Privacy Policy

§ 1 Controller

The controller within the meaning of the GDPR is:
VectorSpan UG (haftungsbeschränkt)
Sandhauser Str. 20
13505 Berlin
Germany
Email: info@vectorspan.io

§ 2 Scope

This privacy policy applies to the iOS app Sudoku Power and to the website sudokupower.app (and vectorspan.io). The current version is accessible online.

§ 3 Website Hosting & Server Logs

The website is operated on our own infrastructure and delivered via the Content Delivery Network of Cloudflare (Cloudflare, Inc., USA), which acts as a processor and technical proxy for a secure and high-performance provision.

Upon every access, technical access data is automatically processed in server logs (IP address in truncated/anonymized form, date and time, accessed resource, browser type, referrer). This processing serves the technical delivery, security, and defense against abuse. The legal basis is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

The website itself does not set marketing or tracking cookies and does not integrate external analysis services. (Note: This website does NOT use external Google Fonts; fonts come from the system font stack.)

§ 4 Data Processing in the App "Sudoku Power"

The app is designed to allow playing generally without providing personal data. Game progress and settings are primarily stored locally on your device. For certain functions, services from Apple and Google are integrated. Which of these apply depends on whether you use the app on iOS or Android.

§ 4.1 Google AdMob (Advertising) – iOS and Android

To fund the free app, we use Google AdMob (Google Ireland Ltd.). AdMob may process device and usage identifiers as well as technical information to display advertisements. Personalized advertising only occurs with your consent: on iOS additionally within the framework of App Tracking Transparency (see § 4.2), on Android via the consent dialog of the Google User Messaging Platform (see § 4.3). The legal basis is your consent (Art. 6 para. 1 lit. a GDPR). Without consent, non-personalized advertising is displayed; the app remains fully usable. Further information: https://policies.google.com/privacy

§ 4.2 App Tracking Transparency (ATT) – iOS only

On iOS, we request your explicit permission in accordance with Apple's App Tracking Transparency framework before a cross-device identifier (IDFA) is used for advertising purposes. You can revoke this permission at any time in the iOS settings under "Privacy & Security -> Tracking".

§ 4.3 Consent Dialog (UMP) – Android only

On Android, we obtain your consent for advertising via the Google User Messaging Platform (UMP). The dialog appears on first launch if you are located in the European Economic Area, the United Kingdom or Switzerland. If you decline, only non-personalized advertising is displayed. Resetting the advertising identifier across Android is possible in the device settings under "Privacy – Ads".

§ 4.4 In-App Purchases

For optional in-app purchases (permanent ad removal) we use Apple StoreKit on iOS and Google Play Billing on Android. Payment processing takes place exclusively via your Apple or Google account; we do not receive payment data, but only a confirmation of the purchase made. The legal basis is the performance of a contract (Art. 6 para. 1 lit. b GDPR).

§ 4.5 Leaderboards and Achievements (optional)

If you sign in, leaderboards and achievements are managed on iOS via Game Center and your Apple account, and on Android via Google Play Games services and your Google account. Your player identifier as well as scores and achievements may be transmitted to the respective provider; their privacy policy applies. These functions are optional and based on your choice of use (Art. 6 para. 1 lit. a/b GDPR).

§ 4.6 Cross-Device Synchronization – iOS only

If activated, your game progress can be synchronized between your devices on iOS via Apple's iCloud (CloudKit). The Android version does not offer cloud synchronization; there, game progress and settings remain exclusively on the device.

§ 4.7 Crash Reports (Firebase Crashlytics) – Android only

The Android version uses Firebase Crashlytics (Google Ireland Ltd.) to detect and fix crashes and serious errors. Technical diagnostic data is processed for this purpose: type and time of the error, device model, operating system version, app version and a randomly generated installation identifier. No game content and no information that directly identifies you is transmitted. Collection is active only in the published version of the app; it is disabled in development builds. The legal basis is our legitimate interest in a stable, error-free app (Art. 6 para. 1 lit. f GDPR). Further information: https://firebase.google.com/support/privacy

§ 5 Disclosure to Third Parties & Third-Country Transfer

Your data is only passed on to the named service providers (Apple, Google, Cloudflare) to the extent described. Using services from these providers may lead to a transfer to the USA. The providers base such transfers on appropriate safeguards (e.g., EU Standard Contractual Clauses or the EU-US Data Privacy Framework).

§ 6 Your Rights

Under the GDPR, you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and revocation of consent with future effect (Art. 7 para. 3).

To exercise these rights, an informal message to info@vectorspan.io is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (for Berlin: Berlin Commissioner for Data Protection and Freedom of Information).

§ 7 Storage Duration

Website server logs are only stored as long as necessary for the stated purposes and are then deleted. Data stored locally in the app remains on your device until you delete it or uninstall the app.