Privacy Policy
This privacy policy explains which personal data is processed when you use TrikotRanking, for which purposes this happens, and which rights you have under the GDPR.
Controller
The sole trader named below is responsible for the processing of personal data on this website.
Julian Markgraf
Voglerstr. 9
01277 Dresden
What data is processed
TrikotRanking only processes data that is required to provide the service, save your rankings, and optionally enable partner links.
- technical access data such as IP address, time of access, requested URL, referrer, browser information, and device data that may arise at the hosting level
- browser-stored identifiers and settings such as consent status, username, browser token, and user ID
- information and content you provide, such as your username, the order of your rankings, and timestamps of storage or updates
- data related to a redirect to external partners or sharing services if you actively use those buttons
Provision of the website
When you access the website, Vercel as hosting and delivery provider processes the connection and log data required for delivery, stability, TLS encryption, and security. This may include in particular the IP address, date and time, pages accessed, browser information, and referrer.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and efficient provision of the website.
Username, browser token, and rankings
If you want to save a ranking, a random browser token is stored in your device's local storage. You may also choose a username. Together with an internal user ID, this information is used to assign your ranking to the same browser later on.
When you submit a ranking, the user ID, browser token, league, season, kit type, the order you selected for the jerseys, and technical timestamps are processed. This is necessary to update saved rankings, calculate community averages, and limit abuse.
If you share a comparison link, the corresponding ranking becomes accessible via a unique URL. Anyone who knows the link can view the ranking data contained in it. The username is currently not shown on the comparison page. The legal bases are Art. 6(1)(b) GDPR for the storage and comparison function requested by you and Art. 6(1)(f) GDPR for service integrity and abuse prevention.
Browser storage and consent
TrikotRanking currently does not embed classic on-site tracking tags. However, browser storage techniques are used to manage core functions, user assignment, and your consent status.
- necessary local storage entries for browser token, user ID, and username so saved rankings can be assigned to the same browser again
- a local storage entry for your affiliate/marketing choice; affiliate buttons are only enabled after active consent
- your selection remains stored locally in your browser until you delete it yourself or use the reset below
Reset your current selection here if you want to give or withdraw consent again.
Affiliate links
Some pages may display buttons linking to partner offers. These links are provided via the Awin affiliate network. There are no additional costs for you.
On this website, affiliate buttons are only enabled after you have consented to marketing/affiliate use in the selection banner. Before that, no affiliate redirect is triggered from the interface.
If you click a partner button after giving consent, a connection to Awin and then to the respective partner offer is established. In that context, data such as IP address, timestamp, referrer, device-related data, and the target URL may be processed. The legal basis is your consent under Art. 6(1)(a) GDPR. Where consent is required for access to information on your device, processing is additionally based on Sec. 25(1) TDDDG.
Recipients and services used
Personal data is only transferred to third parties if this is required to operate the website or if you actively trigger the respective function yourself.
- Vercel as the website's technical hosting, CDN, and TLS provider for delivery, protection, and logging of the service
- Strato as the domain registrar; contract, billing, and domain-holder data may be processed there, while the DNS configuration points to Vercel
- Supabase as backend and database service for user, ranking, and content data; depending on the configured project region, data may also be processed outside the EU/EEA
- Awin and the respective linked shop only when you click affiliate buttons after prior consent
- WhatsApp, X, or your device's native share function only when you actively use the share feature
Storage period
We do not store personal data longer than necessary for the respective purpose unless statutory obligations require otherwise.
- local storage data remains on your device until you delete it yourself, clear your browser, or reset the settings via this privacy page
- user and ranking data is generally stored until the purpose no longer applies or you request deletion, unless statutory retention obligations prevent this
- server and access data is usually retained by the hosting or infrastructure provider only temporarily for troubleshooting and system security
Your rights
Subject to the legal requirements, you have in particular the following rights:
- access to the personal data concerning you under Art. 15 GDPR
- rectification of inaccurate data or completion of incomplete data under Art. 16 GDPR
- erasure of your data under Art. 17 GDPR
- restriction of processing under Art. 18 GDPR
- data portability under Art. 20 GDPR where the legal requirements are met
- objection to processing based on Art. 6(1)(f) GDPR under Art. 21 GDPR
- withdrawal of consent with effect for the future under Art. 7(3) GDPR
- the right to lodge a complaint with a supervisory authority, especially in the Member State of your habitual residence, workplace, or the place of the alleged infringement under Art. 77 GDPR
Changes to this privacy policy
We update this privacy policy whenever the technical implementation, the services used, or the legal requirements change. The version published on this page applies in each case.