Last updated: 15 May 2026
Controller
Nico Hesemann
c/o Adventgemeinde Bergen
Calandstraße 5-6
18528 Bergen auf Rügen
Germany
Email: nico.hesemann@sta-bergen.de
Purpose of this website
StepIntoBible is a private interactive Bible story website. Visitors can play stories as guests with a pseudonymous browser identifier. Users can also create an account, log in, save progress across devices, comment on stories and view achievements.
Data processed
- Account data: username, display name where applicable, email address and encrypted password.
- Guest data: a pseudonymous guest ID stored in the technically necessary
sib_guest_idcookie and the game progress linked to that browser identifier. - Game data: selected story, progress, decisions, values/statistics, achievements and approximate play time, depending on whether the story is played as a guest or with an account.
- Comment data: story comments submitted by logged-in users, moderation status and timestamp. Approved comments are publicly visible together with the username or display name.
- Internal usage analytics: page views, outbound link clicks, start-button clicks, story starts, selected decisions, story completions, approximate engagement time, referrer domain, UTM parameters, language/timezone/screen-size metadata, country code/country name where technically available, coarse device/browser/operating-system category and daily pseudonymous visitor hashes.
- Technical data: IP address, time of access, requested URL, user agent and similar server log data.
- Session data and CSRF tokens required for login and security.
Internal analytics
If enabled, the website uses a self-hosted internal analytics tool to understand usage and improve the stories. It does not load third-party analytics providers such as Google Analytics. Raw IP addresses, raw user agents and raw guest IDs are not stored in the local analytics table. Country information is derived either from a hosting/server country signal or from a locally stored GeoIP country database; only the country code/name is stored, not the underlying IP address. Visitor counts are based only on daily pseudonymous hashes. Where configured, selected analytics events may also be sent to the controller's central self-hosted statistics service for the same purpose. “Do Not Track” / Global Privacy Control signals are respected where transmitted by the browser.
Legal bases
Processing is based on Art. 6(1)(b) GDPR where it is necessary to provide the account and game functions, Art. 6(1)(f) GDPR for secure operation, abuse prevention, server logs and privacy-friendly usage analysis, and Art. 6(1)(a) GDPR where consent is explicitly requested.
Cookies and local storage
The website uses technically necessary cookies for login sessions, CSRF protection, optional “remember me” login and guest progress (sib_guest_id, up to 365 days). The browser may also store local settings such as audio volume, text size, motion preference, selected audio track, current text page and temporary player state. No advertising or tracking cookies are used.
Hosting and logs
The website is hosted on webspace provided by IONOS/1&1. The hosting provider may process technical server logs to operate and secure the service.
External support link
The website links to Ko-fi (ko-fi.com/stepintobible) as a voluntary support option. The link is external; no Ko-fi payment widget, tracking script or embedded payment form is loaded by this website. If you open the link, Ko-fi’s own privacy policy and terms apply.
Retention
Account, guest game progress and comment data are stored as long as the account or guest progress exists or until deletion is requested, unless a comment is removed earlier during moderation. The guest cookie is technically limited to up to 365 days. Internal analytics data and server logs are retained only as long as necessary for operation, security and product improvement, subject to the hosting provider’s retention periods.
Your rights
You have the right to access, rectification, deletion, restriction, objection and data portability where legally applicable. You may also lodge a complaint with a supervisory authority. To exercise your rights, contact the email address above.
No ads / no third-party analytics
This website does not use advertising networks, advertising profiling or third-party analytics providers.