Privacy Policy

1. Controller

Luca Kappel
Eimterstr. 100
32049 Herford, Germany
Email: support@geostreak.app

2. Summary

• GeoStreak works offline; data is only processed for online features (leaderboards, friends, card trading, account).
• The app shows no ads and contains no third-party tracking (no analytics SDKs, no advertising IDs).
• Anonymous usage statistics are strictly opt-in and can be disabled at any time.
• You can permanently delete your account and all server data directly in the app (Options → Account → Sign out → "Delete account permanently").

3. Player profile & leaderboards

For online features we store a player profile on our server: your freely chosen player name, selected avatar and cosmetics, level, best scores, per-mode statistics and a random friend code. Player name, avatar and scores are visible to other users on leaderboards and in friend comparisons. Please do not use your real full name if you do not want to be identified.

Legal basis: Art. 6(1)(b) GDPR.

4. Player account (optional)

You may optionally create an account with email address and password to back up your progress in the cloud. Passwords are stored hashed only. Password resets are confirmed via an emailed code. Your cloud save is not publicly accessible.

Legal basis: Art. 6(1)(b) GDPR.

5. Friends, trading & reports

Friend requests, friend lists and card trade offers are stored while they exist. If you report another player, we store your user ID, the reported user ID and the context to review potential abuse. Blocking works locally on your device only.

Legal basis: Art. 6(1)(b) GDPR (friends/trading), Art. 6(1)(f) GDPR (abuse prevention).

6. Anonymous usage statistics (opt-in)

Only with your explicit consent (first launch, or later in the options) the app collects anonymous usage events to improve the game: modes and rounds played, correct/incorrect answers, OS and version, screen size and app language. A randomly generated identifier is used that is not linked to your player name, account or email address. No advertising IDs, no location and no contact data are collected. You can withdraw consent at any time in the options.

Legal basis: Art. 6(1)(a) GDPR (consent).

7. App updates

The app loads content updates via EAS Update (Expo, Inc., USA). Your IP address is transmitted to the update servers for technical reasons; we do not store or analyse it.

Legal basis: Art. 6(1)(f) GDPR. US transfers rely on Standard Contractual Clauses / the EU-US Data Privacy Framework.

8. Processors

• Supabase, Inc. – database and account management. Server location: EU (Frankfurt, Germany).
• Brevo (Sendinblue GmbH, Berlin, Germany) – account emails (e.g. password reset).
• Expo, Inc. (USA) – delivery of app updates.

We never share your data with third parties for advertising or other purposes.

9. Retention & deletion

Profile and account data are stored while your profile or account exists. You can permanently delete your account and all server data in the app at any time, or request deletion by emailing support@geostreak.app.

10. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to withdraw consent at any time. You may lodge a complaint with a data protection authority; the authority responsible for us is the LDI North Rhine-Westphalia, Germany.

11. Children

GeoStreak targets a general audience. Users under 16 need the consent of a parent or guardian for the anonymous usage statistics and should only create an account with parental consent.

12. Changes

We will update this policy if the app's features change (e.g. if purchases or ads are introduced). The current version is always available at this address.