmark does not use tracking cookies or analytics cookies. We only use essential local storage to maintain your login session, which is technically necessary for the application to function.

Local Storage: Your browser stores authentication tokens locally to keep you logged in. This data remains on your device and is not transmitted to third parties.

9. Your Rights Under GDPR

9.1 Right of Access (Art. 15 GDPR)

You can request information about the personal data we store about you.

9.2 Right to Rectification (Art. 16 GDPR)

You can request correction of inaccurate personal data.

9.3 Right to Erasure (Art. 17 GDPR)

You can request deletion of your personal data at any time by deleting your account through the application settings. All associated data will be permanently removed.

9.4 Right to Data Portability (Art. 20 GDPR)

You can request a copy of your data in a structured, commonly used format.

9.5 Right to Object (Art. 21 GDPR)

You can object to the processing of your personal data under certain circumstances.

9.6 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

10. Contact for Data Protection Inquiries

If you have questions about data protection or wish to exercise your rights, please contact us:

Email: hello@marvinmessenzehl.com

We will respond to your inquiry within 30 days as required by GDPR.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. We will notify users of any significant changes by updating the "Last updated" date at the top of this policy.

12. Legal Information Regarding Pokémon Content

Benchmark is an unofficial fan-made tool and is not affiliated with, endorsed by, or connected to The Pokémon Company, Nintendo, Creatures Inc., or DeNA. Pokémon, Pokémon TCG, and Pokémon TCG Pocket are trademarks of The Pokémon Company.

All Pokémon-related names, images, and trademarks are property of their respective owners. This tool is provided for informational and educational purposes only.