Privacy Policy

This policy explains what personal data we process when you use Randomizer Box (randomizerbox.com), on what legal basis, and the rights you have. It follows the EU General Data Protection Regulation (GDPR) and the German Digital Services Act (DDG) and Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

The controller responsible for data processing on this website is:

Matthias Mackowiak, trading as Maak Media
Knebelstraße 6, 98693 Ilmenau, Germany
Email: mail@randomizerbox.com

2. Data processed in the tools themselves

Randomizer Box's generators and pickers run entirely in your browser. The names, lists, options and other inputs you type into a tool are processed locally on your device and are never sent to or stored on our servers.

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, Vercel automatically processes technical connection data on our behalf (as a processor under Art. 28 GDPR) so the pages can be delivered to you. This may involve a transfer of data to the United States, a third country. Such transfers are safeguarded by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework. The legal basis is our legitimate interest in a secure and efficient presentation of our website (Art. 6 (1) (f) GDPR).

4. Server log files

For technical operation and security, the hosting infrastructure may automatically collect and temporarily store information in server log files, such as the browser type and version, the operating system, the referrer URL, the time of the request and the (often shortened) IP address. This data is not merged with other data sources and is processed on the basis of our legitimate interest (Art. 6 (1) (f) GDPR).

5. Cookies and consent

Our own tools do not require cookies to work. However, the advertising and analytics services described below may store and read information on your device (e.g. cookies). In accordance with § 25 (1) TDDDG and Art. 6 (1) (a) GDPR, this only happens after you have given your consent through our consent banner.

We use a Google-certified consent management platform (Google Funding Choices) to obtain and document your consent. You can change or withdraw your consent at any time with effect for the future via the privacy settings link in the consent banner / footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Advertising — Google AdSense

We display ads via Google AdSense, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. AdSense uses cookies and similar technologies to display ads and, with your consent, to personalise them and measure their performance. If you do not consent to personalised ads, non-personalised ads may still be shown based on non-personal signals such as the current page and approximate location.

Processing for personalised advertising is based on your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Data may be transferred to Google LLC in the USA; Google is certified under the EU–US Data Privacy Framework and additional Standard Contractual Clauses apply. You can review and manage Google's use of your data at policies.google.com/technologies/ads.

7. Analytics — Google Analytics 4

With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, to understand in aggregate how the site is used and to improve our tools. Google Analytics uses cookies and processes usage data such as pages viewed, approximate location and device information; IP addresses are shortened/anonymised by Google. The legal basis is your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Data may be transferred to Google LLC in the USA under the safeguards described above. You can withdraw your consent at any time as described in section 5.

8. Fonts

Web fonts used on this site are hosted locally on our infrastructure and served together with the page. No connection to Google Fonts servers is established and no font-related data is transferred to third parties.

9. Contacting us

If you contact us by email (e.g. via our contact page), we process the data you provide (such as your email address and the content of your message) solely to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your request relates to a contract, otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). We delete this data once it is no longer required and no statutory retention periods apply.

10. How long we keep data

We only process personal data for as long as necessary for the purposes described above or as required by statutory retention obligations. Consent records are kept for as long as needed to demonstrate compliance.

11. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21); and
• withdraw consent at any time with effect for the future (Art. 7 (3)).

To exercise any of these rights, contact us at mail@randomizerbox.com.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI)
Häßlerstraße 8, 99096 Erfurt, Germany
www.tlfdi.de

13. Changes to this policy

We may update this privacy policy to reflect changes in our services or the legal requirements. The current version always applies.

Last updated: 13 June 2026