YOUR CHOICES, YOUR DATA
Privacy
Controller
Nepomuk Bonhag
Gerhart-Hauptmann-Str. 24
86415 Mering
Germany
kontakt.antarika@gmail.com
Names, lists and results
Inputs and random results of the six random-choice tools are processed only in the memory of your browser tab. Our application does not transmit them to the server, analytics providers, or advertising networks. They are not put into URLs, cookies, local storage or cloud backups by this application. Reloading or leaving the page clears the current session and its last 20 results.
Copying, sharing and downloading
Copy result writes only the displayed result to your clipboard when you request it. Share result opens your device’s share dialog, or falls back to copying. If you explicitly share a result containing names, your selected destination receives that text under its own privacy policy. We never automatically share your input list. Download CSV creates a file locally in your browser only when requested. It can contain participant names and remains on your device after the page closes. Clipboard, downloaded and shared copies remain until you remove them.
Local preferences
If you select Skip animations, that preference is stored on your device under decision-tools.preferences.v1. It is not sent to us. Clear local preferences in the footer removes it; clearing this site’s browser storage also removes it. This storage provides a setting you explicitly request (section 25(2)(2) TDDDG). The tools still work if browser storage is unavailable. Your operating system’s reduced-motion setting is also respected.
Language and streaming country
We use a country code supplied by Cloudflare from the IP address already processed for delivery to suggest a language and streaming country. We do not request GPS access. If the country is unavailable, we use your browser language and region where present. The estimate can be inaccurate, especially with a VPN. You can change language and country separately. Explicit choices are stored locally under picknado.language and picknado.country to provide the requested settings (section 25(2)(2) TDDDG). Clear local preferences on a random-tool page, or remove this website’s browser data, to clear them.
Book finder
Genre choices, suggestions and read-book exclusions are processed locally in your browser. Read-book identifiers use this tab’s session storage; resetting or closing the tab removes them. The selection is included with the site. No cover images or external catalogue requests are loaded in the background. Only opening a catalogue link sends the selected title and author search to Open Library, under that provider’s own policies.
Film and series finder
Filter selections, language, streaming country and excluded title identifiers are sent to our server to return suggestions from a cached catalogue. The provider, Movie of the Night, receives catalogue requests from our server rather than individual visitor searches or IP addresses. We do not load film posters or external media. Following a streaming link opens the provider website under its own privacy policy. Seen-title identifiers are stored in session storage after you mark a title as seen. Reset seen titles removes them; closing the tab ends this storage.
Temporary shared votes
When you create or join a movie-night room, we store its selected title identifiers and metadata, expected participant count, random access tokens and votes on our server. No name or email address is requested. Room access and individual voting tokens are stored in your browser session to support the requested vote. Sharing the invitation link gives its recipient access to the room and the ability to join while places remain. Individual votes and participant tokens are not disclosed to other participants; shared results are shown after all expected participants vote. Rooms expire after 24 hours and records are automatically deleted within one further hour, or immediately when the creator deletes the room. This processing provides the service you request under Article 6(1)(b) GDPR; necessary session storage supports that request under section 25(2)(2) TDDDG. Room pages have no advertising scripts. For abuse prevention, the service keeps temporary salted IP hashes and request counts in memory for up to one hour, on the basis of our legitimate interest in securing the service (Article 6(1)(f) GDPR). Filter queries are not recorded in application access logs.
Hosting and delivery
The origin server is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. Delivering and securing a page involves processing IP addresses, requested addresses, time and technical connection data, based on our legitimate interest in a reliable and secure website (Article 6(1)(f) GDPR). Routine origin access logging is disabled. Operational/error records may contain connection data and are bounded to eight days by the server’s log-retention configuration.
The domain uses Cloudflare for DNS and, where proxying is enabled, delivery and protection. Cloudflare may process IP addresses, requests and security data, including outside the EU. The random-choice tools do not transmit their input lists to Cloudflare. Filmfinder API requests and voting-room requests pass through the website delivery infrastructure. See Cloudflare’s privacy policy for processing and transfer information. The origin log-retention limit does not describe Cloudflare’s separate records.
Advertising, analytics and external resources
The homepage, tools, finders and guides integrate Google AdSense and Google’s Privacy & Messaging consent service. Our publisher ID is ca-pub-3627921820078982. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, provides these services for users in the EEA. Loading the scripts sends technical information such as your IP address, browser and page request to Google; existing Google cookies may be read while ad requests are paused. The consent service stores your privacy choices. Our gate pauses ad requests until the consent service supplies a valid decision. Where GDPR applies, we additionally require consent to storage and access on the device and to Google as a vendor; personalized ads additionally require the relevant personalization consents. Google applies its further eligibility checks. Rejecting consent leaves ad requests paused in this implementation. Outside those regions, the current gate requests non-personalized ads once Google confirms that GDPR does not apply; other applicable Google consent signals still apply. AdSense may process advertising identifiers, interactions, device and connection information, and use cookies for advertising and reporting. Consent-based device access relies on section 25(1) TDDDG and consent-based personal data processing on Article 6(1)(a) GDPR. Required storage of your consent choice supports your requested privacy settings. Data may be processed outside the EU, including the US, under Google’s applicable transfer mechanisms. Details, retention and controls are described in Google’s information for partner sites and Google’s privacy policy. We do not install a separate analytics service or external fonts. There are no accounts or payment services.
Changing advertising consent
Use Privacy & cookie settings in the footer of a tool page to reopen Google’s consent message. Opening settings reloads that page to remove existing ads; it clears your current tool inputs and results. You can withdraw or change consent for the future. If the consent service is unavailable, our ad requests remain paused and the tools remain usable. Google’s consent message lists its purposes and vendors. Private voting rooms, legal, privacy and error pages do not load advertising or consent scripts. You can open privacy settings on the homepage; opening this link starts the consent service there.
Email contact
If you email us, we process your address and message to respond, on the basis of Article 6(1)(b) GDPR for contract-related requests or Article 6(1)(f) for other correspondence. Our contact mailbox uses Google Gmail; messages are also processed by Google and may be processed outside the EU. Do not send participant lists unless needed for your request. We delete correspondence when it is no longer needed for the request, legal obligations or the establishment or defence of claims. See Google’s privacy policy.
Your rights
Subject to legal conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Contact the controller above. You may complain to a supervisory authority, including the Bavarian State Office for Data Protection Supervision. These tools do not make decisions with legal or similarly significant effects.
Effective for the current version, 24 September 2026.