GiftGrab Privacy Policy

Applies to the website giftgrab.duelfriends.com (also greifkiste.duelfriends.com) and the Android app "GiftGrab" / "Greifkiste". Last updated: November 2026. In case of doubt the German version prevails.

In short: GiftGrab needs no account. Your game state stays on your device. We use no analytics or tracking tools. We only receive personal data if you email us a prize code.

1. Controller

Nader Mahmud Tabrizi, Breslauer Straße 22, 69124 Heidelberg, Germany
Email: [email protected]
More details in the legal notice.

2. What is stored on your device

GiftGrab stores in your browser's or the app's storage (localStorage):

your game coins,
your prize codes,
whether music is on or off and which language you chose.

This data is not sent to us or to third parties. You can delete it at any time by clearing the website data in your browser or the app data in your phone's settings. The legal basis is Section 25(2) no. 2 TDDDG, as storage is strictly necessary for the game.

3. Hosting and server logs

The website is served by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit it, Cloudflare processes technically necessary data, in particular your IP address, date and time, the page requested and information about your browser and device. This is required to deliver the site securely and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and fast operation). Cloudflare is certified under the EU-US Data Privacy Framework. More information: Cloudflare privacy policy.

Fonts and all other files are loaded directly from our server. No content is loaded from Google Fonts or other third parties.

4. Prize codes by email

If you send a prize code to [email protected], we process your email address, your name (if given), the code and the content of your message. We use this data only for the prize draw, notifying winners and handing over the prize. The legal basis is Art. 6(1)(b) GDPR (taking part in the draw under the official rules).

After the draw we delete the data of participants who did not win. We keep winners' data for as long as needed to hand over the prize and to meet legal retention duties.

5. Advertising

No ad networks are currently integrated. The ad spots in GiftGrab are a preview without any data transfer. Before we add real advertising, we will update this policy and ask for your consent where required.

6. Android app

The Android app displays this website, so the same information applies. When you download it from Google Play, Google processes data under its own privacy terms, which we cannot influence.

7. Minimum age

Taking part in prize draws is only allowed from age 18. We do not knowingly collect data from children.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Just write to us at [email protected].

You can also complain to a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

9. Changes

If GiftGrab changes, for example through advertising or giving items away, we will update this policy. The version published here applies.