Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Giuseppe Loggia
Karwendelstr. 8
81369 Munich
Germany

Email: support@slyp.club

2. Principles of data processing

SLYP is designed to process as little personal data as possible.

There are no accounts of my own and no registration.

I operate no user backend and no analytics of my own for SLYP. I do not build personal user profiles and I do not sell personal data.

Game progress is stored locally on the device as a matter of principle and may be synchronised through Apple's iCloud infrastructure.

Certain features rely on services from Apple, Google and Cloudflare. Using them can involve the processing of personal data. The details are set out below.

3. Local game data and device functions

SLYP stores the following on the device you play on:

your highest score
the theme you have chosen
your settings for haptics, sound effects and music
the last rank you held on the leaderboard, so that an improvement can be recognised
a count of runs since the last advertisement
a cached note of whether SLYP Pro has been purchased
the age band asked for once (see below and section 21)

None of this is transmitted to a SLYP server of my own — there is no such server.

Where iCloud synchronisation is enabled and available, your highest score can be synchronised between supported Apple devices through your iCloud account. The other values listed above are not part of that synchronisation.

If data held only locally is removed by resetting or deleting the app, SLYP cannot restore it. For data synchronised through iCloud, the settings and terms of the relevant Apple or iCloud account apply in addition.

SLYP does not request access to photos, contacts, the microphone, the camera or location. SLYP does not read device motion and integrates no image-generation feature.

Before advertising is shown for the first time, SLYP asks once whether you are 16 or older, or under 16. That choice is the only thing asked. No date of birth, year of birth, exact age, name, email address or account is requested.

Only the selected age band is stored, as a single value, locally on the device. It is not transmitted to a SLYP server — there is no such server for this — it is not part of SLYP's iCloud synchronisation, and it is removed when the app is deleted.

The age band is used solely to set the age-related advertising settings described in section 21. It is not evaluated for advertising purposes, not used for profiling and not passed to third parties. The age answer itself is not sent to Google; only the technical advertising settings derived from it are.

4. Advertising through Google AdMob

The free version of SLYP contains advertising through Google AdMob.

SLYP uses interstitial advertising only — full-screen advertisements between two runs. There are no banner advertisements, no rewarded advertisements and no advertising during a run in progress.

An advertisement can appear only when a run starts — from the menu, from the retry button, or after the app has been relaunched. Nothing is shown while a run is under way.

The frequency is capped: at most every third run start, and never twice within 90 seconds. The counter behind this is stored locally and survives a relaunch of the app.

Within the European Economic Area the provider of the service is in particular Google Ireland Limited.

Google may process personal and technical data in connection with serving advertising.

Depending on consent, device settings, region and the form of delivery, this may include in particular:

IP address
device information
device and advertising identifiers
the Advertising Identifier (IDFA), where available and permitted
an approximate location, for example derived from the IP address
information about advertisements shown
interactions with advertisements
diagnostic information
information used to prevent fraud and abuse
technical information about the use of the advertising service

In connection with AdMob, Google and the operator of SLYP may each act as independent controllers for certain processing.

Google may involve further advertising technology providers when serving advertising. Where required, the providers, purposes and choices relevant to a given user are shown through the consent and privacy system Google provides.

Apple's SKAdNetwork may additionally be used to measure advertising performance. Apple designs that mechanism so that campaign feedback happens without identifying the individual user.

Regardless of the age band selected, the maximum content rating of the advertising served is capped at the rating intended for teenagers.

After SLYP Pro is purchased, no advertisements are shown in SLYP at all. The advertising SDK is not started in that case and no ad requests are made.

slyp.club does not use Google AdMob.

5. Legal bases for advertising and consent

Where consent is required for personalised advertising, or for accessing or storing information on the device, the corresponding processing takes place on the basis of Art. 6(1)(a) GDPR and, where applicable, § 25(1) TDDDG.

Consent is voluntary and can be changed or withdrawn at any time with effect for the future.

The lawfulness of processing carried out on the basis of consent up to the point of withdrawal remains unaffected by that withdrawal.

If such consent is not given, the privacy and advertising system in use determines — taking the legal requirements and any privacy signals into account — whether and in what restricted form advertising may be served.

Depending on the legal conditions, this may in particular mean non-personalised or otherwise limited forms of advertising.

Even with restricted delivery, technically necessary information may be processed, in particular the IP address needed to transmit an advertisement, along with data used for security, error prevention and fraud prevention.

Where such processing requires no consent and is legally permitted, it may rest in particular on Art. 6(1)(f) GDPR.

The legitimate interest lies in particular in providing the service securely and in preventing fraud, abuse and technical disruption.

6. Google User Messaging Platform (UMP)

SLYP uses the Google User Messaging Platform (UMP) to manage the privacy information and consent required in connection with Google AdMob.

The consent flow runs before the advertising SDK is started and before the first ad request is made.

UMP may be used in particular to

determine whether a privacy or consent dialogue is required,
provide the required privacy information,
record consent and privacy decisions,
manage privacy signals,
determine the permissible form of ad delivery, and
allow privacy settings to be changed later.

For users in the European Economic Area and in other regions, the privacy information and choices required in each case can be presented through UMP.

Where Google provides for privacy options to be shown again for a user, or where legal requirements call for it, SLYP offers a way into them from its menu, through which advertising consent can be changed or withdrawn.

7. Apple's App Tracking Transparency

Google's privacy and consent system and Apple's App Tracking Transparency (ATT) are separate mechanisms.

Where SLYP or an integrated service wishes to carry out tracking within the meaning of Apple's rules for which tracking permission is required, the App Tracking Transparency prompt provided by iOS is used.

The ATT prompt appears only after the age question and after Google's consent flow. If “under 16” was selected, it is not shown at all.

Without the required ATT permission, the Advertising Identifier (IDFA) may not be used for such tracking.

Tracking permission once given can be changed or withdrawn at any time through the privacy and tracking settings in iOS.

Declining tracking permission does not prevent SLYP from being used.

8. Apple Game Center

SLYP uses Apple Game Center for:

one worldwide leaderboard of highest scores
eight achievements

SLYP has no multiplayer or versus mode and no matchmaking. No players are connected to one another, and no game data is transmitted between devices.

Using Game Center requires Game Center to be available on the device and set up or enabled by the user. Signing in is optional; SLYP is complete to play without it.

In connection with Game Center, Apple may process in particular: the Game Center player name or alias, the Game Center identifier, avatar or profile information, scores, achievements and game activity.

Where processing within SLYP's responsibility is necessary in order to provide a Game Center feature the user has asked for, it takes place on the basis of Art. 6(1)(b) GDPR.

Apple's own privacy information and terms apply in addition to processing carried out by Apple.

9. iCloud

SLYP uses Apple's iCloud features, in particular iCloud Key-Value Storage, to synchronise your highest score.

This allows that value to be synchronised between supported devices through your personal Apple or iCloud account. SLYP provides no interface of its own for controlling this synchronisation.

I operate no cloud backend of my own for this and have no direct access to a user's personal iCloud account.

Where the synchronisation feature is used and processing takes place within SLYP's responsibility, it does so in order to provide the requested feature on the basis of Art. 6(1)(b) GDPR.

Apple's privacy terms apply in addition to processing within Apple's and iCloud's infrastructure.

10. In-app purchase and SLYP Pro

SLYP offers one optional purchase: SLYP Pro.

SLYP Pro removes the advertising inside the app for good and unlocks the three colour themes Soft Day, Soft Night and Soft Auto.

It is a one-time purchase and not a subscription.

Payment is handled through Apple's App Store and In-App Purchase infrastructure.

In particular, I do not receive any:

credit card numbers
bank details
complete payment information
billing addresses

from Apple.

In order to establish and restore Pro status, however, technical transaction, purchase and entitlement information may be processed through Apple's StoreKit and App Store infrastructure. The result is cached locally on the device so that the status is known without a network connection.

Where such processing takes place within SLYP's responsibility, it does so in order to carry out or administer the purchase on the basis of Art. 6(1)(b) GDPR.

Apple's privacy and contractual terms apply in addition to payment handling and processing within the App Store.

11. The slyp.club website

slyp.club is a static information website.

It contains no:

accounts
registration
comment features
contact forms
advertising
marketing trackers of my own
social media pixels

The website stores nothing on your device: no cookies, no localStorage, no comparable technique. The language switch is an ordinary link to the other language's page and is not remembered. No consent banner is therefore required.

I build no personal visitor profiles on this website.

The services described for the app — Google AdMob, Google UMP, Apple's App Tracking Transparency, Game Center, iCloud and Apple's in-app purchase — are not used on the website.

12. Delivery of the website through Cloudflare

The website is delivered through infrastructure operated by Cloudflare, Inc., in particular using Cloudflare Workers and Static Assets.

In doing so, Cloudflare may process technically necessary information in order to receive and route requests, deliver content, and protect the website and infrastructure against technical attack and abuse.

This may include in particular:

IP address
the date and time of a request
the address or resource requested
browser information
operating system and device information
HTTP headers
routing and connection information
technical security information

The processing serves the secure, stable and performant delivery of slyp.club.

The legal basis for processing within my responsibility is Art. 6(1)(f) GDPR.

My legitimate interest lies in delivering the website securely, reliably, quickly and protected against attack.

Where Cloudflare processes personal data on my behalf, it does so on the basis of the corresponding data protection and processing terms agreed with Cloudflare.

13. International data transfers

When services from internationally active providers such as Google, Apple and Cloudflare are used, processing of personal data outside Germany or the European Economic Area cannot be entirely ruled out.

Where personal data is transferred to a third country, this happens only in compliance with the requirements of Art. 44 et seq. GDPR.

This may rest in particular on an adequacy decision of the European Commission, a valid certification of the recipient under a recognised data protection framework, or appropriate safeguards such as the standard contractual clauses approved by the European Commission.

For certain transfers to the United States, Cloudflare states in particular the EU-U.S. Data Privacy Framework together with standard contractual clauses.

Google and Apple likewise publish their own information on the transfer mechanisms they use.

14. Technical operational information

In connection with providing its infrastructure, Cloudflare may make technical statistics and operational information available.

I do not use such information to build personal visitor profiles or to follow individual visitors across different services.

No marketing or user tracking software of my own is used on slyp.club.

15. Retention

Personal data is processed only for as long as necessary for the respective purpose, or for as long as statutory retention obligations require.

For the individual areas, the following applies in particular:

Local game data: Until it is reset within the app, deleted from the device, or removed by deleting the app, insofar as it does not additionally exist through iCloud.
Age band: Until it is changed in the app or the app is removed from the device. No history of earlier answers is kept.
iCloud data: According to the settings, features and retention mechanisms of the relevant Apple or iCloud account.
Game Center data: According to Apple's applicable terms and retention rules.
AdMob and advertising data: According to the applicable retention rules of Google and any advertising technology providers involved.
Cloudflare data: According to the storage and retention rules applicable to the provision, security and operation of the relevant Cloudflare services.

16. Recipients and categories of recipients

Depending on how SLYP and slyp.club are used, the following providers in particular may receive or themselves process personal data:

Google, in particular in connection with AdMob and UMP
advertising technology providers integrated by Google or disclosed in the privacy dialogue
Apple, in particular in connection with the App Store, in-app purchases, Game Center and iCloud
Cloudflare, in connection with delivering and securing the website

Any other disclosure of personal data by me takes place only where there is a legal basis for it or a statutory obligation.

I do not sell personal data.

17. Data protection rights

Where the statutory conditions are met, data subjects have in particular the following rights:

the right of access under Art. 15 GDPR
the right to rectification under Art. 16 GDPR
the right to erasure under Art. 17 GDPR
the right to restriction of processing under Art. 18 GDPR
the right to data portability under Art. 20 GDPR
the right to object under Art. 21 GDPR
the right to withdraw consent under Art. 7(3) GDPR

Consent once given can be withdrawn at any time with effect for the future.

The lawfulness of processing carried out on the basis of consent up to the point of withdrawal remains unaffected.

For questions, or to exercise your rights, you can contact me: support@slyp.club

Where Google, Apple or other providers are independently responsible for a particular processing operation, data subject rights can additionally be asserted directly against that provider.

18. Objection to processing based on legitimate interests

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, Art. 21 GDPR gives you the right to object to that processing on grounds relating to your particular situation.

19. Changing advertising and tracking settings

Privacy and advertising decisions made through Google UMP can be reopened and changed inside SLYP, where a route into privacy options is required or available for the user in question. SLYP shows a dedicated button for this in its menu.

Apple's tracking permission can be changed independently at any time through the iOS system settings.

Playing the game itself does not depend on agreeing to personalised tracking or personalised advertising.

20. Right to lodge a complaint

Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority.

For the controller's place of establishment, the competent authority is in particular:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

The right to approach another competent supervisory authority remains unaffected.

21. Minimum age and young people

SLYP is intended for users aged 13 and over.

The app is not intended for children under 13 and is not offered as a children's app, nor in Apple's “Kids” category.

SLYP has no accounts of its own, no registration and no personal profiling of its own.

The App Store age rating is determined according to the details given in App Store Connect or — where necessary and provided for by Apple — set to a higher rating.

An app's age rating does not replace data protection requirements. Where particular privacy or advertising protections are required for underage users because of their age, their region or applicable law, the systems and settings provided for that purpose by the platforms and services in use are applied.

SLYP does not invite children under 13 to provide personal data to the operator.

To actually implement these protections, SLYP asks once, before advertising is shown for the first time, for the age band (“16 or older” or “under 16”). How that answer is stored is described in section 3. A single threshold of 16 completed years is used, because that is the highest age Art. 8 GDPR provides for consent capacity in information society services.

If “under 16” is selected, ad requests are tagged to Google as coming from users below the age of consent, and the age-related setting for ad delivery is set accordingly. In that case SLYP shows no App Tracking Transparency prompt and requests no access to the device's advertising identifier. Personalised advertising and tracking then do not take place; only non-personalised or otherwise restricted advertising is served.

If “16 or older” is selected, the regular flow applies: the Google UMP SDK's consent dialogue is shown, and personalised advertising and tracking take place only insofar as consent has been given there and, where applicable, through App Tracking Transparency.

Regardless of the age band selected, the maximum content rating of the advertising served is capped at the rating intended for teenagers.

SLYP is not configured as an app directed at children within the meaning of the setting Google provides for that purpose. That setting is reserved for offerings aimed at children; SLYP is intended for users aged 13 and over.

22. No automated decision-making by SLYP

I carry out no solely automated decision-making of my own, including profiling within the meaning of Art. 22 GDPR, that produces legal effects concerning users or similarly significantly affects them.

The selection and delivery of advertising may, however, be automated by Google or the advertising technology providers involved.

The respective privacy information of the providers involved applies to that processing.

23. Privacy information of the providers used

Further information on the processing of personal data can be found in particular in the official privacy information of the following providers:

24. Changes to this privacy policy

This privacy policy will be amended when SLYP, the website, the services used, or the legal or technical conditions change.

The version published on slyp.club at the relevant time applies.

Last updated: September 5, 2026