Privacy Policy (App)

Controller within the meaning of the GDPR:

Sebastian Fischer
Lyngsbergstraße 1b
53177 Bonn
Germany
Email: sebastian@8shapeapp.com

The app stores game progress, settings and high scores locally on your device. We additionally process anonymised usage and crash data to keep the app stable. No user account is required.

If you voluntarily sign in with your Apple Game Center account, Apple processes your high scores, achievements and multiplayer matches to provide those features. This processing is carried out by Apple as an independent controller; Apple's privacy terms apply. We ourselves do not receive any personal data from Game Center beyond what is necessary.

The app shows ads via Google AdMob (Google Ireland Ltd.). This may process an advertising identifier (e.g. IDFA on iOS), device information, approximate location and IP address to display and measure ads.

On first launch we ask for your consent in two separate steps, before any ad is requested at all:

1. Consent via the User Messaging Platform (UMP) – Google's consent platform under the GDPR/TCF. Here you decide whether personalised ads may be served to you. The form only appears where it is required (EEA, UK and Switzerland).
2. App Tracking Transparency (ATT) – Apple's system dialog, shown afterwards. It concerns cross-app tracking and access to the advertising identifier (IDFA) only.

Only then is the Google Mobile Ads SDK started. Your decision determines the kind of advertising, not whether it appears – the app continues to show ads either way:

• If you decline in the UMP form, you still see ads, but without personalisation.
• If you decline ATT, you still see ads, but without access to the advertising identifier and without cross-app tracking.

Non-personalised ads also still involve processing data in order to deliver them, such as your IP address and coarse contextual information.

You can change your consent at any time: the UMP form can be reopened in the app settings under “Privacy”; the ATT choice can be changed in your device settings. Details: policies.google.com/privacy and AdMob privacy notices.

Purchases within the app are processed entirely through the Apple App Store. We never process payment data ourselves; Apple's privacy terms apply.

At the end of a game you can share your result. This only ever happens on your initiative: the iOS share sheet opens when you tap the share button, and something only leaves your device once you pick a destination there. If you cancel, nothing happens.

What is shared is an image card with your game data – outcome, moves, duration, score and the shapes you potted – plus, depending on the destination, a short result sentence with a link to the app on the App Store. In multiplayer, your opponent's Game Center display name is deliberately not on the card; it is replaced by a neutral label before the card is captured.

We collect nothing in the process. The app keeps no record of whether, when or where you share, and no connection to any server of ours is made. Once you have chosen a destination, further processing is up to that app or network as an independent controller, and its privacy terms apply.

Direct route to Instagram Stories. Where this route is offered – it requires Instagram to be installed and the feature to be enabled in the app – the app places the image on your device's pasteboard for a short time and opens Instagram. The pasteboard entry is given an expiry of five minutes; if Instagram does not open, the app clears it immediately. When opening, the app passes an 8shape identifier (source_application), because Instagram would otherwise discard the image. This tells Meta which app the share came from. No Meta SDK is embedded, no device or advertising identifiers are collected, and nothing runs in the background. Instagram's processing is governed by the Instagram Privacy Policy.

The app is not specifically directed at children under 13. We do not knowingly collect personal data from children.

The in-app shop can only be unlocked by entering the device passcode or via Face ID/Touch ID. This means children can only reach in-app purchases if they already have access to an Apple account with a passcode or Face ID/Touch ID set up.

You have the same rights described under Art. 15–21 GDPR (access, rectification, erasure, restriction, portability, objection), plus the right to lodge a complaint with a supervisory authority.

Questions about privacy in the app go to sebastian@8shapeapp.com.

We update this policy whenever the app or legal requirements change. The version published here is always the current one.