Privacy Policy

Thank you for your interest in our app "Flagle". Protecting your personal data is important to us. Below we inform you about how your data is processed.

1. Data Controller

Stephan Engelhardt
Nelkenstraße 9, 14542 Werder (Havel), Germany
E-Mail: contact@studio-seaside.de

2. Processed Data & Purpose

2.1 Locally Stored Data (on your device)

The app stores the following data exclusively on your device:

• Game progress, high scores, statistics
• App settings (language, theme, tutorial status)
• Unlocks (Pro version via StoreKit)

This data is not transmitted to us or any third party.

2.2 Automatically Processed Technical Data

When you use the app, the following data is processed automatically:

• Device type, iOS version, app version
• IP address (anonymised/truncated)
• Crash report timestamps

Purpose: app functionality, bug fixing, optimisation, security
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in uninterrupted app operation)

2.3 Google Firebase Analytics

The app uses Google Firebase Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyse app usage and the effectiveness of advertising.

• Data processed: app instance ID, device type, iOS and app version, usage events (e.g. app launch, session duration), approximate location (derived from the IP address)
• Purpose: statistical analysis and improvement of the app
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the app)
• Data transfer: EU + USA (EU–US Data Privacy Framework, Standard Contractual Clauses)

Firebase Privacy: firebase.google.com/support/privacy

3. Google AdMob (Advertising)

We use Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to display advertisements in the free version of the app (without Pro).

Data processed:

• Advertising ID (IDFA), device identifiers, IP address (truncated)
• App usage data, interactions with ads
• Interest profiles for personalised advertising (only with consent)

Purpose: monetisation through advertisements, ad performance measurement
Legal basis: Art. 6(1)(a) GDPR (consent via App Tracking Transparency) + Art. 6(1)(f) GDPR (legitimate interest for non-personalised advertising)
Data transfer: EU (Ireland) + USA
Safeguards: EU–US Data Privacy Framework, Standard Contractual Clauses (Art. 46 GDPR)

Your choice: Personalised advertising requires your explicit consent via Apple's App Tracking Transparency (ATT) system. In the EU, EEA, UK and Switzerland, we additionally ask for your consent via Google's consent platform (User Messaging Platform, IAB TCF); your choice is passed on to the mediation partners (section 3.1). Without consent, only contextual, non-personalised ads are shown. Advertising is removed entirely upon purchase of the Pro version.

Google Privacy Policy: policies.google.com/privacy

3.1 Mediation Partners

Through AdMob mediation, the following ad networks may also serve ads. They process the same types of data as AdMob, on the same legal basis:

• Unity Ads — Unity Technologies, 30 3rd Street, San Francisco, CA 94103, USA — Privacy policy
• Meta Audience Network — Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland — Privacy policy
• AppLovin — AppLovin Corporation, 1100 Page Mill Road, Palo Alto, CA 94304, USA — Privacy policy

4. Apple Services

4.1 StoreKit (In-App Purchases)

To purchase the Pro version of the app, we use Apple's StoreKit framework.

• Service provider: Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland
• Data processed: Apple ID, purchase history, transaction IDs (encrypted)
• Purpose: purchase processing, licence management, fraud prevention
• Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

We do not receive any personal payment data. Payment processing is handled entirely by Apple. We only receive anonymised purchase confirmations.

4.2 SKAdNetwork (Ad Attribution)

Apple's SKAdNetwork enables privacy-friendly ad measurement without access to personal data. Only aggregated, anonymous installation data is processed.

4.3 App Store Analytics

Apple collects anonymised usage data (downloads, device types, regions) for developer analytics.

4.4 Crash Reports (Apple)

In the event of a crash, anonymised crash logs are sent to Apple (only if enabled by the user in iOS Settings).

Apple Privacy Policy: apple.com/legal/privacy

5. Retention Periods

• Local data: until the app is uninstalled (on your device)
• Crash logs: up to 14 days
• AdMob and Firebase data: in accordance with Google's policies
• Data held by the mediation partners (Unity, Meta, AppLovin): in accordance with their policies
• StoreKit transactions: in accordance with statutory retention obligations (up to 10 years for tax records)

6. Your Rights (GDPR Art. 15–22)

You have the following rights regarding your personal data:

• Access (Art. 15): information about the data processed about you
• Rectification (Art. 16): correction of inaccurate data
• Erasure (Art. 17): "right to be forgotten"
• Restriction (Art. 18): restriction of processing
• Data portability (Art. 20): receipt of your data in a structured, machine-readable format
• Objection (Art. 21): objection to processing based on legitimate interest

Withdrawing consent:

• Apple IDFA/tracking: iOS → Settings → Privacy & Security → Tracking
• Advertising (Google AdMob and mediation partners): in the app under Settings → Privacy → Ad Settings, or by e-mail to contact@studio-seaside.de
• Delete local data: uninstall the app

Right to lodge a complaint:

You have the right to lodge a complaint with the competent supervisory authority:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany
E-Mail: poststelle@lda.brandenburg.de
Web: lda.brandenburg.de

7. Data Security

We implement technical and organisational security measures:

• TLS/SSL encryption for all network connections
• iOS sandbox isolation (app data is protected from other apps)
• Encrypted storage of sensitive data in the iOS Keychain
• Regular security updates for the SDKs used

8. International Data Transfers

Data transfers outside the EU/EEA only take place with appropriate safeguards:

• Google (USA): EU–US Data Privacy Framework certification + EU Standard Contractual Clauses (Art. 46(2)(c) GDPR)
• Unity, Meta, AppLovin (USA): EU–US Data Privacy Framework or EU Standard Contractual Clauses
• Apple (USA): EU Standard Contractual Clauses, data protection impact assessment carried out

9. Protection of Minors

This app is suitable for users aged 4 and above (age rating: 4+).

For users under 16: pursuant to Art. 8 GDPR, processing operations that require consent (e.g. personalised advertising) require the consent of a parent or guardian. We recommend that parents use the iOS settings to restrict tracking.

Minors should review this privacy policy together with their parents or guardians before using the app.

10. Data Processors & Partners

The following service providers process data on our behalf (Art. 28 GDPR):

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — Services: AdMob (advertising), Firebase Analytics — Data processing: EU + USA
• Unity Technologies, 30 3rd Street, San Francisco, CA 94103, USA — Service: Unity Ads (advertising via AdMob mediation) — Data processing: USA
• Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland — Service: Meta Audience Network (advertising via AdMob mediation) — Data processing: EU + USA
• AppLovin Corporation, 1100 Page Mill Road, Palo Alto, CA 94304, USA — Service: AppLovin (advertising via AdMob mediation) — Data processing: USA
• Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland — Services: StoreKit, App Analytics, Crash Reports — Data processing: EU + USA

11. Right of Withdrawal for In-App Purchases

You have the right to withdraw from this contract within fourteen days without giving any reason. The withdrawal period is fourteen days from the date the contract is concluded.

To exercise your right of withdrawal, you must inform us of your decision to withdraw from this contract by means of a clear statement (e.g. by e-mail):

Stephan Engelhardt
Nelkenstraße 9, 14542 Werder (Havel), Germany
E-Mail: contact@studio-seaside.de

Note: For refunds on in-app purchases, please contact Apple directly: support.apple.com

12. Apple Privacy Manifest

This app includes a Privacy Manifest in accordance with Apple's guidelines. It transparently declares all APIs and tracking domains used. The Privacy Manifest can be viewed in the app's metadata in the App Store.

13. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in the legal situation or app functionality. The current version is always available in the app under Settings → Privacy. We will notify you of material changes via the app or push notification.