Dracones

Privacy policy

Last updated: 7 November 2026

In short

Controller

Vincent C. Mader, Im Baindtle 18, 89077 Ulm, Germany. Email: dracones@mader.xyz. More details are in the legal notice.

The app

What is stored on your device

Dracones stores, in the app’s protected storage on your device, your progress (which places you have seen, found or missed and when; from this the app works out what is due for practice), your past rounds with points and times, and your settings (language, map style, accent color, borders view, sound and haptics). None of it is sent to us. If you delete the app, all of it is deleted.

All maps and names are part of the app. Dracones needs no internet connection to play, and there is no account.

Anonymous usage counts

To see which modes are played and where something gets in the way, the app sends short events to TelemetryDeck (TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany), such as “round finished, Africa, find it, 20 questions, 17 correct”. What is sent: the kind of event, the time, counts and fixed option values, plus the app version, operating system version, device model, your device’s language and region, and a random identifier that is created anew at every app launch and only kept in memory. No names, no typed answers, no device or advertising identifier are sent, and nothing is stored on your device for this. These counts cannot tell us who you are.

TelemetryDeck processes the data on our behalf under a data processing agreement and stores it in the EU. The legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR); you can object at any time by email.

Crash reports

If the app crashes or runs into an error, it sends an error report to our own crash reporting server (GlitchTip), which runs at Hetzner Online GmbH in Germany. The report contains the error message, the place in the program code, the app version, the operating system version, the device model, the time and the steps in the app shortly before the error (for example which screen was open). It contains no identifier of your device and no typed text. Your IP address is used only for the transfer and is not stored with the report. We delete reports after 90 days at the latest. The legal basis is our legitimate interest in finding and fixing errors (Art. 6(1)(f) GDPR).

Purchases

The world with all countries is free. Region packs are one-time in-app purchases through your store. Each store is responsible for payment and your account as a separate controller:

We receive no payment details, no name and no email address from the stores.

To verify purchases and unlock them on your devices, we use RevenueCat (RevenueCat, Inc., USA). For this the app sends RevenueCat a random identifier that RevenueCat creates for the installation, your store’s receipt (which pack, when, at what price, in which country), the app version, the operating system and your IP address. RevenueCat processes this data on our behalf under a data processing agreement. As RevenueCat is based in the USA, the data is transferred there under the European Commission’s standard contractual clauses. The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR). As long as you do not buy or restore anything, the app only asks which packs exist and what they cost.

No account, no ads

Dracones shows no ads, builds no profile of you and uses no advertising identifier. There is no account. If a later version offers leaderboards or challenges with an account, it will stay optional, and this policy will be extended beforehand.

Backups

If you use iCloud Backup, Google backup or a backup on your computer, your device includes the app’s data in it. That is a service of Apple or Google, and their privacy terms apply.

This website

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, with whom we have a data processing agreement. To send you the pages, the server processes your IP address and the details your browser sends along.

The server logs every request with IP address, time, request method, requested address, protocol, your browser’s headers (for example browser and operating system, preferred language and the page you came from), details of the encrypted connection, and the status code, size and duration of the response. This log is used only for operation and security, is not analyzed and is deleted after 14 days at the latest. The legal basis is our legitimate interest in a working and secure website (Art. 6(1)(f) GDPR).

The website sets no cookies, uses no analytics and loads no fonts or scripts from other servers.

Email

If you write to us, we use your email address and your message only to reply, and delete them once the conversation is over, unless a legal retention period applies. The emails are stored at Hetzner Online GmbH (address above), also under a data processing agreement. The legal basis is Art. 6(1)(b) GDPR when it concerns the app or a purchase, otherwise our legitimate interest in answering requests (Art. 6(1)(f) GDPR).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). As the app sends only anonymous usage counts and error reports with no link to you, we cannot match this data to you; what the app stores is already with you. For purchases, the order number from your store’s receipt is enough for us to answer a request. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Changes

If this policy changes, the new version will be here with a new date. If a future version of the app collects more data, for example for an optional account, we will say so clearly beforehand.