Privacy

This privacy notice explains which data is processed when using Badly Explained. The app is designed to keep as much data as possible on the device. Online data is created only for features that require a connection to the global leaderboard.

1. Controller

Philipp David
Sole proprietorship
Ahornstrasse 5c
16727 Velten
Germany

Email: support@schlechterklaert.de

2. Local game data

Player name, game progress, scores, statistics, experience points (XP), level, achievements, settings and local high scores are generally stored locally on your device. Normal and Quick rounds do not require an online account.

We do not transmit these local data to our own server and cannot access them. If the app or its local app data is deleted, these data may be lost. We currently cannot restore them.

3. Legend Run and global leaderboard

The app uses the backend service Supabase for Legend Run and the global leaderboard. The first time an online feature is used, an anonymous technical user account is created. No email address, phone number or password is required.

For the leaderboard, an anonymous user ID, your chosen and reserved player name, leaderboard mode, score, timestamps and your last online activity are processed.

Only player name, rank and score are publicly visible. A real name is not required. We therefore recommend using a player name that does not directly reveal your identity.

4. Unique player names

Player names are reserved uniquely on the server. Upper- and lowercase variants do not create separate names. This reservation is used to assign entries in the global leaderboard unambiguously.

If you change your player name, the existing online entry is updated and the previous name becomes available again. Deleting your online data also releases the reserved name.

5. Technically required connection data

When you use an online feature, your device must connect to Supabase. Technically required connection data such as your IP address, time of access and technical request or device information may be processed. We do not store your IP address in our own leaderboard tables.

Such technical connection and log data may be processed by Supabase and its infrastructure providers where necessary to provide, secure, troubleshoot and maintain the service.

6. Purposes and legal bases

Online profile data, player-name reservations and leaderboard data are processed to provide the online features you use. The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the requested feature as part of the user relationship.

Where technically required data is processed to secure and stabilize the service or prevent abuse, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to operate a secure, functional online service protected against misuse.

7. Supabase and international data transfers

We use Supabase as a processor for authentication, database services and the leaderboard. The primary project data of our Supabase project is stored in the Central EU (Frankfurt) region.

Supabase may use additional subprocessors to provide its services. Where personal data is processed outside the European Economic Area and no other valid transfer mechanism applies, Supabase’s data processing agreement provides safeguards including the EU Standard Contractual Clauses.

8. Retention and deletion

Your anonymous online profile and related leaderboard data are automatically deleted after 12 months without online activity.

You can also delete your online data at any time in the app under Settings → Delete online data. This removes the anonymous online profile, leaderboard data and player-name reservation. Your local game progress, XP, achievements and settings remain on the device.

Technical connection and log data created by Supabase or its infrastructure providers is retained according to their applicable technical retention periods or only for as long as required for operation, security and troubleshooting.

9. Sharing feature

When you use the sharing feature, the app opens your device’s system share sheet. Data is sent to another service only after you choose a destination and confirm the share action yourself. The destination service’s own privacy terms then apply to further processing.

10. Advertising, tracking and analytics

The current app version contains no advertising SDKs, no personal tracking and no analytics SDKs used to create usage profiles.

If such features are introduced in the future, this privacy notice will be updated before they are released.

11. Your data-protection rights

Subject to the applicable legal requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and, where applicable, the right to object to processing.

For online data stored directly through the app, you can also use the Delete online data feature. For other privacy requests, contact the controller using the contact details stated above.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

13. Automated decision-making

The app does not make solely automated decisions that produce legal effects concerning you or similarly significantly affect you. Leaderboard rank and score are game elements only.

14. Website and hosting

The website at schlechterklaert.com is provided as a static website through Netlify. The hosting provider is Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA.

When the website is accessed, technically required connection and log data may be processed, in particular the IP address, time of access, requested resource and technical browser or request information. This processing is necessary to deliver the website, maintain its stability and security, and identify technical errors.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of this website.

Netlify processes data under a data-processing arrangement. Where personal data is transferred to the United States or other countries outside the European Economic Area, Netlify provides appropriate safeguards, including the Standard Contractual Clauses adopted by the European Commission.

The website itself currently uses no analytics, advertising or tracking scripts and sets no marketing cookies of its own.

15. Changes to this privacy notice

This privacy notice will be updated when features, service providers or data processing change. It will be reviewed again before store release against the actual released feature set.