Privacy Policy

Unfiltered: Question Card Game for iOS and Android
Last updated: 20 October 2026

1. Who is responsible for your information

The controller responsible for processing personal data in this app is:

Elias Lovis Kläring
Sole trader
Gartenstraße 2
67583 Guntersblum
Germany
Email: [email protected]

This policy describes processing through the app and when you contact us. It is not a privacy notice for separate visits to our website.

2. The essentials

You do not need an account containing your name or email address. The app generates a random identifier (UUID) and stores it on your device. Our backend uses this identifier to remember which questions you have seen and which questions you have liked or disliked.

This does not automatically tell us your name. However, where information can be associated through an identifier, we treat it as personal data.

Your ratings help us improve the questions for everyone. We do not use them to build a question feed tailored to your personal preferences. Your viewing history is used to take account of questions you have already seen. A rating concerns a question as game content; it is not an answer to that question.

We use RevenueCat for in-app purchases and subscriptions. Optional error reports through Sentry are processed only with consent. We also use the hosting and security services described below.

You are not legally required to provide information to us to use the app. The relevant sections explain which processing is necessary for particular features and the consequences of not providing information.

3. App identifier, viewed questions and ratings

We process your UUID, identifiers of questions you have seen or rated, and the corresponding ratings. The app sends this information to our backend.

We remember viewed questions to offer further questions that you have not yet seen. The legal basis is Article 6(1)(b) GDPR, to the extent necessary to provide the game feature you request.

Ratings are optional. We use them to assess general popularity and improve the selection and quality of questions for all users. The legal basis is our legitimate interest in improving game content under Article 6(1)(f) GDPR. You may object on grounds relating to your particular situation, as explained in section 11.

You can continue playing without rating questions. Without the processing required for viewing history, we cannot reliably prevent previously viewed questions from appearing again.

You may request deletion of data that can be linked to you by emailing [email protected]; we handle these requests manually. General rating statistics may be retained longer if they are genuinely anonymised and no longer allow individuals to be identified or information about individual users to be inferred. Section 11 explains your rights.

4. Information on your device and integrity checks

The app stores its UUID, app settings and local app data in a local database, and access tokens in the operating system’s protected storage. This supports app functionality and recognition of your installation by our backend. Information is not sent to us merely because it is stored locally; transfers take place for the functions described in this policy.

We use Apple App Attest on iOS and Google Play Integrity on Android to protect against modified apps and unauthorised requests. These services process technical information about app authenticity and device or runtime integrity. Depending on the platform, this includes app identifiers and versions, cryptographic evidence and, for Google Play Integrity, Play Store licensing status. These checks do not verify your name or personal identity.

Our backend checks the evidence, issues an access token if verification succeeds, and then discards the verification data received for this purpose. The token is used for subsequent requests.

Discarding verification information on our backend does not cover separate processing by Apple or Google, which is subject to their privacy notices.

The legal basis for security checks is Article 6(1)(f) GDPR. Our legitimate interest is protecting the service from abuse and unauthorised access. Protected online features may be unavailable if verification fails.

Strictly necessary storage of information on your device, or access to that information, relies on section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). We obtain consent under section 25(1) TDDDG for non-essential storage or access. Subsequent processing of personal data additionally requires the legal basis specified for the relevant purpose in this policy.

Local information remains stored while needed for its function or until it is deleted or replaced. Whether uninstalling the app removes local information depends on the operating system; protected storage and device backups may follow separate rules. Uninstalling does not automatically delete information already held by us or our service providers.

Further information:
Apple App Attest: https://developer.apple.com/documentation/devicecheck
Apple privacy: https://www.apple.com/legal/privacy/
Google Play Integrity: https://developer.android.com/google/play/integrity/terms
Google privacy: https://policies.google.com/privacy

5. Hosting and data transmission: Hetzner and Cloudflare

Our backend runs on servers in Germany provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner provides infrastructure as our processor.

Traffic to our backend passes through Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes IP addresses and technical request and connection information; as a reverse proxy it also processes transmitted requests and responses. This supports secure, reliable delivery and protection of the service.

We do not store IP addresses in our application database. This does not mean that IP addresses are not processed during transmission or by Cloudflare.

Delivery of requested content relies on Article 6(1)(b) GDPR. Processing to protect the service and maintain availability relies on Article 6(1)(f) GDPR.

Cloudflare processes information under its data processing agreement. Where it processes personal network data for its own security and operational purposes, Cloudflare describes itself as a separate controller.

Further information:
Hetzner: https://www.hetzner.com/legal/privacy-policy/
Cloudflare: https://www.cloudflare.com/privacypolicy/
Cloudflare data processing: https://www.cloudflare.com/cloudflare-customer-dpa/

6. In-app purchases, subscriptions and RevenueCat

The app offers one-time purchases and subscriptions through the Apple App Store or Google Play. We use RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA, as a processor to display purchase offers (“paywalls”), verify purchases, and manage and restore access to purchased content.

RevenueCat loads when the app starts and generates its own random app user identifier, which is stored on the device. It is separate from our backend UUID. The app communicates directly with RevenueCat; our backend does not process RevenueCat purchase information.

Processing covers the RevenueCat identifier, technical app and platform information and, when purchases occur, receipts or purchase verification information, product and transaction identifiers, purchase times, entitlements and subscription status. Network connections also technically transmit an IP address. Purchase information originates from the app and the relevant app store. RevenueCat does not provide us with complete payment card or bank account details.

RevenueCat also processes the time you were first recorded by RevenueCat, the time of the last connection and the country inferred from the IP address; transaction country may also be available for purchases. Its documentation states that it discards the IP address after determining the country. Supported versions of RevenueCat Paywalls automatically record views of purchase offers.

To the extent necessary to carry out a requested purchase, restore purchases or check existing entitlements, processing relies on Article 6(1)(b) GDPR. Necessary device storage and access rely on section 25(2)(2) TDDDG. Purchases and the associated entitlements cannot be managed without this processing.

Purchase and entitlement information is retained while necessary for active subscriptions, existing entitlements and restoring one-time purchases. When those purposes end, it is deleted unless a specific legal retention obligation or necessary retention to establish, exercise or defend legal claims applies. Any such information is restricted to that purpose.

Apple and Google process information for their store and payment services as separate controllers under their respective privacy notices. For EEA users, the companies involved include Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the relevant companies may differ by country and service.

Further information:
RevenueCat: https://www.revenuecat.com/privacy-policy/
RevenueCat data processing: https://www.revenuecat.com/dpa
Apple App Store: https://www.apple.com/legal/privacy/data/en/app-store/
Google: https://policies.google.com/privacy

7. Optional error reporting with Sentry

If you consent, we use Sentry, provided by Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, to identify and fix technical errors. Sentry acts as our processor, with Germany selected as the data storage region.

Reports contain technical information such as the error message, time, program execution details at the point of failure (“stack trace”), app and operating system versions, and device type. We do not use Session Replay, screenshots or performance tracing.

Our backend UUID, the RevenueCat identifier, access tokens, question content and ratings are excluded from error reports. IP addresses are not stored as part of error events; this does not eliminate the technical processing of the IP address necessary for a network connection.

The legal basis is your consent under Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, section 25(1) TDDDG.

Consent is optional. You can enable error reporting during onboarding and change your choice at any time in the app settings. Game features remain available if you decline. After withdrawal, no further error reports are collected or transmitted. Withdrawal does not affect the lawfulness of earlier processing.

Error events are deleted within 90 days at the latest. If you withdraw consent, we delete previously stored personal error information that we can associate with you, unless another legal basis requires its retention. If we cannot associate events with you without further information, we explain this; we do not collect additional identification information solely for that purpose. You can contact us at the email address above to request deletion.

Further information:
Sentry: https://sentry.io/privacy/
Sentry data processing: https://sentry.io/legal/dpa/

8. Contact and privacy requests

When you email us, we process your email address, message, any name provided and other information you choose to include. The email hosting provider for our mailbox also receives this information.

Contract-related enquiries rely on Article 6(1)(b) GDPR. Other general enquiries rely on our legitimate interest in responding under Article 6(1)(f) GDPR. Handling statutory privacy requests relies on Article 6(1)(c) GDPR together with the relevant GDPR obligations.

We delete correspondence once the matter is fully resolved and no legal retention obligation or necessary retention to establish, exercise or defend legal claims remains. Documents subject to statutory retention are retained only for that purpose.

9. Processing outside the European Economic Area

Our backend is in Germany, and Germany is selected as Sentry’s storage region. However, the providers involved may process information or provide access outside the EEA, particularly in the United States. This concerns RevenueCat and Cloudflare in particular, and potentially Sentry support and subprocessors. Apple and Google also operate international services.

For transfers to countries without an applicable adequacy decision, we use the European Commission’s standard contractual clauses and supplementary safeguards where necessary. The providers’ data processing agreements contain the relevant transfer provisions. You may contact us for a copy of, or information about, the applicable safeguards; information requiring protection may be redacted.

Consent to optional error reporting is not blanket consent to international transfers without safeguards.

Standard contractual clauses:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj

10. Children and teenagers

App store age ratings assess app content. They do not constitute consent to processing personal data.

In Germany, consent-based processing in online services offered directly to children under 16 requires consent or authorisation from a person with parental responsibility. Other countries may have different thresholds. Where parental consent is legally required, it must be obtained before the relevant processing.

Parents and guardians can contact [email protected] with questions or to exercise their child’s privacy rights.

11. Your rights and deletion

Subject to the statutory conditions, you have rights of access and to receive a copy of your personal data, rectification, erasure, restriction of processing and data portability. Portability applies to information you provided that we process by automated means on the basis of consent or a contract.

RIGHT TO OBJECT
Where we process personal data under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.

You may withdraw consent at any time for future processing; for Sentry, you can do so directly in the app settings.

For access, deletion or other requests, email [email protected]. You do not need to create an account. We handle deletion manually. To locate information, we may need the relevant app identifier and appropriate evidence linking the installation to you. You may include the identifier if available; otherwise we will help you establish the connection. Do not send passwords or access tokens. We ask only for information needed to locate the data and handle the request.

If we cannot identify information relating to you, we will explain this. You may provide further suitable information so that we can reconsider your request. Statutory exceptions to erasure rights remain applicable.

Deleting your question history may cause questions to appear again. Deleting information held by us or RevenueCat does not automatically cancel an Apple App Store or Google Play subscription. Manage and cancel subscriptions in the relevant store.

We generally respond within one month of receiving a request. If a legally permitted extension is necessary, we will explain the reasons and additional period within that first month. Exercising your rights is generally free of charge.

You may also complain to a data protection supervisory authority, particularly in the country of your habitual residence or place of work, or where the suspected infringement occurred. The authority responsible for our place of establishment is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
55020 Mainz
Germany
https://www.datenschutz.rlp.de
Complaints: https://www.datenschutz.rlp.de/themen/online-services/beschwerdeformular

Any additional rights under privacy law applicable to you remain unaffected.

12. Automation and changes

Selection of unseen questions, entitlement checks and integrity checks are technically automated. If a technical check incorrectly blocks your access, you can contact us for review.

We update this policy when processing practices or legal requirements change. The current version is accessible through the app. We provide appropriate in-app notice of material changes. If a change requires fresh consent, we obtain it before the relevant processing starts.