Privacy Policy – iOS App

This privacy policy applies exclusively to the Kombinationen iOS app. The website has a separate policy.

1. Data controller

Paul Kühnel

Alte Landstraße 6, 38259 Salzgitter, Germany

Email: paul.kuehnel@proton.me

2. What data is processed?

🔑

Anonymous user ID (Supabase Auth)

On first launch, an anonymous account is automatically created and a random UUID is generated. No name, email address, or other personal information is collected. The ID cannot be linked to your identity.

📊

Game progress

Found words, score, and completion status are stored under your anonymous ID in an encrypted database.

📢

Advertising (Google AdMob)

The app displays ads via Google AdMob. AdMob may process your device's Advertising ID (IDFA). On first launch you are asked for consent via the ATT prompt. If you decline, only non-personalised ads are shown.

🚫

What we do NOT store

No IP address, no email, no name, no location, no contacts.

3. App Tracking Transparency (ATT)

In accordance with Apple guidelines (iOS 14.5+), the app requests permission for cross-app tracking via the ATT prompt on first launch.

Allowed: AdMob delivers personalised ads based on your Advertising ID.

Declined: Only non-personalised ads are shown. Your Advertising ID is not used.

You can change your decision at any time under Settings → Privacy & Security → Tracking.

4. Google AdMob

We use Google AdMob (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google acts as an independent data controller for advertising data.

Google Privacy Policy →

5. Legal basis

Game progress: Art. 6(1)(f) GDPR (legitimate interest in app functionality).

Personalised ads: Art. 6(1)(a) GDPR (consent via ATT prompt).

Non-personalised ads: Art. 6(1)(f) GDPR (legitimate interest in financing the app).

6. Retention period

Game progress is stored for a maximum of 12 months after the last access and then automatically deleted. Inactive anonymous auth users are cleaned up by Supabase after 30 days.

7. Third-party service — Supabase

Database & authentication: Supabase Inc. (EU hosting). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR is in place. supabase.com/privacy →

8. Data deletion

You can delete all your data at any time directly within the app:

In the app: Privacy → Delete All Data

This permanently and irreversibly deletes your game progress and anonymous account. The app will then automatically create a new anonymous session.

Alternatively: uninstalling the app deletes all local data. Server-side data will be deleted on request to paul.kuehnel@proton.me.

9. Your rights (GDPR)

→Access to stored data (Art. 15)
→Rectification of inaccurate data (Art. 16)
→Erasure of your data (Art. 17) — available directly in the app
→Restriction of processing (Art. 18)
→Data portability (Art. 20)
→Right to object (Art. 21)

Contact: paul.kuehnel@proton.me. You also have the right to lodge a complaint with a supervisory authority.

10. Changes

The current version is always available at kombinationen.com/datenschutz/app/en.

Last updated: July 2026