Skip to content
Biathlon Predictor
Log in Play for free

Privacy policy

Last updated: October 2026

1. General information
Protecting your personal data is important to us. We process your data solely on the basis of the statutory provisions, in particular the EU General Data Protection Regulation (GDPR) and the German Telecommunications and Digital Services Data Protection Act (TDDDG). This privacy policy explains which data we process when you visit and use Biathlon Predictor, for what purpose, and what rights you have. All language versions of the site (biathlon-tippspiel.de, pronostics-biathlon.fr and biathlonpredictor.eu) are run by the same controller and use a shared database.

2. Controller
The controller responsible for processing your personal data is:

3. Hosting and server log files
Our website and its database are hosted by Railway (Railway Corporation, USA). When you visit the website, technically necessary data is processed, in particular your IP address, the date and time of access, the page requested and information about your browser and operating system. This data is needed to deliver the website and to keep it secure and stable, and it is only stored for a limited period.
Legal basis: our legitimate interest in operating the website securely and reliably (Art. 6(1)(f) GDPR).

4. Collection and processing of personal data

a. User account
You need an account to take part in the game. We store:

We use this data to provide the game, score your predictions and compile the leaderboards. Legal basis: performance of the user agreement (Art. 6(1)(b) GDPR). The data is stored until you delete your account, which you can do at any time in your profile.

b. Public leaderboard and leagues
Your username and your points and stars are visible to all visitors in the public leaderboard, even without logging in. The leaderboard is shared across all language versions of the site. Your predictions for a race only become visible to other players once the race has started. Within a league, members can see each other's usernames, points and past predictions. If you do not want to be recognised, please choose a username that does not identify you.

c. Sending emails
To send emails (account activation, password reset, league invitations and – if enabled – prediction reminders) we use Brevo (Sendinblue SAS, France). Your email address, your username and the content of the email are transmitted to Brevo. Legal basis: Art. 6(1)(b) GDPR, and for reminder emails your consent (Art. 6(1)(a) GDPR).

d. Reminders by push notification and email
You only receive reminders about missing predictions if you turn them on in your profile. For push notifications we store the subscription data provided by your browser (push endpoint and associated keys) and the browser identifier. Delivery takes place via the push service of your browser vendor (e.g. Google, Mozilla or Apple). For email reminders we use the email address you have provided. Legal basis: your consent (Art. 6(1)(a) GDPR). You can turn off both kinds of reminder at any time in your profile; a device's subscription data is deleted when you turn it off or delete your account.

e. Contact and feedback form
If you send us a message using the feedback form, we store the title and text of your message together with your user account and forward it to us by email in order to deal with your request (Art. 6(1)(b) or (f) GDPR).

f. Error monitoring
To detect and fix technical errors we use Sentry (Functional Software, Inc., USA). If an error occurs, technical information (e.g. error message, page requested, browser type) is transmitted. We do not transmit personal data such as your IP address, username or cookies. Legal basis: our legitimate interest in an error-free website (Art. 6(1)(f) GDPR).

g. Backups
To protect against data loss we regularly make backup copies of the database. These are created via GitHub (GitHub, Inc., USA) and kept there for up to 90 days (Art. 6(1)(f) GDPR).

5. Advertising with Google AdSense and consent management
We use Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to show advertising on our website and finance its operation. Google AdSense may use cookies and similar technologies to display ads, measure their effectiveness and – with your consent – show personalised ads. The following data in particular may be processed:

On your first visit we ask you via Google's consent management platform (a platform certified under the IAB TCF standard) whether you agree to the use of cookies and the processing of your data for advertising purposes. Advertising cookies are only set after you have given your consent. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw or change your consent at any time with effect for the future by reopening the consent settings or by deleting this website's cookies in your browser.

For more information, see Google's privacy policy and How Google uses cookies in advertising. You can also turn off personalised advertising in Google's ad settings.

6. Cookies and local storage
Apart from advertising, our website only uses strictly necessary cookies and storage entries. These do not require consent (§ 25(2) no. 2 TDDDG):

Advertising cookies are only set with your consent (see section 5). You can delete or block cookies in your browser at any time; without the necessary cookies, however, you cannot log in.

7. External content (content delivery networks)
For fast and reliable display we load some libraries (e.g. Bootstrap, jQuery, Chart.js) from external servers: jsDelivr, code.jquery.com and cdn.datatables.net. Your IP address is transmitted to the respective provider, as this is technically necessary to deliver the files. Legal basis: our legitimate interest in a fast and technically reliable website (Art. 6(1)(f) GDPR).

8. Transfers to third countries
Some of the providers mentioned (Railway, Sentry, GitHub and possibly Google and the CDN providers) are based in the USA or process data there. Transfers only take place on the basis of an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework), where the provider is certified under it, or on the basis of appropriate safeguards such as the EU standard contractual clauses (Art. 44 et seq. GDPR).

9. Your rights
You have the right to:

To exercise any of these rights, please contact us using the details above. You can also delete your account yourself at any time in your profile.

10. Changes to this privacy policy
We reserve the right to update this privacy policy if legal requirements or our services change. The current version published on this page applies.

11. Contact
If you have any questions about the processing of your data or this privacy policy, please contact:

In case of any discrepancy, the German version of this privacy policy prevails.