Privacy Policy
Last updated: 09 October 2025
1. Overview
This policy explains what personal data we collect when you visit our websites or use our mobile applications (together the “Services”), why we collect it, how we use it and which choices you have. “Personal data” means any information that directly or indirectly identifies you.
2. Controller
Controller: Sebastian Schmitt, c/o Block Services,
Stuttgarter Str. 106, 70736 Fellbach, Germany
E-mail: [email protected]
2.1 Data-Protection Officer
According to § 38 BDSG we are not obliged to appoint a data-protection officer.
3. Data We Collect
- Our Website Hosting: Our website is hosted by Namecheap, which may process limited personal data, such as IP addresses, in server logs for security and operational purposes. They gather broad demographic information from this data to improve their website and enhance the browsing experience, as stated in their policy. We do not actively store these logs ourselves.
- Third-Party Services:
- Purchase and Subscription Metadata: We use Google Play (purchase token, product ID, purchase time, price, renewal status) to facilitate in-app purchases and subscriptions for our mobile apps.
- Analytics: Our mobile apps use Google Firebase services (such as Firebase Analytics and Firebase Crashlytics) to help us understand overall app performance and maintain stability. These services collect aggregated, anonymized data about how the app is used.
- Cloudflare: Our website uses Cloudflare which is essential for content delivery. This service may collect personal data (e.g., IP address) according to their Privacy Policy.
- Google Fonts: We utilize Google Fonts for typography only after given your consent via our cookie banner. This service may collect and process personal data (e.g., IP address) according to their Privacy Policy.
- Caching: This site uses caching (via QUIC.cloud) to improve load times and user experience. This service may collect data (e.g., IP address, crash logs) for technical support according to their Privacy Policy.
- Purchase and Subscription Metadata: We use Google Play (purchase token, product ID, purchase time, price, renewal status) to facilitate in-app purchases and subscriptions for our mobile apps.
More details concerning data collection and retention are listed below in the paragraph regarding data retention.
4. Purposes and Legal Bases
- Performance of a contract (Art. 6 (1)(b) GDPR) – providing and billing in-app
purchases and subscriptions, delivering customer support. - Legitimate interests (Art. 6 (1)(f) GDPR) – safeguarding IT security,
preventing fraud, measuring reach and improving the Services. - Consent (Art. 6 (1)(a) GDPR & § 25 TTDSG) – placing non-essential cookies or
delivering personalised ads. Consent can be withdrawn at any time. - Legal obligations (Art. 6 (1)(c) GDPR, HGB, AO) – bookkeeping, tax and consumer-protection duties.
5. Cookies and Similar Technologies (§ 25 TTDSG)
We use essential cookies to operate the website and ensure its accessibility. All other cookies or comparable identifiers (e.g., from Google Fonts) are set only after you have given explicit consent via the cookie banner. You can withdraw or change this consent at any time using the buttons provided in the footer of this website.
6. Server Log Files
Our web hosting provider (Namecheap) automatically collects access logs that may include your IP address, browser type, and timestamps. These logs are stored on Namecheap’s servers and are retained for a period determined by their internal policies, typically for operational security and abuse prevention. We do not access or use this data except in cases of technical troubleshooting or abuse detection.
7. Mobile Apps, Subscriptions and In-App Purchases
7.1 Subscriptions & Billing
Our Android apps use Google Play Billing. When you buy a subscription or consumable item, Google sends us a unique purchase token plus product ID, price, currency and purchase timestamp. We do not receive your name, address or payment-card details.
7.2 Monitoring & Analytics
We use Google Firebase Analytics and Crashlytics to help us understand how the app performs and to keep it stable. These services allow us to identify crashes, performance issues, and the features most commonly used, so we can improve reliability and make future updates more useful. All data is aggregated and anonymous. It cannot be used to identify individual users and is never used for advertising or tracking purposes. We do not store the information ourselves and do not share any of the information we receive through Firebase.
8. Sharing of Data
- Service providers (hosting, customer support, analytics, payment processing).
- Public authorities where required by law or to protect legal rights.
- Other third parties only with your explicit consent.
Where recipients are outside the EEA we rely on the EU Standard Contractual Clauses and additional safeguards.
9. Retention
Website: We do not actively collect or store personal data on this website, which is hosted by Namecheap. This provider may process limited personal data, such as IP addresses, in server logs for security and operational purposes. This data is not used by us to personally identify visitors. However, under applicable data protection laws, IP addresses may still qualify as personal data.
The exact retention period of server logs is determined by Namecheap and has not been publicly disclosed. For more information, please refer to their Privacy Policy.
Cache files are temporary duplicates of web pages, expiring automatically. They may be accessed by QUIC.cloud for technical support. See Privacy Policy for details.
Third-party services (e.g., Cloudflare, Google Fonts) may also process data (e.g., IP addresses). Any service that is non-essential for accessing our website, will only do so after given your consent via our cookie banner, with retention periods governed by their policies (Cloudflare: Privacy Policy; Google: Privacy Policy). You can withdraw this consent at any time using the options in the footer.
Mobile Applications: We do not actively collect or store personal user data from our mobile applications on our own servers. Involving third parties, we solely use Google services (Firebase, Play Console) as mentioned previously, in order to distribute our applications and for monitoring purposes.
Retention periods for data processed by Google vary. For more information, please refer to their Privacy Policy.
10. Your Rights
You have the rights of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15-21 GDPR and § 34 BDSG). You may withdraw any consent at any time.
11. Data Deletion
App data, including personal preferences, is stored locally on your device unless transmitted to Google Play Console as described above. You are responsible for managing, backing up, or deleting data stored locally on your device. You can delete all locally stored data using the “Factory Reset” option in the app settings.
12. Right to Complain
You can lodge a complaint with any supervisory authority, in particular the one competent for your habitual residence. Our lead authority is:
Landesbeauftragte für den Datenschutz und die Informationsfreiheit Saarland
Fritz-Dobisch-Straße 12
66111 Saarbrücken, Germany
Phone: 0681 94781-0 · E-mail: [email protected]
A full list of German authorities is available at bfdi.bund.de/anschriften.
13. Security
We use TLS encryption for all transfers and maintain technical and organisational measures to safeguard your data against unauthorised access, alteration or deletion.
14. Children’s Privacy
Our Services are not directed to children. If we become aware that a child has provided personal data, we will delete it immediately.
15. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on our website. Continued use of the Services after the effective date constitutes acceptance of the updated terms.
16. Contact
For any questions about this policy, write to [email protected].