Privacy Policy

1. General information

Protecting personal data is important to us. TeamCounter is designed to use as little data as reasonably possible. The website does not provide user registration, a newsletter, comments or a contact form.

TeamCounter can be used free of charge. Google AdSense may be used to finance hosting, security, maintenance and further development. Cloudflare Web Analytics is used for privacy-focused reach and performance measurement as described below.

2. Controller

Maximilian Holstein
Schmiededamm 9
25379 Herzhorn
Germany

Email: teamcounter@holsteinshops.de
Website: https://teamcounter.net

3. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

When the website is accessed, STRATO may process technically required data such as the IP address, date and time, requested page or file, transferred data volume, browser, operating system, referrer information and status codes. This data is used to provide the website securely and reliably and to detect attacks or technical faults.

According to STRATO, visitor IP addresses are stored for attack detection and defence for a maximum of seven days. The legal basis is Art. 6(1)(f) GDPR. Further information: STRATO privacy information.

4. Data processing agreements

A data processing agreement pursuant to Art. 28 GDPR has been concluded with STRATO. Where applicable, the contractual data processing provisions of Cloudflare, Google services and Wordfence/Defiant are used as described in this privacy policy.

5. Cookies and consent management

Technically necessary cookies or comparable storage may be used where required for the website, security functions or the WordPress administration area.

If you actively select the light or dark website design, this preference is stored locally in your browser under teamcounter_public_theme_v1. The setting is not transmitted to TeamCounter, is not used for advertising or tracking and can be removed by deleting this website's local browser data.

For Google AdSense, a consent message may be displayed by Google. This consent tool is used to ask for and manage consent where consent is required for advertising cookies, web beacons or comparable technologies.

You can withdraw or change your advertising consent with future effect through the displayed consent message, through the privacy choices provided by the respective provider, or by deleting the relevant cookies in your browser. If consent is not given, personalised advertising technologies must not be activated.

Further information is available in Google's privacy information: Google Business Data Responsibility and Google Privacy Policy.

6. Online advertising

6.1 Google AdSense

Google AdSense is an advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Ads help finance the free use, hosting, security, maintenance and further development of TeamCounter.

Google AdSense may be used only on selected public editorial information pages after the central advertising switch has been enabled and the required consent controls are active. The AdSense loader and Google ads are not delivered on private list URLs, management links, view links, display views, export views, the app dashboard or the locally stored “My lists” area.

AdSense may use cookies, web beacons or comparable technologies to provide and measure advertising. These processes take place only after the user has given the required consent pursuant to Art. 6(1)(a) GDPR through the Google/AdSense consent message where consent is required. Without the required consent, personalised advertising technologies must not be activated during the visit.

Google participates in the EU-U.S. Data Privacy Framework for relevant transfers to the United States. Further information: Google Business Data Responsibility and Google Privacy Policy.

7. Cloudflare Web Analytics

TeamCounter uses Cloudflare Web Analytics by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, to understand website usage and technical performance.

According to Cloudflare, this analytics service works without cookies, LocalStorage or individual fingerprinting. It may process page paths, hostname, referrer, country, device type, browser, operating system and performance metrics. The service is not used to create advertising profiles or identify individual users.

The legal basis is Art. 6(1)(f) GDPR, based on the legitimate interest in privacy-focused reach measurement, error analysis and website optimisation. Further information: Cloudflare Privacy Policy.

8. Google Search Console and Bing Webmaster Tools

Google Search Console and Bing Webmaster Tools are used to monitor indexing, search performance and technical website issues. TeamCounter does not add a separate visitor-tracking script solely for these webmaster tools. The services may provide aggregated search and crawl data to the website operator.

Further information is available in the privacy policies of Google and Microsoft.

9. WordPress, WPCode and Wordfence

The website is based on WordPress. WPCode is used to manage technical code customisations.

Wordfence Security is used for firewall protection, malware scans, login security and the detection of malicious requests. For these purposes, technical security data such as IP addresses, request information and login attempts may be processed. The legal basis is Art. 6(1)(f) GDPR, based on the legitimate interest in protecting the website and its users.

Further information: Wordfence privacy policy.

10. TeamCounter lists and stored data

TeamCounter stores the data required for a created list, including the list title, counter labels, values, optional team or participant labels, dates, prices, categories, notes and technical timestamps, depending on the selected tool.

Names or team names can be entered. Please use first names, initials or neutral labels and do not enter sensitive personal data.

Every list receives links for viewing, management and display. Anyone who receives a link may be able to access the corresponding list. A management link permits changes and must therefore be kept confidential. Individual list and token URLs are marked as noindex and are not included in the public sitemap.

TeamCounter currently does not automatically delete lists merely because they have been inactive for a fixed period. A list remains stored until it is permanently deleted through its management link, a justified deletion request is processed or a legal obligation requires deletion. Users with the management link can permanently delete a list through the red delete button. A deletion request can also be sent to teamcounter@holsteinshops.de. Please send the list/tool ID or view link first. Send a management link only after an explicit request when it is strictly necessary for identification, because it permits changes and must be treated like a password.

10a. Contact by email or phone

If you contact TeamCounter by email or phone, the information you provide is processed to handle and answer your request. This may include your email address or phone number, your name if provided, the message or conversation details needed for handling, and the time of contact.

The legal basis is Art. 6(1)(b) GDPR where the request relates to contractual or pre-contractual measures. In other cases, processing is based on Art. 6(1)(f) GDPR and the legitimate interest in handling incoming requests. Contact data is deleted once it is no longer needed for the request unless statutory retention duties apply.

11. Native Android app and local app area

TeamCounter may also be provided as a native Android app on Google Play. The app does not display TeamCounter through a WebView, PWA or visible browser window. Its interface and navigation are implemented as native Android views. For current list values, shared editing and list creation, the app communicates exclusively via encrypted HTTPS requests with the TeamCounter API on teamcounter.net.

The app requires internet and network-status access. It does not request runtime access to the camera, microphone, precise location, contacts, phone, SMS, calendar, photos, files or Bluetooth. Advertising libraries may declare technical advertising and Privacy Sandbox permissions in the Android manifest as described in the AdMob section below.

The app does not create a TeamCounter user account or a separate user profile. Lists, values, names, team names or similar content entered through TeamCounter functions are stored on the TeamCounter server as described above.

The “My lists” area stores TeamCounter list links and associated convenience metadata locally on the device. This may include a management or view link, a display name, the list type, a short summary and local timestamps. These local records are encrypted with a key held in the Android Keystore. Management links provide editing access and should therefore be protected like a password.

This local list overview is not synchronized as a TeamCounter account and is not automatically transferred to other devices or included in Android backups. If the app is deleted, app storage is cleared or the local overview is removed, the local links may be lost. The actual lists on the TeamCounter server are not automatically deleted by clearing the local overview.

The local storage in “My lists” is used only for the convenience feature requested by the user: finding saved or received TeamCounter links again on this device. To the extent that information is stored on or read from the device, this is treated as technically necessary or expressly requested storage under Section 25(2) No. 2 TDDDG. Where personal data is involved, the legal basis is Art. 6(1)(b) GDPR and, additionally, Art. 6(1)(f) GDPR.

Users can remove individual locally stored links or clear the local overview in the app settings. Removing a link from “My lists” only deletes the encrypted local reference on this device and does not delete the actual TeamCounter list. Permanent deletion of a server list requires the separate red delete function available through the management link or a deletion request.

11a. Google AdMob / advertising in the Android app

The native Android app contains the Google Mobile Ads Next-Gen SDK and Google’s User Messaging Platform (UMP). The AdMob app identifier and a production banner ad-unit identifier are configured in the release build. A responsive banner may be displayed on the native dashboard above the persistent app navigation. Debug builds use Google’s dedicated demo ad-unit identifier and do not generate advertising revenue. No interstitial ad is currently requested.

At app start, the app updates the required consent information before Google Mobile Ads is initialised and before the first dashboard ad request. The SDK is initialised and the banner is requested only if the UMP consent state permits ad requests.

The provider for Google Mobile Ads / AdMob is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Technical processing may also involve Google LLC, USA, as Google’s parent company or technical service provider.

Depending on consent status, operating system and advertising configuration, Google may process the IP address, device and app information, consent signals, device identifiers or advertising ID, Privacy Sandbox signals, diagnostic data, an approximate location derived from the IP address and, once ads are displayed, ad interactions.

Possible purposes are ad delivery, ad measurement, fraud prevention, technical delivery and improvement of advertising, and analysis of advertising performance. In the EEA, the United Kingdom and Switzerland, personalised advertising, advertising-ID access or comparable tracking technologies must only be used after the required consent. Without consent, only limited or non-personalised ads may be delivered where technically and legally permitted.

The app uses UMP at each app launch to update the consent requirement and to display a consent form where required. The in-app “Privacy options” entry point makes the Google privacy form available again whenever Google reports that privacy options are required, so consent can be changed or withdrawn for the future.

Users may also reset their advertising ID or restrict personalised advertising in their device settings where the operating system provides those options. Where consent is required, advertising processing and access to non-essential device information take place only on the basis of Art. 6(1)(a) GDPR together with Section 25(1) TDDDG. Consent can be withdrawn for the future through the privacy options provided in the app. Technical consent management and implementation of statutory privacy requirements are based on Art. 6(1)(c) GDPR and, additionally, Art. 6(1)(f) GDPR.

Google may process data in third countries, including the United States. Where applicable, Google relies on the EU-US Data Privacy Framework and additional safeguards such as standard contractual clauses. Further information is available from Google Business Data Responsibility and the Google Privacy Policy.

For the verification of authorised advertising partners, TeamCounter provides an app-ads.txt file on the developer website. This file supports advertising transparency and fraud prevention and does not contain personal user data.

12. No affiliate advertising on the website

TeamCounter does not display Amazon affiliate links, affiliate product modules or affiliate tracking scripts on the website. The Android app and its advertising configuration are not changed by this website rule.

13. Neutral operator reference

Public website footers may contain one neutral link labelled “A project by HolsteinShops.de” to HolsteinShops.de. This is not an advertisement or affiliate link and does not load scripts, iframes, tracking pixels or other content from HolsteinShops.de when a TeamCounter page opens. Data is transmitted to the destination only after the link is actively selected.

14. Legal bases, retention and user rights

Personal data is retained only for as long as required for the relevant purpose, legal obligations or the protection of legitimate interests. You may have rights of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent under the GDPR.

You also have the right to lodge a complaint with a competent data protection supervisory authority. To exercise your rights, contact teamcounter@holsteinshops.de.

15. Changes to this policy

This privacy policy may be updated when the website, legal requirements or services used by TeamCounter change. The current version is published on this page.