Privacy Policy

1. Controller

The controller responsible for data processing is:

Sam Haghnejad
ProFootballQuiz
Vaalser Strasse 257C
52074 Aachen
Germany

E-mail for privacy requests: [email protected]

2. Data We Process

We may process the following data:

• Account data: username, optional e-mail address, language, internal user ID.
• Game and profile data: avatar, points, coins, lives, answers, rankings, friends, rooms and party game progress.
• Purchase data: product identifier, purchase status, entitlement status, expiration dates and technical purchase receipts. We do not receive full payment details.
• Advertising data: information about displayed ads, ad interactions and Rewarded Ads.
• Technical data: device identifiers, app version, language, operating system, diagnostic, crash and performance data.
• Push data: push token and notification settings, where push notifications are enabled.
• Local data: session, settings, language and cached game or profile data on the device.

3. Purposes of Processing

We process data for the following purposes:

• Providing accounts, quizzes, multiplayer, friend rooms, rankings and challenges.
• Storing and displaying game results, points and progress.
• Managing in-app purchases, Premium entitlements and purchase status.
• Displaying ads, including Interstitial Ads and Rewarded Ads.
• Abuse, fraud and security prevention.
• Error analysis, stability, performance and technical improvement of the App.
• Push notifications, where enabled.
• Complying with legal retention and documentation obligations.

4. Legal Bases

Depending on the purpose, processing is based on:

• Art. 6(1)(b) GDPR where processing is necessary to provide App features, accounts, multiplayer features or in-app purchases.
• Art. 6(1)(a) GDPR where consent is required, for example for certain advertising, tracking or push notifications.
• Art. 6(1)(f) GDPR where we have a legitimate interest in security, fraud prevention, troubleshooting, App stability and improving the App.
• Art. 6(1)(c) GDPR where we must comply with legal obligations.

5. Advertising and Consent

The App may display advertising via Google AdMob. This includes Interstitial Ads and Rewarded Ads. Depending on region, platform and consent, advertising SDKs may process device identifiers, ad interactions and technical data.

Google User Messaging Platform may be used to manage consent. Where required, a privacy or consent form is shown when the App starts or when certain features are used. Users can change their choices where this option is required in the App or by the relevant region.

Our public web pages for privacy, support, legal notice and invitations do not use cookies for tracking and do not include third-party analytics scripts.

6. In-App Purchases

In-app purchases are processed through the Apple App Store. We use RevenueCat to manage purchase status, Premium entitlements and purchase restoration. We do not receive full payment details such as credit card numbers.

7. Service Providers and Recipients

We may transfer data to, or have data processed by, the following service providers:

• Google AdMob and Google User Messaging Platform for advertising and consent management.
• RevenueCat for in-app purchases, purchase status and Premium entitlements.
• Apple App Store for iOS purchases, TestFlight and app distribution.
• Supabase for database, account, multiplayer and backend features.
• Expo and hosting/infrastructure providers for technical App services.

These service providers may also process data outside the European Union. In such cases, we ensure appropriate safeguards where legally required.

8. Retention Period

Account and game data is generally stored as long as the account exists or the data is required for App features. Purchase data is stored as long as necessary to manage entitlements, restore purchases or comply with legal obligations. Technical diagnostic and crash data is stored only as long as necessary for error analysis, security and App stability.

9. Account Deletion

Users can delete their account in the App under Settings where this function is available. Alternatively, a deletion request can be sent by e-mail to [email protected].

When an account is deleted, account and game data is deleted or anonymized unless legal retention obligations or legitimate reasons prevent deletion.

10. Data Subject Rights

Depending on applicable law, users have rights to access, rectification, deletion, restriction of processing, data portability, objection to certain processing and withdrawal of consent.

Requests can be sent to [email protected].

Users also have the right to lodge a complaint with a data protection supervisory authority.

11. Children and Young People

ProFootballQuiz is not specifically directed at children under 13 years of age or below the locally required minimum age. If we learn that personal data of a child has been processed without required consent, we will take appropriate steps to delete that data.

12. Security

We use appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access and unauthorized disclosure. However, no system can guarantee complete security.