Legal Notice

Legal Disclosure

Information in accordance with § 5 ECG, § 14 UGB, § 63 GewO and § 25 MedienG.

Company & Contact Information

Disclaimer

Content

The author reserves the right not to be responsible for the topicality, correctness, completeness or quality of the information provided. Liability claims regarding damage caused by the use of any information provided, including any kind of information which is incomplete or incorrect, will therefore be rejected.

All offers are not-binding and without obligation. Parts of the pages or the complete publication including all offers and information might be extended, changed or partly or completely deleted by the author without separate announcement.

Referrals and Links

The author is not responsible for any contents linked or referred to from these pages, unless he has full knowledge of illegal contents and would be able to prevent visitors from viewing those pages. If any damage occurs by the use of information presented there, only the author of the respective pages might be liable, not the one who has linked to them.

Copyright

The author intended not to use any copyrighted material for the publication or, if not possible, to indicate the copyright of the respective object. The copyright for any material created by the author is reserved. Any duplication or use of objects such as diagrams, sounds or texts in other electronic or printed publications is not permitted without the author's agreement.

The 3D models used for the vehicles and figures on the layout come from the Kenney asset kits and are released under Creative Commons Zero. Their attribution is kept alongside the files themselves.

Legal Validity of this Disclaimer

This disclaimer is to be regarded as part of the internet publication which you were referred from. If sections or individual terms of this statement are not legal or correct, the content or validity of the other parts remain uninfluenced by this fact.

Privacy Policy

The controller for the processing described below is Timesheet - Mobile Time Tracking OG, at the address given above. Questions about your data can be sent to hello@traluno.com.

Traluno has no advertising network, no third-party analytics and no profiling of any kind. No Google Analytics, no advertising pixel, no social plugin: nothing on this site contacts an analytics or advertising company, and nothing about you is shared with one.

Anonymous Site Statistics

We count how many people visit, which pages they read and how long a page stays open, and we publish the result openly at /stats. It is measured entirely by our own server, and it is designed so that the resulting figures cannot be traced back to anybody — including by us.

No cookie and no identifier is used for this. Nothing is stored in your browser for statistics.

Instead, each request is reduced to a one-way hash of your IP address and browser user agent, combined with a secret value that changes every day and is deleted two days later. Your IP address and user agent are never written to our database. Once the day's secret is deleted, the hash cannot be linked back to an address even by someone holding both — and it cannot be linked to the previous or following day's, which means visits cannot be joined into a profile of one person over time. It also means a "unique visitor" only ever exists within a single day, which is stated plainly on the statistics page rather than hidden behind a larger-sounding number.

We record the page template rather than the address you visited: reading an article is stored as /blog/:slug, never as the slug itself. No referrer is stored, and the request that reports a page view is sent without your session cookie.

If your browser sends a Do Not Track signal, nothing is recorded at all.

The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in understanding whether the site is used and in publishing that honestly. Because no cookie or comparable identifier is stored on your device and no personal data is retained, it needs no consent banner. Statistics rows are kept in aggregate and carry nothing that identifies you; the daily secrets that could theoretically link them are deleted after two days.

Playing Without an Account

You can play without giving us anything at all. No account, no cookie, no sign-up. A layout you build as a guest is kept in your own browser's local storage under the key traluno_layout_v2 and is never sent to us. Clearing your browser data clears it, and we have no copy.

Creating an Account

Registration needs an email address, and that is the only personal data we require. There is no password anywhere: you ask for a one-time code, and entering the correct code signs you in — the first time, it also creates the account.

Sign-in codes are stored only as SHA-256 hashes, expire after ten minutes, allow five attempts and can be used once. The IP address that requested a code is recorded with it, solely to enforce rate limits and prevent abuse. When you are signed in, a cookie named tw_session holds a signed session token; it is strictly necessary to keep you logged in and needs no consent.

Your email address is never shown to another player.

What We Store For Your Account

Your display name, an avatar colour, the room your layout stands in, and the layout itself — the track, roads, terrain and buildings you have placed — saved as a single document so it follows you between devices. A layout is private unless you publish it yourself.

Published Layouts

If you press Share in the game, that layout and a picture of it that you take at that moment are shown in the public gallery, together with your display name — never your email address. Anyone can open a published layout and look at it; nobody but you can change it. You can make it private again at any time, from the game or from your profile, and it disappears from the gallery immediately. Deleting the layout removes the picture as well.

Payments

Payments are processed by Stripe Payments Europe, Ltd. Card details are entered on Stripe's own checkout page and never reach our servers; we cannot see them. We store the Stripe session identifier, the item, the amount and the status, which is what tells us what you own. Stripe's own handling of your data is covered by the Stripe Privacy Policy.

Wall Posters

If you buy a poster to hang in the room, the image you upload is stored on our server and shown to every visitor once it has been approved by a human. Do not upload anything you are not free to publish. A poster can be withdrawn at any time by writing to us.

Email

Email is delivered by Brevo (Sendinblue SAS, France). The only messages we send are sign-in codes, which are necessary to operate your account and cannot be switched off while the account exists. There is no newsletter and no marketing email.

Where Your Data Is Held

The service runs on Google Cloud Platform in the europe-west1 region (Belgium), on Google Cloud Run and Cloud SQL. Our processors are Google Ireland Limited (hosting), Sendinblue SAS (email) and Stripe Payments Europe, Ltd (payments).

Retention and Your Rights

Your account, layout and purchase records are kept for as long as your account exists. Sign-in codes expire after ten minutes. Statistics rows carry nothing that identifies you and the secrets that could link them are deleted after two days.

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to its processing. Write to hello@traluno.com and we will act on it. You also have the right to complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna).