1. Controller
The controller responsible for the processing described in this policy is the operator named in our Imprint. Privacy enquiries can be sent to dailybrainchallenges@gmail.com.
2. Website access
When you visit this website, the hosting provider may process technical access data such as IP address, date and time, requested file, referrer, browser type and operating system. This is necessary to deliver the website securely and reliably. The legal basis is our legitimate interest in operating a secure website under Article 6(1)(f) GDPR. Server logs are deleted according to the hosting provider's retention schedule unless they are required to investigate a security incident.
3. Cookies and analytics
This website does not set advertising cookies and does not use analytics, tracking pixels or profiling tools. It does not contain user accounts, contact forms or newsletters.
4. Links to social platforms
The website contains ordinary links to TikTok, Instagram, Facebook and YouTube. Data is transferred to a platform only after you choose and open the corresponding link. The platform operator then processes data under its own privacy policy.
5. Daily Brain Challenge Studio
Daily Brain Challenge Studio is a creator tool used by its operator to generate and publish original puzzle videos. It is not offered as a public account service and does not provide accounts to website visitors.
When the operator connects a social-media account, the application may process the account identifier, basic profile information, access tokens, refresh tokens, granted permissions, video metadata, captions and publication status required to perform the requested upload. These credentials are used only to access the operator's own selected account.
6. TikTok integration
For TikTok, Daily Brain Challenge may use TikTok Login Kit and the Content Posting API. With the account holder's consent, the application requests basic account information and permission to upload a video as a draft. The account holder reviews and completes publication in TikTok. TikTok credentials and identifiers are used only for authentication, upload and status handling and are not sold or used for advertising.
7. Google and YouTube integration
Daily Brain Challenge uses Google OAuth 2.0 and the YouTube Data API to upload videos to the operator's selected YouTube channel and to read the status needed to manage those uploads. The application uses Google user data only to provide this user-facing upload function. It does not sell Google user data, use it for advertising or transfer it for unrelated purposes.
OAuth tokens are stored in the operator-controlled local application or NAS data directory and are not displayed publicly. Access can be revoked at any time through the Google Account connections page. This application's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
8. Meta integration
For the operator's connected Instagram professional account and Facebook Page, the application may use Meta APIs to read basic profile or Page information and publish selected videos. Tokens and identifiers are processed only for account verification and requested publication.
9. Storage and deletion
Creator credentials and publication records are retained only while required for the connected publishing workflow. The operator can disconnect a platform by revoking access with the platform and removing the stored credentials from Daily Brain Challenge Studio. Local video files and publication history can be deleted by the operator from the relevant device or NAS.
10. Data sharing and international transfers
When the operator requests an upload, the necessary data is sent to the selected platform provider. TikTok, Google/YouTube and Meta may process data in countries outside the European Economic Area under their respective terms and transfer safeguards. No other disclosure is made unless legally required.
11. Your rights
Where the GDPR applies, you may have rights of access, rectification, erasure, restriction, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. To exercise a right, contact us using the email address above.
12. Security and changes
Reasonable technical and organisational measures are used to protect locally stored credentials and publishing data. We may update this policy when the website, application or legal requirements change. The current version is always published on this page.