Privacy at Hopfenhölle

Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

In short

Hopfenhölle is a game for iPhone and iPad. There is no account and no server of my own; your progress and settings stay on your device, and the app sends no analytics of its own to me. The game shows ads through Google AdMob. Before any ad is loaded, Google’s consent form asks you first, and then iOS asks whether the app may track you for advertising.

There is no automated decision-making that affects you legally, and I do not build a profile of you.

What is stored on your device

The app stores your progress (gold, talents, festival tent upgrades, unlocked characters and levels, best results) as well as language, music and sound settings. All of this stays in the app’s storage on your device. I have no access to it, and none of it is sent to me. Device backups such as iCloud Backup follow your iOS settings.

The legal basis is Art. 6(1)(b) GDPR: without a save, the game cannot keep your progress. Storing it on the device is strictly necessary for that (Section 25(2) no. 2 TDDDG).

Consent for advertising

On first launch, Google shows a consent form (User Messaging Platform). Right after that, iOS asks whether the app may track you across apps and websites owned by other companies (App Tracking Transparency). The app only loads ads after this flow. Google stores your choice from its form on your device.

You can change it at any time under “Ad privacy options” in the game’s settings, where Google offers this option for your country. You change the iOS permission under Settings › Privacy & Security › Tracking. The legal basis is Art. 6(1)(a) GDPR and, for storing and reading information on your device, Section 25(1) TDDDG. You can play without consenting.

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland

Data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Advertising

After a run, the game occasionally shows a full-screen ad, at most every 90 seconds. If you choose to, you can watch a video ad to continue once per run or to double the gold of a run. Ads are delivered by Google AdMob. For this, Google processes your IP address and the approximate location derived from it, device and app details, ad impressions and clicks as well as diagnostic data, and, with your permission in iOS, your device’s advertising identifier (IDFA). If you have not consented, Google only serves limited, non-personalised ads. Google decides exactly which data it uses; it does not flow back to me, I only see aggregated figures on ads and revenue.

Where advertising or access to your device requires consent, the legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Google explains what it uses the data for itself in its privacy policy.

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland

Data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

App Store

You download the app from the App Store; whatever Apple processes there (for example about download and purchase) is Apple’s own responsibility.

Apple Distribution International Ltd.

Hollyhill Industrial Estate, Hollyhill, Cork, Ireland

Transfers to a country outside the EU are based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Provider’s privacy policy

Retention and deletion

Your progress stays until you delete the app. Device backups may contain further copies; you manage those in iOS. How long Google keeps data depends on the data type and your settings and is described in Google’s privacy policy. A changed consent applies from then on.

Because I hold no data about you, you exercise your rights for the save by deleting the app; for questions you can reach me at the address above.

Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on legitimate interests (Art. 21). An email to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.