← Back to Homepage

Privacy Policy for SprintFall App

1. Controller and Contact

1.1 Data Controller

Umut Yavuz
Unterer Markt 8
95469 Speichersdorf
Germany

Email: support@sprintfall.de
Website: https://sprintfall.de
Imprint: https://sprintfall.de/en/imprint.php

1.2 Data Protection Officer

A data protection officer is not required pursuant to Art. 37 GDPR, as no extensive processing of special categories of personal data takes place.

2. Scope and Legal Basis

2.1 Scope

This privacy policy applies to the mobile app SprintFall (Version 2.1.2 and higher) for iOS and Android.

2.2 Legal Basis for Data Processing

Data processing is based on the EU General Data Protection Regulation (GDPR), in particular:

• Art. 6(1)(a) GDPR – Consent (for leaderboard, advertising, cloud backup)
• Art. 6(1)(b) GDPR – Performance of contract (for game functions)
• Art. 6(1)(f) GDPR – Legitimate interests (for technical functionality)

2.3 Notice for Children and Minors

3. What Data is Collected?

3.1 Locally Stored Data (on Your Device)

This data remains exclusively on your device and is NOT transferred:

• Game Progress: Highscore, coins, diamonds, items
• Player Name: Name chosen by you (3-12 characters)
• Player ID: Randomly generated anonymous identifier
• Skins & Items: Unlocked characters, active skin, power-ups
• Achievements: Progress in achievements, collected badges
• Settings: Audio, language, leaderboard visibility
• Event Data: Event currencies, participation history
• Consents: Consent status, tracking status

Storage Location: Exclusively local on your device
Legal Basis: Art. 6(1)(b) GDPR (Performance of contract)
Deletion: When deleting the app or via "Delete Game Data" in settings

3.2 Leaderboard Data (Cloud Storage)

Only when participating in the leaderboard, the following data is transferred:

• Player Name: Pseudonymized name (chosen by you, 3-12 characters) – publicly visible
• Highscore: Your best score – publicly visible
• Player ID: Anonymous identifier for duplicate checking – not public
• Timestamp: Date of last update – not public
• Visibility Status: Whether your entry is displayed – not public

Server Location: EU (Belgium)
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal Basis: Art. 6(1)(a) GDPR (Consent at first app launch)
Retention Period: 12 months from last entry
Automatic Deletion: Yes, weekly cleanup process
Manual Deletion: Anytime via "Delete Game Data" in settings

3.3 Cloud Backup System (Optional)

Voluntary game save backup – only when actively used:

• Player ID: Anonymous identifier for assignment
• Game Progress: Highscore, coins, diamonds, items
• Skins & Achievements: Unlocked content
• Timestamp: Time of last backup

Server Location: EU (Belgium)
Provider: Google Ireland Limited (Firebase Cloud Storage)
Legal Basis: Art. 6(1)(a) GDPR (Consent)
Retention Period: 12 months from last backup
Automatic Deletion: Yes, upon inactivity
Encryption: AES-256 in transit and at rest

3.4 Advertisements (Unity Ads – Rewarded Ads)

Only when you voluntarily watch an advertisement, data is processed:

• Advertising ID: Anonymous device advertising identifier (IDFA on iOS, GAID on Android)
• Device Information: Device type, operating system version, app version
• Interaction Data: Viewed, skipped, clicked
• IP Address: For fraud prevention (immediately anonymized)
• Approximate Location: Country and region (no GPS data!)

Provider: Unity Technologies ApS, Niels Hemmingsens Gade 24, 3rd Floor, 1153 Copenhagen K, Denmark
Legal Basis: Art. 6(1)(a) GDPR (Consent by watching the advertisement)
Purpose: Provision and personalization of advertisements
Data Transfer: Also possible outside the EU (USA)
Privacy Policy: unity.com/legal/privacy-policy
Opt-Out:

• iOS: Settings → Privacy → Tracking → Disable App Tracking
• Android: Settings → Google → Ads → Disable Personalized Ads

4. Purpose of Data Processing

4.1 Purposes of Data Processing

Data Type	Purpose	Legal Basis
Game Progress	Storing your progress	Art. 6(1)(b) GDPR
Leaderboard Data	Global highscore comparison	Art. 6(1)(a) GDPR
Cloud Backup	Restoration on new device	Art. 6(1)(a) GDPR
Advertising ID (Unity Ads)	Provision of Rewarded Ads	Art. 6(1)(a) GDPR

4.2 No Profiling or Tracking

What we do NOT do:

• ❌ No User Tracking: We don't track your behavior beyond the app
• ❌ No Profiling: We don't create user profiles for advertising purposes
• ❌ No Location Tracking: We don't collect GPS data
• ❌ No Contacts: We don't access your contact list
• ❌ No Camera/Microphone: We don't use camera or microphone

5. Data Transfer and Storage

5.1 Where is Your Data Stored?

Service	Provider	Location
Leaderboard	Firebase (Google Ireland Limited)	🇪🇺 EU (Belgium)
Cloud Backup	Firebase (Google Ireland Limited)	🇪🇺 EU (Belgium)
Advertising (Unity Ads)	Unity Technologies ApS	🇪🇺 EU & 🇺🇸 USA

5.2 Encryption

All data transfers are encrypted:

• In Transit: TLS 1.3 (Transport Layer Security)
• At Rest: AES-256 encryption on Firebase servers

6. Retention Period

6.1 Retention Period by Data Type

Data Type	Retention Period	Automatic Deletion
Local Data	Until app uninstallation	No
Leaderboard Data	12 months from last entry	Yes, weekly
Cloud Backup	12 months from last backup	Yes, upon inactivity
Advertising ID (Unity Ads)	According to Unity guidelines	Per Unity Policy

6.2 Automatic Deletion

An automatic cleanup process runs weekly and removes:

• Leaderboard entries older than 12 months
• Cloud backups older than 12 months
• Inactive Player IDs without activity

7. Your Rights (GDPR)

You have the following rights under the EU General Data Protection Regulation:

8. Data Deletion

8.1 Manual Deletion

How to manually delete your data:

1. Open App
2. Settings → "Delete Game Data"
3. Confirmation required: "Yes, delete all data"

What will be deleted:

• ✅ Local game data (immediately)
• ✅ Leaderboard entry (immediately)
• ✅ Cloud backup (immediately)
• ✅ Player ID (within 48 hours)

8.2 Automatic Deletion

Automatic cleanup process (weekly):

• Leaderboard entries without activity for 12 months
• Cloud backups without update for 12 months
• Inactive Player IDs

8.3 Deletion on Request

You can also request deletion via email:

Email to: support@sprintfall.de
Subject: "GDPR Deletion Request"
Include: Your Player ID
Processing Time: Within 30 days

9. Technical Security Measures

9.1 Data Security

We implement the following technical and organizational measures:

• Encryption:
  • TLS 1.3 for all data transfers
  • AES-256 for stored data
• Firebase Security Rules:
  • Access restrictions to own data
  • Validation of all inputs
• Anonymization:
  • No email addresses required
  • Random Player IDs
• Regular Updates:
  • Security patches for app and server

9.2 Data Access

Who has access to your data?

• You: Full access to your local data
• Developer: Only aggregated, anonymized data (e.g., number of players)
• Firebase: Technical access for hosting and storage
• Unity Ads: Only Advertising ID for ad delivery

10. Third-Party Services

10.1 Firebase (Google Ireland Limited)

10.2 Unity Ads (Unity Technologies ApS)

10.3 No Other Third-Party Services

What we do NOT use:

• ❌ No Analytics Tools (no Google Analytics, no Firebase Analytics)
• ❌ No Crash Reporting Tools
• ❌ No Social Media Integration
• ❌ No Payment Providers (no in-app purchases)

11. International Data Transfer

11.1 Data Transfer to Third Countries

Firebase (EU):

• ✅ All data remains in the EU (Belgium)
• ✅ No transfer to third countries

Unity Ads (EU & USA):

• ⚠️ Data transfer to the USA possible
• ✅ Safeguards: EU Standard Contractual Clauses (Art. 46 GDPR)
• ✅ Compliance with EU-US Data Privacy Framework

11.2 Safeguards for Data Transfer

For transfers to the USA, the following safeguards apply:

• EU Standard Contractual Clauses (SCC): Contractual guarantees pursuant to Art. 46 GDPR
• Encryption: TLS 1.3 for all transfers
• Minimization: Only necessary data is transferred
• Anonymization: IP addresses are immediately anonymized

12. Children and Minors

12.1 Age Rating

USK 0: The app is suitable for all age groups.

Recommended for: Ages 12 and above

12.2 Special Notice for Users Under 16 Years

12.3 Parental Consent (Art. 8 GDPR)

12.4 Recommended Settings for Children

1. Disable Leaderboard: Settings → Turn off "Leaderboard Participation"
2. Offline Mode: Disable internet connection (game works fully offline)
3. Regular Control: Check settings regularly

13. Changes to this Privacy Policy

13.1 Updates

We reserve the right to update this privacy policy to adapt it to changed legal situations or app functions.

In case of significant changes:

• In-app notification at next launch
• Renewed consent request (if legally required)
• Update on this website

Current Version: Always available at:

• German: sprintfall.de/de/app-datenschutz.php
• English: sprintfall.de/en/app-privacy.php

14. Contact and Complaints

14.1 Privacy Inquiries

For questions about privacy or to exercise your rights:

Email: support@sprintfall.de
Postal Address:
Umut Yavuz
Unterer Markt 8
95469 Speichersdorf
Germany

Response Time: Within 30 days (Art. 12(3) GDPR)
Languages: German, English, Turkish

14.2 Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority:

15. Summary

---