Privacy Policy

Last updated: November 1, 2026

1. Who we are

2. The short version

The mall is a 3D page without visitor tracking. There are no accounts, no ads from ad networks, no analytics and no tracking cookies. We do not sell personal information. If you turn on push notifications in the iOS app, we store an anonymous device token and the topics you picked (see section 7). Fonts and scripts load from our own server, not from Google or other providers.

3. Hosting and server logs

The site is hosted by Cloudflare (Cloudflare, Inc., San Francisco, California, USA). When you open a page, Cloudflare processes technical data needed to deliver the page and protect it from abuse: your IP address, date and time, the address requested, browser type, referring page and status code. We do not keep these logs ourselves. How long Cloudflare keeps them follows Cloudflare's own policies. Because we are based in Germany and Cloudflare operates worldwide, this data may be processed in the United States and other countries.

4. Cookies and local storage

We do not set cookies and do not use analytics, advertising or social media services. Your browser's local storage keeps a few settings for your convenience: sound on or off, language, Kids Mode, coins found in Kids Mode and your best go-kart lap time. This stays in your browser and is not sent to us. You can clear it in your browser settings at any time. Because we do not track you across sites, a “Do Not Track” signal does not change anything on our side.

5. Affiliate links

The mall contains affiliate links to partner stores. They are marked “Ad · Affiliate link, we may earn a commission” and run through affiliate networks such as CJ Affiliate. Opening our pages sends no data to those networks or stores. Only when you click a store link does a new tab open and you are forwarded through the network to the store.

From that click on, the network and the store process data under their own policies, for example your IP address, and they may set cookies to credit a purchase to our link. We have no control over that, so please read their privacy notices. As the operator we only see commission data such as the time and order value, not who you are.

In the iOS app, partner pages open in an embedded Safari window. The same applies there, and we receive no data from it.

6. Kids Mode and children

Kids Mode locks every link that leads outside the mall. It stores its setting and the gold coins a child has found only in the browser; nothing is sent to us. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, write to us and we will delete it.

7. Push notifications in the iOS app

In the iOS app “ShoppingDojo” you can choose to receive notifications about deals and coupons, new partners, and events. We send nothing unless you pick topics and allow notifications in the iOS dialog.

We process an anonymous device token issued by Apple, the topics you chose, and the time you signed up and last changed your choice. We do not learn your name or email address. To fend off abuse we count sign-ups per time window using a hashed value of your IP address; these counters are deleted after two days at most. The app also stores your topic choice locally on your device.

You can opt out at any time: in the app, clear all topics under “Notifications” and tap “Save”, and we delete the token from our server. You can also turn notifications off in iOS Settings. We keep the data until you opt out or Apple tells us the token is no longer valid, for example after the app is deleted; then it is removed automatically. The token is stored in our database at Cloudflare. Messages are delivered through the Apple Push Notification service, which handles the token and message under Apple's own privacy policy.

8. Your choices and rights

Because we hold almost no personal information, most requests will find nothing, but you can ask us at any time what we have about you and ask us to correct or delete it. Residents of California and some other US states have additional rights under state privacy laws, such as the right to know, delete and correct personal information and to opt out of its sale or sharing. We do not sell or share personal information for advertising. To make a request, email [email protected]. We will not treat you differently for exercising your rights.

9. Changes

If we add new services or features, we will update this policy and change the date at the top.

Contact

Deutsche Fassung