Privacy
Last updated: August 2026 · The German version is legally binding.
What we store
When you submit a guess we store the name you type, the number you guess, the time of submission, and a random token that identifies your browser for this one game. Nothing else.
The token stays in your browser; the database holds only a one-way hash of it, so nobody holding the table can trace a guess back to a device.
No account, no email address for guests, no tracking across sites, no advertising cookies on the page where you guess.
Legal basis: legitimate interest in running the guessing game you chose to take part in (Art. 6(1)(f) GDPR).
Why
To run the game: to show the organizer who guessed what, to work out who was closest, and to stop one person voting many times. The name is there so winners can be identified at the event.
How long
30 days after the game ends, then it is deleted. The organizer can delete it sooner, and deleting a game deletes every guess in it.
Hosting
Call It is served by Cloudflare Workers (Cloudflare, Inc.), and the domain is routed through Cloudflare's network. Technically necessary access data — including your IP address, the page requested, and your browser's user agent — is processed there in server logs so the page can be delivered at all.
Legal basis: legitimate interest in operating the site securely (Art. 6(1)(f) GDPR).
Organizer accounts
If you set up a game of your own, you create an account: we store your email address and your password (hashed, never in plain text) with Supabase (servers in the EU), plus the games you create and the guesses submitted to them. You can delete your games — and with them every guess — at any time.
Legal basis: performance of a contract / your request (Art. 6(1)(b) GDPR).
Cookies
Two kinds, both technically necessary, neither used for advertising or for recognising you on other sites:
- When you guess, one cookie per game holds the random token described above (30 days). It is what stops the same browser guessing twice.
- When you sign in as an organizer, Supabase sets a session cookie so you stay logged in. Signing out removes it.
Because both are strictly necessary for a function you asked for, no consent banner is shown for them.
Who else sees it
The organizer of the game you are playing. Our database and account provider, Supabase (servers in the EU), and our hosting provider, Cloudflare, process the data on our behalf. Nobody else, and it is never sold.
The live results page shows only counts in five coarse ranges while a game runs — never an individual guess, and never a name. Names and guesses appear only after the game has ended.
The Android app
The app in Google Play (uk.metzner.callit) is this same website, displayed by your own Chrome inside the app. It processes nothing beyond what is described here — there is no extra collection, no advertising ID and no device identifier. Installing and updating it goes through Google Play (Google Ireland Ltd.) under Google's own terms.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to processing — write to legal@metzner.uk and say which game you took part in.
You can also complain to a supervisory authority. In Austria that is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna (dsb.gv.at).
Who is responsible
Daniel Metzner
Münzgrabengürtel 2
8010 Graz, Austria
legal@metzner.uk
Full imprint: Imprint