NIGHTSHIFT ONLINE

App privacy

Last updated: September 15, 2026

This privacy policy covers Nightshift Online / Nachtschicht Online, including the Android app identified as com.korabu.nachtschichtonline and the Windows version. Visits to this website are additionally covered by our website privacy notice.

Who is responsible

Abuzer Korkmaz
Damiansweg 56
50765 Köln
Deutschland
Email: kontakt@autolibs.de
Phone: +49 178 3135460

Online play and necessary data

The game requires an internet connection, including when exploring an online lobby alone. There is no registration with an email address or password. You choose a display name; a pseudonym is sufficient. The app generates and stores random identifiers on your device for connections and reconnection. These identifiers and derived player identifiers are not anonymous.

IP addresses and technical connection data are processed to provide the game. Our game code does not request GPS location or build a location profile. The selected server region describes the game server, not your home location.

The hotel server processes your display name, chosen appearance, hotel session, app interactions and game state. This includes positions, task progress, attacks, votes and round results. Other participants see your name, character and the game information made available to them. Online play is not possible without transmitting the necessary data.

Hotel searches transmit the selected filters, such as language and available spaces, to answer the request. When you open a public hotel, its name, language, occupancy and entry code appear in the hotel search. Private hotels are not listed there; you can share their code yourself.

Optional content and chat

You choose whether to provide a custom hotel name or write chat messages. Messages are transmitted to the hotel server and the authorized participants in the discussion. You can play without writing messages. Please do not include confidential information in names or messages. Other participants may retain content outside our control, for example by taking screenshots.

Blocking, reports and abuse prevention

Blocking and reporting features are being prepared for the closed test. The following report-processing details apply once those features are available in your version and you receive confirmation that a report was successfully submitted. They are not available in older test versions.

A local block hides messages from the affected identifier in your own chat view. It does not delete content already transmitted or ban the player for everyone. Your accepted community-rules version and block list are stored locally. Accepting community rules is not blanket consent to arbitrary processing of personal data.

A report includes its reason, time, the affected display name and pseudonymous identifiers for the reporter, reported player and hotel. A chat report may include the selected message and limited context of up to seven messages. Only content originally available to the reporter is used. Confirmed reports are stored for review by authorized operators. There is no comprehensive automated screening of every message before it is displayed.

Requests are validated and rate-limited to reduce spam and abuse. In the planned reporting system, authorized operators can impose temporary restrictions on an identifier in a particular hotel. This does not create a global user account.

Retention and deletion

Game state remains available for the hotel session and the display of round results. Following a disconnection during a round, a place may remain reserved for reconnection for up to 60 seconds. Our own server code processes search filters in memory for the immediate response and does not create a personal search history.

In the prepared reporting system, limited chat evidence remains in memory for up to 15 minutes and at most two discussions. Successfully received reports and associated review notes have a planned retention period of at most 30 days from report receipt and are removed during the subsequent cleanup. A later review does not extend that period. A complete permanent chat archive is not planned. These periods describe the reporting system; they do not promise deletion of all data held by every provider.

Local preferences, identifiers, blocks and saved round or diagnostic exports remain on your device until you remove them. On Android, you can clear app data through system settings. Contact us for help removing local Windows data. Device backups and separately exported files may contain copies. Removing local data does not delete reports already stored on a server.

Technical operational data is needed for as long as necessary to operate connections, investigate errors and address specific disruptions. Support correspondence is deleted once the request and necessary follow-up are completed, unless legal retention obligations or the establishment, exercise or defence of legal claims require otherwise. Where longer retention is necessary, use is restricted to that purpose. We do not promise automatic deletion of all data within 90 days.

Service providers and other recipients

The game server and support mailbox are hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. The operator has confirmed Germany as the hosting location. netcup provides server and email infrastructure and may process technical connection and operational data for that purpose. Provider information: netcup privacy notice.

We use Photon by Exit Games for multiplayer connections. Photon processes device IP addresses and network user identifiers in particular. Our game connections use the EU region. However, Photon operates international infrastructure, so this is not a guarantee that all processing and access occur exclusively within the European Economic Area.

Photon's published data-processing terms describe possible international transfers and provide for EU Standard Contractual Clauses for applicable transfers. See Photon's data privacy information and its Data Processing Addendum. You can request information about recipients and safeguards applicable to our processing through our privacy contact.

Authorized operators may also access necessary data, and authorities may receive data where there is a legal basis. We do not sell player data or use it for personalized advertising.

Diagnostics and transmission security

Our diagnostic feature locally records information such as frame rate, connection latency, memory use, device details and error information. Its export is saved locally and is not automatically uploaded by that feature. If you send us a diagnostic file yourself, we process its content and your contact details to address your request. Technical connection and service logs maintained by providers are separate.

The current test version does not yet have fully verified encryption of game traffic. Native Photon encryption is being prepared. This website's HTTPS certificate does not automatically encrypt the game connection. Please do not transmit confidential information through names or chat during testing. We will update this notice when transmission protections change.

The described game version contains no advertising or in-app purchases. It does not provide microphone recording or uploads of personal photos, videos or audio files. The ghost voice is an included game effect. The game is intended for teenagers and adults; regional age ratings apply.

Purposes and legal bases

We process necessary connection, identity and gameplay data to provide the game features you request under Article 6(1)(b) GDPR. Processing optional chat and hotel content also serves those requested features. Abuse prevention, report review and technical troubleshooting serve our legitimate interests in a safe, functioning game and protecting other players under Article 6(1)(f) GDPR. General support requests use that basis; contractual requests use Article 6(1)(b) GDPR. Processing required by law is based on Article 6(1)(c) GDPR.

Access and deletion requests

You can request access to, correction of or deletion of your personal data by emailing kontakt@autolibs.de. Name the game and explain your request. Your display name, approximate time and, where available, a report receipt can help us locate relevant data. Do not send passwords, secret connection tokens or complete identity-document copies.

Because there is no account tied to an email address, a freely chosen name may not uniquely establish ownership. If needed, we will ask for limited additional information. A request does not automatically delete another person's content or legally required evidence. We will explain which data can be located and deleted and whether retention grounds apply.

Your other rights

Subject to legal conditions, you have rights to restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing relies on consent, you may withdraw it for the future. You may complain to a data protection authority, including the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

We do not use your data for solely automated decisions producing legal or similarly significant effects. We update this policy when game features or data processing change; the date above identifies this version.