Privacy Policy – Idle Reactions

This Privacy Policy applies to the use of the mobile application Idle Reactions (Android) and related services.

Depending on use, we process in particular:

• Device and technical data: operating system, app version, language, time zone and the identifiers a clause below names
• Usage and error data: events in the app, timestamps, error reports
• Player, purchase and notification data: player ID, display name, picture, friends, game records and scores, receipts, push registrations — each only for a feature a clause below describes

We rely on the following legal bases:

• Consent (Art. 6(1)(a) GDPR) — e.g. for optional features
• Performance of a contract (Art. 6(1)(b) GDPR) — e.g. for core app functions
• Legitimate interest (Art. 6(1)(f) GDPR) — e.g. for security and operation

The app stores data (game progress, settings, statistics) locally on your device. This data is not transmitted to servers unless expressly described.

The servers this app talks to run at Hetzner Online GmbH (Germany) in the EU; Hetzner processes data on our behalf (Art. 28 GDPR). Each request leaves an entry in the server log — IP address, user agent, path, status and time — deleted after seven days. It serves the operation and security of the service (Art. 6(1)(f) GDPR).

Encrypted backups of our databases are kept for one month at BorgBase. They are encrypted before they leave our server. A deletion cannot reach them: what you delete leaves them within that month at the latest.

The third-party providers and SDKs in use are listed in the register at the end of this notice, each with its purpose, data categories, role, legal basis, retention period and any third country. Beyond those, the app contains no third-party SDKs, analytics tools or advertising networks.

Personal data goes to the providers named in the register, for the purpose stated there, and to no other third party. Where a provider processes it in a third country, that rests on an adequacy decision (such as the EU-US Data Privacy Framework) or on standard contractual clauses. Which providers are certified under the Data Privacy Framework is shown at dataprivacyframework.gov; a copy of standard contractual clauses is available from info@heideapps.de.

Local data remains on your device until you uninstall the app or delete the data manually. Server-side data is deleted once its purpose ceases or you request deletion.

You do not have to give us any data to use the app; what it can do without a connection needs none. A feature a clause above describes needs the data named there; without them that feature is unavailable and the rest of the app is not. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent at any time (Art. 7(3) GDPR) — the lawfulness of processing before withdrawal remains unaffected

To exercise them, contact info@heideapps.de. You can delete and withdraw yourself too: Delete my data and the consent form are under the app's privacy settings; notifications you turn off in your phone's settings.

Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing.

You have the right to lodge a complaint with a data-protection supervisory authority — in particular in the Member State where you live or work or where the alleged infringement occurred (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection of Saxony-Anhalt (Landesbeauftragter für den Datenschutz Sachsen-Anhalt), Otto-von-Guericke-Straße 34a, 39104 Magdeburg, Germany, telephone +49 391 81803-0, poststelle@lfd.sachsen-anhalt.de.

Anyone may play Idle Reactions. Where we rely on consent, it counts from the age of 16 (Art. 8 GDPR). Idle Reactions asks once, and the answer stays on your phone. A younger player gives none: usage statistics do not run, and Google shows only limited adverts.

We reserve the right to amend this Privacy Policy to reflect changes in the law or the service. The current version with its date is in the app under Privacy and at heideapps.de/apps/idle-reactions/privacy.

Should individual provisions of this Privacy Policy be invalid, the validity of the remaining provisions remains unaffected.

Terms are to be understood within the meaning of the GDPR (Art. 4). Personal data is any information relating to an identified or identifiable natural person.

Controller (Art. 4(7) GDPR):

Manuel Zank
Heideapps
Krondorfer Straße 11
06112 Halle (Saale)
Deutschland
Email: info@heideapps.de