Privacy Policy · Datenschutzerklärung

No account, no newsletter. Your quiz balance stays in your browser; the semester leaderboard only receives a random player ID, the BroDollars you earn and the display name you choose (or a placeholder). Multiplayer works with the same self-chosen display name - no registration. Analytics only runs if you explicitly say yes to the consent dialog - decline it and nothing is tracked. Ads come from Google AdSense; no ad is requested and no ad cookie is set until you decide in that same dialog, and personalised ads only run if you say yes.

Responsible for data processing on this site (Art. 4 (7) GDPR):

Nicolas Dumpe
Kiem-Pauli-Weg 41
85579 Neubiberg, Germany
E-mail: nicolas.dumpe@gmx.de

The site is hosted by Cloudflare, Inc. (USA) as static files on its global network. When you visit, Cloudflare technically necessarily processes connection data - IP address, date and time, requested URL, browser and operating system - to deliver the page and to defend against abuse; short-lived logs are kept only as long as needed to deliver, secure and debug the site. Legal basis: our legitimate interest in delivering and securing the site (Art. 6 (1) (f) GDPR). A data processing agreement per Art. 28 GDPR is in place with Cloudflare. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, so transfers to the USA rest on the EU Commission's adequacy decision (Art. 45 GDPR), with EU standard contractual clauses (Art. 46 GDPR) as a fallback.

Your scores, rank, current quiz run and your cookie-banner choice are stored in your browser's localStorage. The site's code reads this data locally in your browser on each visit (for example to show your balance and rank), but it is never transmitted to our servers - it exists so the site works (progress survives a reload). Storing and reading it is strictly necessary and requires no consent (§ 25 (2) TDDDG). Clearing your browser data removes it.

The optional multiplayer mode and the semester leaderboard run on infrastructure provided by Cloudflare, Inc. (USA). When you create or join a room, the following is processed on Cloudflare's servers: the display name you enter (free choice - it does not have to be your real name), a randomly generated player ID stored in your browser, your answers and scores during the game, and the connection data (including IP address) technically required to maintain the realtime connection. Room state is held only for the duration of a game and discarded when the room closes.

The semester leaderboard ranks players by the BroDollars they earn. Each time you solve a quiz question correctly, and at the end of every multiplayer game, the following is sent to Cloudflare's servers: your player ID, your display name (or an automatically generated placeholder such as "Excel Intern #4127" until you pick one), the question and answer involved (so the result can be re-checked) and the BroDollars earned, per subject. Leaderboard entries are kept for the semester they belong to and deleted at the latest 12 months after that semester ends.

Legal basis: our legitimate interest in running the game features you deliberately start - a duel or a leaderboard entry cannot work without a name and a score being shown (Art. 6 (1) (f) GDPR); both features are optional and the trainer itself never needs them. You can object at any time by not using them, and have your name replaced with the placeholder or your entry deleted by e-mailing the address in section 1. Display names are subject to the name rules in our terms, which also explain how to report a name. A data processing agreement per Art. 28 GDPR is in place with Cloudflare; Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, so transfers to the USA rest on the EU Commission's adequacy decision (Art. 45 GDPR). If the leaderboard service is unreachable, the site keeps working - the result simply goes unrecorded.

We use PostHog to understand which pages and questions get used - but only if you accept the consent dialog. Until you do, no analytics script loads, no cookie is set and no data is collected. If you decline, the site works exactly the same.

With your consent, PostHog stores identifiers (cookies / localStorage) and collects usage events: pages viewed, interactions, approximate device and browser information. We use PostHog's EU cloud, so analytics data is stored on servers in Frankfurt, Germany (provider: PostHog Inc., USA, under a data processing agreement with EU standard contractual clauses).

Legal basis: your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You give or refuse it in the consent dialog on your first visit, which asks about analytics and advertising (section 6) separately. You can withdraw it at any time with effect for the future via Cookie settings - withdrawal stops all capturing and resets the stored identifiers.

Retention: analytics data is deleted or irreversibly anonymized at the latest 24 months after collection.

Ads on this site are served by Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses cookies and similar identifiers to select ads, measure their performance, prevent fraud and - only with your consent - to show ads personalised to your interests, which may involve advertising partners listed in the consent dialog (IAB Transparency & Consent Framework).

Cookies involved: __gads, __gpi and __eoi (set for finance-bro.de and google.com, up to 13 months), IDE and test_cookie (doubleclick.net), plus FCCDCF, the first-party cookie that stores your consent choice (13 months, strictly necessary, § 25 (2) TDDDG). Your IP address and browser details are transmitted to Google when an ad loads.

Legal basis: your consent for personalised ads and for storing identifiers (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), given or refused in the consent dialog. Until you decide, no ad is requested and no advertising cookie is set (Google's Consent Mode starts as "denied" and ad requests are paused). If you decline, Google shows at most limited, non-personalised ads that neither set nor read advertising cookies; declining does not limit the site. You can change your choice any time via Cookie settings.

Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so the transfer rests on the EU Commission's adequacy decision (Art. 45 GDPR), with EU standard contractual clauses (Art. 46 GDPR) as a fallback. More at policies.google.com/technologies/ads; manage Google's ad personalisation at adssettings.google.com.

The Library and Bro Shop pages contain affiliate links to Amazon.de (Amazon EU S.à r.l., Luxembourg - Amazon PartnerNet), each labelled as advertising next to the link. The links are plain outbound links: no Amazon script, pixel or cookie is loaded on this site, and nothing about you is transmitted by us before you click. Once you click, Amazon processes your data (including a cookie that attributes a purchase to this site) under its own privacy policy: amazon.de/privacy. We only receive aggregated statistics (number of clicks and qualifying purchases), never your identity.

This site is made for university students. It is not directed at children under 16 and we do not knowingly collect their data; if you believe a child has left data here (for example a leaderboard name), e-mail the address in section 1 and it will be deleted.

If you write to us, the e-mail and its contents are processed to answer your inquiry (Art. 6 (1) (b) and (f) GDPR) and deleted once the matter is closed, unless retention duties apply.

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interest (Art. 21). Consent can be withdrawn at any time (Art. 7 (3)). To exercise any of these, e-mail the address in section 1.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR) - for this site that is the Bavarian Data Protection Authority (BayLDA, Ansbach), though any EU supervisory authority will forward your complaint.

This policy is updated whenever the site's data processing changes (for example when analytics goes live or an ad network is connected). The date at the top tells you the last revision.