Политика конфиденциальности

Last updated November 4, 2026

In short

• Tumak has no accounts and no database. We never receive or store your scenes.
• A scene (names, messages, settings) lives in the link itself, after the #. Browsers do not send that part to our server, so the names and messages you type stay between you and the people you send the link to.
• Google Analytics runs only if you click "Accept", and never sees names or messages.

Who is responsible

Tumak is a qudqu project. Email: [email protected], or see Contact us.

Your scenes and links

Everything you enter in the form is turned into the link you share. Anyone who has the link can watch the scene and read what it says, so please don't put anything private or hurtful in it. When you send the link through a messenger, email or another app, that service's own privacy policy applies. Tumak never uploads the link anywhere.

Hosting and server logs

The site is hosted on GitLab Pages by GitLab Inc., 268 Bush Street #350, San Francisco, CA 94104, USA. When you open a page, your browser sends the technical data every website receives: your IP address, the date and time, the page requested (without the part after #), the referring page and your browser and operating system. GitLab uses this data to deliver the site and keep it secure, and keeps it according to its own retention rules. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in running a working, secure website). The transfer to the USA is based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) or, where that does not apply, on standard contractual clauses (Art. 46(2)(c) GDPR). See GitLab's privacy statement.

Stored in your browser

• Your analytics choice (cookie-consent in local storage), so we don't ask again on every visit. It stays until you change it or clear the site data.
• The form while you watch (session storage): when you press "Watch it" and come back, the form is filled in as you left it. It is deleted when you close the tab.

Both are needed for features you use (§ 25(2) no. 2 TDDDG) and never leave your device. Fonts are served from our own site, so no font service learns that you visited.

Google Analytics (only with your consent)

If you click "Accept", we use Google Analytics 4 to count visits and see which parts of Tumak people use. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before you decide, nothing is loaded from Google.

Google Analytics then receives:

• the page address without the part after #, the page title and the site language;
• device, browser, operating system, screen size and the referring page;
• approximate location (country, region, city), derived from your IP address, which Google Analytics does not store;
• these actions: link created, link shared, scene started, scene watched to the end, replay and "Make your own", each with only the number of punches and whether the super punch is on.

Names and messages are never sent. Google signals and all advertising features are switched off. Google Analytics sets the cookies _ga and _ga_… on tumak.qudqu.com for up to 2 years; the collected data is deleted after 2 months. Google may process data in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time with effect for the future: open Cookie settings (also at the bottom of every page) and click "Reject". Tracking then stops at once and the cookies are deleted. More in Google's privacy policy.

Email

If you email us, we use your address and message only to answer you, and delete them when they are no longer needed. Legal basis: Art. 6(1)(f) GDPR.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21), and to withdraw consent at any time (Art. 7(3)). Just email us. You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one where you live.

You don't have to provide any personal data to use Tumak. We don't use automated decision-making or profiling.

Changes

We update this policy when Tumak changes. The date at the top shows the current version.