Privacy policy
Deutsche Fassung: Datenschutzerklärung
Controller
Andre Heuer – TinyMayor, Frickestr. 49, 20251 Hamburg, Germany, info@tinymayor.com
This website
The website sets no cookies and uses no tracking. When you open it, our hosting provider Google Firebase Hosting processes technically necessary data (IP address, time, page requested) to deliver the page and protect it from abuse (Art. 6(1)(f) GDPR). Fonts and images are served from our own server. No data is sent to Google Fonts or other third parties.
Newsletter
When you sign up for the newsletter, we store your email address and the time of sign-up and confirmation (double opt-in). We use Brevo (Sendinblue GmbH, Berlin) for this. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link in every email, and we then remove your address from the list.
What the app stores and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and account ID (sign-in with Apple, Google or email) | Create your account, save your progress, remind you before 30 days of inactivity | Art. 6(1)(b) GDPR |
| Username | Shown in rankings for your town, region and alliance, visible to other players | Art. 6(1)(b) GDPR |
| Game progress: IP, level, unlocked plots and their location, buildings, alliance, friends | Run the game, calculate monthly credits | Art. 6(1)(b) GDPR |
| Town and region of your plots | Community features and rankings | Art. 6(1)(b) GDPR |
| Precise location (GPS) | Only to check that a plot is within 100 m of you. Not stored. | Art. 6(1)(a) GDPR (permission on your phone) |
| Ad events (when an ad was watched) | Credit IP, assign income to the right month | Art. 6(1)(b) GDPR |
| Advertising ID, approximate location, device data (through Unity LevelPlay and ad partners) | Show ads, personalised only with your consent | Art. 6(1)(a) GDPR, otherwise (f) |
| Crash reports (Firebase Crashlytics) | Find and fix bugs | Art. 6(1)(f) GDPR |
| For payouts: PayPal email address, name, date of birth (proof of age 18+), amounts | Payouts from €5, accounting, tax obligations | Art. 6(1)(b) and (c) GDPR |
Service providers
- Google Firebase (sign-in, database, servers, Crashlytics, hosting): Google Ireland Ltd., servers in Belgium (europe-west1).
- Unity LevelPlay (ads): Unity Technologies and connected ad networks.
- PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg: payouts.
- Cloudflare (map tiles): delivers the map images. Your IP address is processed, but no account data.
- OpenStreetMap Nominatim: we send the centre of a plot to find its town. Your name and account are not sent.
Google, Unity and Cloudflare may transfer data to the USA. This is based on the EU-US Data Privacy Framework and standard contractual clauses.
How long we keep data
As long as your account exists. After you delete it, we remove your data within 30 days. Data we must keep for tax and accounting stays stored, with restricted access, for up to 10 years.
Your rights
You have the right to access, rectification, erasure, restriction, data portability, objection and to withdraw consent. Write to info@tinymayor.com. You can also complain to a data protection authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information.
You can change your ad consent at any time in the app under Profile > Ads and privacy.