Cookie “sid”
A random string, nothing else.
- What for
- So the server knows which puzzle is yours and – if you're signed in – which account you belong to.
- How long
- As a guest until you close the browser. Signed in for 30 days or until you sign out.
This is a translation for convenience. The German version is legally binding.
In short: this site only stores what it needs for playing. No ads, no tracking, no analytics, no social media buttons, no fonts or scripts from other servers. Nothing is sold or passed on to third parties. Below is every single piece of data that comes up here.
Müller & Wulff GmbH
Hans-Fallada-Str. 20
D – 17489 Greifswald
E-Mail: info@mueller-wulff.de
This is everything. Whatever isn't listed here isn't stored.
A random string, nothing else.
“de” or “en” – only if you switch the language at the bottom of the page.
Per game (Sudoku, Yukendo) in localStorage: under yukendo:game:… the ID of the current puzzle, the digits and notes you entered, the history of your moves (for “Undo”), which cells are marked wrong, the time, whether the game is paused, size, level, mode and counters for notes and erasing; under yukendo:prefs:… the last chosen size, level and mode.
At most one per game (Sudoku, Yukendo): the puzzle, its solution, start time, mode, which cells you checked or revealed, how often you checked the full grid and, in “Relaxed” mode, which wrong digits you entered where.
The same as “Progress with an account” and “Groschen and badges” (see below) – in memory only.
Name, password as a hash, date created.
Per solved puzzle: game, size and level, mode, time taken, start and end time, your clock's offset from UTC, how many hints you took, how often you checked the full grid, whether exactly one cell was ever wrong, the number of mistakes in “Relaxed” mode, and how often you set notes, erased or undid.
Balance, total earned and spent, the last 100 entries (amount, kind, time) and when you got which badge.
A hash of the cookie ID, which account it belongs to, and an expiry date.
No email address, no real name (unless you choose it as your user name), no IP addresses – neither by the app nor by the web server –, no device fingerprint, no clicks, no referrers, no statistics about your behaviour. There is no profiling and no automated decision-making about you (Art. 22 GDPR).
By law a cookie banner is only needed when a site stores things on your device that it doesn't need for the actual service – for ads, tracking or statistics, say. This site doesn't do that. The cookies and the game state in your browser are strictly necessary for the game you opened, or to keep the language you explicitly chose (§ 25 (2) no. 2 TDDDG). That needs no consent – just this explanation.
The site is hosted by: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland (eigener Root-Server im Rechenzentrum Nürnberg).
To deliver a web page at all, the server briefly has to process your IP address. Neither the app nor the web server writes access logs. On technical errors they log an error message with the requested address, but without IP address and without details about your browser; these messages are kept only in limited amounts and then overwritten automatically. The legal basis is our legitimate interest in secure and working operation (Art. 6 (1) (f) GDPR).
Data is not passed on to anyone. The hosting provider only runs the data centre and the hardware the server runs on; in doing so it may technically come into contact with connection data, for example to fend off attacks. All data stays in Germany; nothing is transferred to countries outside the EU.
You don't have to provide any data: you can play without an account. Without the “sid” cookie the game doesn't work, though, because the server couldn't tell which puzzle is yours.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Most of it you can do yourself:
Right to object (Art. 21 GDPR): where we rely on legitimate interests (delivering the pages, the server's error messages), you can object at any time on grounds relating to your particular situation – an email is enough.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin.
Ends your session and deletes the session cookie and the game state in this browser. As a guest that also deletes your progress. An account stays – to delete it, see above.
Last updated: Oktober 2026