GeoGame

Data Protection Declaration / Datenschutzerklärung

● Effective Date: March 2025

1. General Overview & Controller Information

This Data Protection Declaration informs users about the nature, scope, and purpose of the collection and processing of personal data in the GeoGame mobile application and associated backend services.

Data Controller (Responsible Entity):
e-Umbricht GmbH
Email: info@e-umbricht.com

2. Information Collection and Use

GeoGame is a multiplayer location-guessing quiz game. To provide and maintain our service, we collect and process the following categories of data:

a) User Account & Authentication Data

When you register or sign in to GeoGame using Google Sign-In (Google OAuth 2.0), we receive basic profile information provided by Google:

  • Google User ID (unique technical identifier)
  • Email Address (used for account identification and authentication)
  • Custom Username (chosen by you for leaderboards and friend interactions)

Authentication is handled securely using JSON Web Tokens (JWT) stored in encrypted storage on your mobile device.

b) Gameplay & Location Guesses

During game duels and daily challenges, you interact with an interactive map to place location guesses. We process:

  • Geographical Guess Coordinates (Latitude & Longitude submitted when making a guess)
  • Scores, Challenge History & Game Statistics

Note: GeoGame does not track your real-time GPS location in the background. The location coordinates collected are strictly those you manually choose and submit on the map prompt during a duel.

c) Social Features & Friends

If you use friend features in GeoGame (e.g. searching users, sending/accepting friend requests, viewing profile challenge results), we store friend relationships to allow head-to-head competition and leaderboard comparisons.

d) Push Notifications & Device Identifier

To inform you about game updates, daily challenges, and friend challenges, we collect:

  • Device Identifier & OS Platform (Android / iOS)
  • Firebase Push Token (Firebase Cloud Messaging)

You can grant or revoke notification permissions at any time through your device operating system settings.

3. Third-Party Services & Data Processors

To ensure high performance, secure authentication, and reliable delivery, GeoGame relies on trusted third-party service providers:

  • Google Sign-In / OAuth 2.0: Provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Used for user authentication. Google Privacy Policy
  • Firebase Cloud Messaging (FCM): Provided by Google LLC. Used to deliver push notifications. Firebase Privacy Info
  • Firebase Crashlytics & Analytics: Provided by Google LLC. Used to collect anonymized crash reports, app performance metrics, and stability diagnostics to fix errors and improve stability.

4. Legal Bases for Processing (GDPR)

We process your personal data in accordance with the European General Data Protection Regulation (GDPR / DSGVO):

  • Contract Performance (Art. 6(1)(b) GDPR): Account registration, game execution, score calculation, and friend management.
  • Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring application security, error detection via Crashlytics, and preventing abuse or cheating.
  • Consent (Art. 6(1)(a) GDPR): Delivery of push notifications (which can be toggled in device settings).

5. Data Security & Storage

All network communications between the GeoGame app and backend servers are strictly encrypted using TLS/HTTPS protocols. Access tokens are stored using secure operating system mechanisms (Encrypted DataStore / Keychain). Server databases are protected by firewall and strict access controls.

6. Data Retention and Account Deletion

Your personal data is retained for as long as your account remains active or as needed to provide game services.

Account & Data Deletion Request

In compliance with Google Play Developer Policies and GDPR, you have the right to request full deletion of your account and associated data at any time.

To request deletion of your GeoGame account, username, game history, and push tokens, please send an email to info@e-umbricht.com with the subject "GeoGame Account Deletion Request" and your registered username or email address. Your data will be permanently purged within 30 days.

7. Your Rights under GDPR

Under European privacy law, you have the following rights regarding your personal data:

  • Right to Information & Access (Art. 15 GDPR): Request confirmation and details regarding the data we hold about you.
  • Right to Rectification (Art. 16 GDPR): Request correction of inaccurate personal data (e.g., updating your username).
  • Right to Erasure (Art. 17 GDPR): Request deletion of your personal data ("Right to be forgotten").
  • Right to Restriction of Processing (Art. 18 GDPR) & Data Portability (Art. 20 GDPR).
  • Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a competent data protection supervisory authority.

8. Contact & Inquiries

For any questions or privacy concerns regarding GeoGame, please contact:

e-Umbricht GmbH
Email: info@e-umbricht.com