Diese Datenschutzerklärung ist auf Englisch verfasst, der Produktsprache dieser Website. Das Wichtigste auf Deutsch: Verantwortlicher im Sinne der DSGVO ist der im Impressum genannte Betreiber. Sie haben das Recht auf Auskunft (Art. 15), Berichtigung (Art. 16), Löschung (Art. 17), Einschränkung (Art. 18), Datenübertragbarkeit (Art. 20) und Widerspruch (Art. 21 DSGVO) — schreiben Sie dafür an bulatalper@gmail.com. Sie können sich außerdem bei einer Datenschutz-Aufsichtsbehörde beschweren, etwa beim Landesbeauftragten für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

Controller within the meaning of Art. 4 No. 7 GDPR is the operator named in the imprint. Contact for any request under this policy: bulatalper@gmail.com

When you enter a fighter, we store what you typed and what we need to run a match:

• Your landing page URL — required, and the whole point of the exercise.
• Your email address — so we can tell you when a match runs and send you the result.
• Fighter name, tagline and pitch, if you supplied them.
• A frozen snapshot of your landing page: a screenshot and the visible text, captured at match time. This is the evidence the jury scores, and it is what makes a verdict checkable later.
• Your match history: scores, verdicts, wins, losses, streak, rank and title history.

Payment details are never entered on insertcoin.lol. Card data goes directly to Stripe; we receive only the confirmation that a payment succeeded, along with the identifiers needed to match it to your entry and to issue a refund.

To stop spam and abuse we record submission attempts. Your email address and IP address are not stored in readable form for this purpose — both are kept only as keyed HMAC-SHA-256 digests, which lets us count attempts without holding the underlying values. These rows are pruned after the enforcement window.

This is a public scoreboard, so most of what you submit is meant to be seen: your fighter name, tagline, landing page link, the captured snapshot, your record, and every verdict about you — wins and losses alike. That is disclosed before you pay, and you check a box confirming you have read it.

Your email address is never published. It is used for match notifications, result links and your private management link, and nothing else.

• Art. 6(1)(b) GDPR — performance of a contract: running the match you paid for, publishing the result, and contacting you about it.
• Art. 6(1)(f) GDPR — legitimate interest: preventing spam, fraud and abuse, keeping the service available, and maintaining an accurate public record of matches that have already been fought.
• Art. 6(1)(c) GDPR — legal obligation: retaining records of payments for as long as tax and commercial law require.

We use the following processors. Each acts on our instructions under a data processing agreement:

Some of these process data outside the EU. Where that happens, transfers are covered by the European Commission's standard contractual clauses or an adequacy decision.

insertcoin.lol sets no cookies and no tracker stores anything on your device, which is why you are not asked to consent to anything.

PostHog (EU) measures pageviews and product events so we can see what works. It runs on EU servers and stores nothing on your device — no cookies, no localStorage. Instead PostHog derives a visitor id on its servers from a daily-rotating hash of your IP address and browser signature; the hash cannot be reversed and expires with the day, so we cannot recognise you tomorrow. The URLs it sees are scrubbed of private tokens first. Anonymous visitors are not profiled. The legal basis is our legitimate interest in understanding whether the product works (Art. 6(1)(f) GDPR).

When something breaks, the error — stack trace and request context, with private tokens scrubbed from URLs — is reported to Sentry (EU region) so we can fix it. Same legal basis: keeping the service running is a legitimate interest.

The site itself keeps one thing on your device: whether you switched fight sound on. It lives in your browser's localStorage, is set only by you, is never sent anywhere, and disappears when you clear site data.

Our hosting provider records ordinary server logs, including IP address, time and the page requested, to deliver the site and detect attacks.

Match pages and the record they belong to are intended to be permanent — that permanence is what gives a win its value and a public record its meaning, and it is disclosed before you pay. Payment records are kept for the statutory retention period. Rate-limiting digests are pruned after their enforcement window.

Permanent applies to the record, not to you: a withdrawal under Art. 17 leaves the matches and verdicts standing and takes the person out of them — name, landing link, snapshots and email. What that removes and what it keeps is set out under YOUR RIGHTS below.

You may request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and portability (Art. 20), and you may object to processing based on legitimate interest (Art. 21). Write to the contact address above. You may also complain to a data protection supervisory authority.

Erasure (Art. 17 GDPR). Write to us from the address you entered at submission. We withdraw your fighter within 14 days: the name becomes “Withdrawn fighter”; sprite, landing link, tagline, pitch, page snapshots and your e-mail are deleted. What stays: the W–L record, rank and title history, and the verdicts about your page — they are the opponents’ results and a truthful record of a public competition at the time it happened (Art. 17(3)(a)). Withdrawal is not silent: the record shows the fighter as withdrawn. It is also final; a withdrawn fighter is not restored.

A verdict you dislike is not a factual error, but a demonstrable factual error is corrected — and one rejudge is available for that, as set out in the rules.