Privacy Policy

1. Controller

Yannick Gardt
Dresdener Straße 7a
36039 Fulda
Germany
Email: play@bommel24.de

2. Data we process

Game account: On first launch the app creates a random device ID and uses it to create a game account on our server (account ID, random username). We do not collect your name, email address or phone number.

Game data: progress, inventory, cards, gear, in-game currencies, achievements and run results, so your progress is saved and protected against cheating.

Purchases: In-app purchases are processed by Google Play. We never receive payment details, only a purchase confirmation (product, time, order token) to verify and deliver your purchase.

Technical data: When you connect, our server processes your IP address and technical log data (time, request, errors). Server logs are deleted after 14 days at the latest.

Optional services, if enabled in the app: sign-in with Google Play Games (Google account identifier), ads via Google AdMob (advertising ID; personalized ads only with your consent), push notifications via Firebase Cloud Messaging (device token) and anonymous gameplay analytics.

3. Purposes and legal bases

Providing the game, saving your progress and processing purchases: Art. 6(1)(b) GDPR (contract).

Security, fraud and cheat detection, error analysis: Art. 6(1)(f) GDPR (legitimate interest in a safe and fair game).

Personalized ads and analytics: only with your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time in the settings.

4. Storage location and recipients

Our game servers are operated by us in Germany (EU). We do not sell personal data.

The only recipients are the Google services listed above (Google Play and, if enabled, AdMob and Firebase). Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework or uses standard contractual clauses.

5. Retention

We keep your game account and game data for as long as the account exists. Purchase records are kept as long as statutory retention periods require. Server logs are deleted after 14 days at the latest.

6. Deleting your account

You can request deletion of your account and all game data at any time, instantly in the app (Settings → DELETE ACCOUNT) or by email to play@bommel24.de with your account ID (shown in the settings). We delete the data within 30 days.

→ Delete your account and data

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time. California residents: we do not sell or share personal information.

You can lodge a complaint with a data protection supervisory authority, for example: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

8. Children

The game is not directed at children under 13. Users under 16 may only give consent and make purchases with a parent's permission.

9. Changes

We update this policy when the game or the law changes. The version published here applies.