Privacy policy
Controller
Julian Lukas Kaiser
Hohlebachstraße 31
79418 Schliengen
E-mail: kontakt@jkhd.de
Principle
This website uses no cookies, no trackers and no analytics services. All fonts and content are loaded locally from this domain — no third-party content is fetched. On your device, only your choice of appearance is stored (see the following section) and, after you sign in to partner access, a sign-in token in the session storage of the browser tab until the tab is closed (see “Partner access”). If the AI in the questions helper at the bottom right is not answering, the helper shows frequent questions that the page answers without a server: the answers are built into the page, and your clicks on them are neither stored nor transmitted. Only a question you write and send there yourself goes to our server and, as a rule, from there to an AI service of OVHcloud (see “Questions to the AI”).
Setting stored on your device
This website can be switched between a light and a dark appearance. If you operate that switch, your choice is stored in your browser's local storage (localStorage, key jkhd-theme, value light or dark) so that the site greets you next time the way you left it.
This entry contains no personal data, is not evaluated and is not transmitted to us or to third parties — it does not leave your device. Because storage takes place solely in response to your own action and solely in order to provide the appearance you requested, it does not require consent under § 25 (2) no. 2 TDDDG; a consent banner is not needed for it. You can delete the entry at any time through your browser settings. As long as you do not operate the switch, nothing is stored — the site then follows your operating system setting.
Switching between German and English stores nothing at all: the language switch is an ordinary link to the corresponding page.
Hosting (GitHub Pages)
This website is hosted on GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When the site is accessed, GitHub processes technically necessary data such as IP address, date and time of access and browser information in server logs. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing the website securely and efficiently). GitHub is certified under the EU-US Data Privacy Framework.
Partner access
The “Partners only” box on the partner access and contact pages is intended solely for people registered with us as partners. There you sign in either with a code we send you by e-mail or with a password you have chosen to set. The e-mail address you enter and, where applicable, the password are transmitted in encrypted form to our server at api.jkhd.de (web space hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany). If you request a code and the address is registered as a partner, we send a six-digit code by e-mail. The code is stored with us only as a checksum, becomes invalid after ten minutes or after its first use and is deleted at the latest on the following day. After you sign in, your browser receives a random sign-in token valid for at most one hour; it is kept only in your browser's session storage and with us only as a checksum. For this session the server records the kind of sign-in (code or password) and its time; once it has expired, the session, including your address and this record, is deleted at the latest on the following day. The “Partner” page uses it to show the details we hold about you as a partner, your e-mail address, whether a password is set, the files stored for you and the contact address for partners. “Sign out” deletes the token in the browser and with us.
Password. Setting a password is optional; you set it on the partner page, where you can also change or remove it. We store it only as a non-reversible Argon2id hash — never in clear text and never in a log — together with the time at which you set it and the time of your last sign-in with a code; JKHD sees the date of each in its partner administration. If your last sign-in with a code was more than 180 days ago, we ask you to sign in once with a code before the password is valid again. When you set, change or remove a password, we send an e-mail to your address that does not contain the password, and your other sign-ins end. The password is deleted when you or we remove it or when your partner entry or your registered address ceases to exist — at the latest on the following day. The legal basis for the password and the notification is Art. 6 (1) (b) GDPR (performance of the partnership), for the notification additionally (f) GDPR (protecting your access from use by others).
The server counts failed sign-in attempts with a password per address entered, even if that address is not registered as a partner, and likewise changes and removals of a password per access. For this it stores only a SHA-256 checksum of the address with the times; it is no longer taken into account after one hour and is deleted at the latest on the following day. The legal basis is Art. 6 (1) (f) GDPR (protection against password guessing and abuse).
Enquiry via the questionnaire. The “Enquiry” button in the same box opens a questionnaire. With “Send”, the details you entered — name, e-mail address, the choices for role and subject, optionally a website or profile, your message and the language of the page — are transmitted to our server api.jkhd.de (operated at IONOS SE in Germany). From there two e-mails are sent: the enquiry to our service address and an automatic acknowledgement of receipt to the address you gave (sender service@jkhd.de); that acknowledgement contains none of your details. The enquiry is additionally stored on the server in a file that is not publicly accessible, so it is not lost if an e-mail fails; the server deletes it automatically no later than 30 days after receipt. The purposes are handling your enquiry (Art. 6 (1) (b) GDPR) and protection against abuse ((f) GDPR). No data is passed to third parties. If the server cannot be reached, the page hands the answers to your own e-mail program instead; our server then learns nothing about it.
For “Request selection” on the partner page it still holds that the chosen items are only written into a prepared e-mail to our partner address. Nothing is transmitted to our server and nothing is stored in the browser.
To prevent abuse, the server keeps a checksum of your IP address (for IPv6, of your network), of the e-mail address entered and of its domain in order to limit the number of requests; it is no longer taken into account after one hour and is deleted at the latest on the following day. Plain-text addresses are not logged. The legal basis is Art. 6 (1) (b) GDPR (performance of the partnership) or (f) GDPR (protection against abuse). No e-mail is sent to addresses not registered as partners; for them only the checksums mentioned above are kept, which are no longer taken into account after one hour and are deleted at the latest on the following day.
Access logs of api.jkhd.de
Our server at api.jkhd.de runs on web space at IONOS SE in Germany (see “Partner access”). According to IONOS, the web space logs every request — from partner access as well as from the questions helper — with the IP address only in anonymised form, together with the time, the address requested, browser, operating system, device type and referring page; these logs are kept for eight weeks, serve the security and stability of the server and are not passed on to third parties. They do not contain the text of your questions to the AI: it is transmitted in the body of the request, not in the address requested. The legal basis is Art. 6 (1) (f) GDPR (secure and stable operation of the server).
Questions to the AI
In the questions helper at the bottom right you can also ask a question of your own; the answer is generated automatically by an AI system. Only when you send a question does your browser transmit, in encrypted form, to our server at api.jkhd.de (web space at IONOS SE in Germany, see “Partner access”): the text of your question, the language of the page and — so that the answer can follow on from the conversation so far — up to three earlier questions and answers from the same conversation, each question-and-answer pair with a check signature by which our server recognises that it issued that pair itself. As with any request, the server receives your IP address in the process (for the logs, see “Access logs of api.jkhd.de”). The conversation is held only in the memory of the open page; it is neither saved in the browser nor stored with us and is gone as soon as you reload or close the page.
Our server forwards your question and the conversation, together with fixed instructions and texts from this website about JKHD, in encrypted form to the “AI Endpoints” service of OVHcloud, where a language model generates the answer. The provider is OVH GmbH, Oskar-Jäger-Str. 173/K6, 50825 Köln (Cologne), Germany. It processes the data as our processor (Art. 28 GDPR); the data processing agreement is a fixed part of the contract with OVHcloud. According to OVHcloud, the technology behind this service is located in Gravelines (France), i.e. in the European Union. In its contract terms for this service, OVHcloud states that it has no knowledge of the inputs and outputs, does not use them further in any way and makes no backups of them. According to its service description, the data is neither stored nor shared during or after processing; OVHcloud keeps only the data required for billing and never uses the data to train or improve AI models. These are statements made by OVHcloud; we cannot verify them ourselves. We do not pass on your IP address. If our server recognises that a question asks for an investment recommendation or a price forecast, or whether a person is answering here, it answers itself with a fixed text; if a limit has been reached — questions per IP address or network and hour, all questions together per hour or day, the estimated costs of the month or the number of questions being processed at the same time — it declines the question. In both cases nothing is transmitted to OVHcloud.
Your questions and the answers are neither stored nor logged by us; our server holds them only in memory while it processes your request. To prevent abuse and to limit costs, the server counts questions per IP address, for IPv6 per network. For this it stores only a checksum of your IP address (for IPv6, of your network) with the times; it is no longer taken into account after one hour and is deleted at the latest on the following day. In addition, the server keeps daily and monthly totals of the answers generated and of the amount of text processed (tokens), with no link to individual persons.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in answering questions about JKHD promptly and without the detour of an e-mail, and in protecting the service against abuse and uncontrolled costs. Using it is voluntary; our e-mail addresses remain open to you without the AI.
No personal data, please. Please do not enter personal data in your questions — neither about yourself nor about others. For personal matters, write to us at kontakt@jkhd.de. No advice. The answers are generated automatically, may contain errors and are not advice, in particular not investment advice. They are marked accordingly in the questions helper.
Leaderboard of the simulation
The simulation on the “Simulation” page is computed in your browser. When you open the page, your browser loads the leaderboard (nicknames, game times, dates) from our server at api.jkhd.de (web space at IONOS SE in Germany, see “Partner access”). When a game starts, it fetches a random game token there; it contains nothing about you and expires after two hours. Only if you enter a nickname after a win does your browser send that nickname together with game time, game number, speed and the token. Stored are nickname, game time, game number, speed and the date of the entry; the ten fastest wins then appear on the page for all visitors. Choose a nickname that does not identify you, not your real name. The legal basis for the entry is your consent given by submitting it (Art. 6(1)(a) GDPR); you may withdraw it at any time and have the entry deleted – an e-mail to kontakt@jkhd.de with nickname and game time is enough. At the end of every game played to the end, your browser also sends the game token and the result (win, loss or draw) and, with your first win since opening the page, the number of games you have played so far; our server only counts totals from this (games, wins, attempts) without reference to individual persons and shows them as statistics next to the leaderboard. Loading the list, the game token and this report rest on Art. 6(1)(f) GDPR (operation of the game). The list keeps at most one hundred entries. Against abuse, our server counts entries per network for one hour as a hash only (see “Partner access”); the access logs are described in the section above.
Contact by e-mail
If you contact us by e-mail, we process your details exclusively in order to deal with your enquiry (Art. 6 (1) (b) or (f) GDPR). The data is not passed on to third parties and is deleted as soon as it is no longer required for that purpose.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, please write to the e-mail address given above. You also have the right to lodge a complaint with a data protection supervisory authority — the competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
Right to object (Art. 21 GDPR). Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal objection to the e-mail address given above is sufficient.
Version
14 October 2026 (statistics next to the leaderboard of the simulation added; on 10 October leaderboard of the simulation added; on 26 September questions to the AI and access logs of api.jkhd.de added; partner access as its own page; on 25 September sign-in with a password added, files on the partner page added). If the technology behind this website changes, this statement will be updated; the version published here is the authoritative one.