3DTD is a private hobby project. Nothing is sold here and nothing is advertised, there is no revenue, no ads, no sign-up and no player account. German law (section 5 DDG) requires a formal provider identification only for commercial services, and this one is private. The way to reach the operator is right below anyway.
This page is a translation. The German version is the one that governs, because the obligations behind it come from German law.
Contact
Run privately by ingel81.
- Email: legal@sgeht.net
- Source and bug reports: github.com/ingel81/3dtd, issues preferred
The same address is the route for anything about data protection.
Liability
Content and links
The content here is written to the best of my knowledge, without any warranty that it is correct, complete or current. For external content behind links, the respective provider is responsible. There is no general duty to monitor them under sections 7 to 10 of the German Digital Services Act. Any link will be removed once an infringement becomes known.
The software
The game is an unfinished hobby project under the AGPL-3.0. Sections 15 and 16 of that licence exclude all warranty and liability. Use it at your own risk. There is no promise that the site or the game is available, that it works, or that it keeps running.
Your own keys and what they cost
The game loads its 3D tiles with a Cesium ion token or a Google Maps key that each player creates and keeps in their own browser. Usage, quotas and any resulting cost are therefore the key holder's, under the terms and prices of Cesium or Google. No liability is accepted for charges, suspensions or blown quotas on someone else's key.
Copyright and licences
- Own source code: AGPL-3.0, readable on GitHub.
- 3D tiles: © Google. The required attributions are carried in the game and in the screenshots.
- Street and building data: © OpenStreetMap contributors, ODbL 1.0.
- Third party models, sounds and music: under CC-BY or CC-BY-SA. The full credits sit in the game under Attributions and in the repository in
src/app/configs/attributions.config.ts. - Fonts: Oswald, Inter Tight and JetBrains Mono under the SIL Open Font License 1.1. The licence texts sit next to the font files in
landing/media/fonts/. - Draco decoder: Apache License 2.0, Google.
If you think something here is used without permission, write to the address above. It will be checked and, in case of doubt, removed.
Youth protection
The game shows cartoon violence against zombies and similar enemies. The site therefore carries an age label under the German age-de.xml standard, set to 12. Recognised youth protection programmes read that file and can hide the site from younger users.
Privacy policy
Controller
The controller under the GDPR is the operator of this site, reachable at legal@sgeht.net. No data protection officer is appointed, the thresholds for that are not met.
The short version
This site sets no cookies, measures nothing, carries no ads and loads no fonts from other servers. There is no sign-up, no account and no game server. Everything the game does happens in your browser or the desktop app; only online co-op goes through a small lobby server, described below.
Hosting and server logs
The site is hosted by ALL-INKL.COM, Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. No server log files are written or kept in this site's hosting account. When a page is requested, the provider briefly processes connection data on its own systems, including the IP address of your device, as far as that is needed to run the service and to detect and fend off attacks. Full IP addresses are deleted there after seven days at the latest.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is a technically secure, stable and abuse-free site. The data is not combined with other data and not evaluated for marketing. A data processing agreement under Art. 28 GDPR is in place with the provider.
The domain's DNS runs through Cloudflare. The proxy is switched off, so requests go straight to the host and Cloudflare does not see the traffic itself.
Videos on this site
The clip at the top of the start page and the videos in the list not marked YouTube are served from this site's own server, with no connection to any third party.
The videos marked YouTube load only when you click the still image or pick them from the list. Before that click, not a single request reaches Google. After it, the player is loaded from youtube-nocookie.com, which gives Google Ireland Limited your IP address and device details and can involve a transfer to the United States. The legal basis is the consent expressed in that click, Art. 6(1)(a) GDPR. If you would rather not, do not click the still.
The game at /play/
The game has no backend of its own. It does load map and terrain data from third party services as soon as it starts, which transmits your IP address along with the requested coordinates or search terms. Without those requests the game does not work, so the legal basis is the legitimate interest in being able to run the function you asked for at all, Art. 6(1)(f) GDPR.
| Service | What for | Provider |
|---|---|---|
| Cesium ion | access to the 3D tiles with your own token | Cesium GS, Inc., USA |
| Google 3D Tiles | the photorealistic tiles themselves | Google Ireland Limited, Google LLC, USA |
| Nominatim | address search and reverse lookup | OpenStreetMap Foundation, United Kingdom |
| Overpass | streets and building footprints nearby | one of the public Overpass servers, one after the other until one answers: overpass-api.de (Germany), Private.coffee (Austria), maps.mail.ru by VK (Russia); for places in their region first overpass.osm.ch (Switzerland) and overpass.atownsend.org.uk (United Kingdom) |
One thing worth knowing about the address search: whatever you type goes to Nominatim. Type your own home address and you hand it to that OpenStreetMap service. Picking a spot nearby instead of your house number avoids it.
For transfers to the United States, the processing relies on the adequacy decision where the provider is certified under the EU-US Data Privacy Framework, and on standard contractual clauses otherwise. A residual risk of access by authorities there remains.
Switzerland and the United Kingdom are covered by an EU adequacy decision. Russia is not: the VK server is asked only when none of the other servers answers, and then receives your IP address and the map area requested. There is no agreement with VK, and access by authorities there cannot be ruled out.
Online co-op
Co-op online runs in the desktop app only. Your game then connects to the lobby server at 3dtd-lobby.sgeht.net, which is reached through Cloudflare, Inc. (USA) as network provider. The server passes your moves to the other players of your room. It keeps a log with the time, the room code, the name you chose and which browser engine and system your game runs on, for 14 days, to find errors. It does not store IP addresses; the address of a connection is only counted in memory while it is open, to limit how many connections one machine opens. A room you put into the public list shows its name and the place you play to other players. Co-op on your local network does not use the lobby.
The legal basis is the legitimate interest in running the co-op game you started, Art. 6(1)(f) GDPR. If you agree after a game, the server also keeps your run log (the names in the game, the place you played, your moves and numbers) for 90 days, to find errors and improve the game. The legal basis for that is your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time in the game's Runs window.
Location
On startup the browser asks once for your location. Granting it is voluntary, and refusing brings up the location picker instead. The position is handled in the browser and leaves the device only as a coordinate sent to the map services listed above.
Storage in your browser
The game keeps what it needs in local storage and IndexedDB: the tile token you entered, your settings and a cache of street data. That data stays on your device, reaches neither this site nor the host, and can be cleared at any time in your browser settings. Since it is required for the service you explicitly asked for, no consent is needed, section 25(2) no. 2 TDDDG. That is why there is no cookie banner.
Contact by email
If you write, your address and message are processed to deal with the matter, Art. 6(1)(f) GDPR. Messages are deleted once they are settled and no retention duty stands in the way.
Your rights
You have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Consent once given can be withdrawn at any time with effect for the future. You may also lodge a complaint with a data protection supervisory authority, Art. 77 GDPR.
Last updated: 18 October 2026. Changes to the site may make an update of this text necessary.