Privacy Policy for Sippy

In short

Sippy stores everything you create in the app on your device only: players, crews, rule sets, rounds played and photos. There is no account and no sign-in, and the app contains no ads. The only thing sent to me is an anonymous count of events in the app — without any identifier, and it can be switched off in the settings. Purchases are handled by Google Play.

1. Controller

2. Data on your device

What you enter in Sippy stays in a database on your device: the names of the players with their colour, symbol and optionally gender, crews, your own rules, decks and presets, the history of rounds played, marked moments and your settings. This data is not transferred to me; I have no access to it.

You delete the data by removing entries in the app or by uninstalling it. There is no server of mine for your data.

Backup by Android. If backup to your Google account is switched on on your device, Android includes Sippy's data in it – the database, your settings and photos you gave players as their picture – so that it is back after changing phones or reinstalling. Photos taken for marked moments are left out. Google processes the backup under its own responsibility according to theGoogle Privacy Policy; with a screen lock set up, it is end-to-end encrypted. You switch it on or off in the Android settings under “Google” › “Backup”. I receive nothing from it.

3. Camera and photos

The camera is only used when you take a photo for a moment; Android asks for the permission only then. The photos stay inside the app on your device and are left out of the Android backup to your Google account; a direct move to a new phone can take them along. They are saved to the gallery or shared only when you explicitly tap to do so. When sharing, you pick the target app yourself through the system share menu; from then on its terms apply.

Sharing rules and your own decks. When you share a rule set or a deck of your own, its content – for a deck, every statement you wrote – is inside the link, the QR code or the file. Whoever receives it can read it. The content sits after the “#” in the link; a browser does not send that part to my server, so it does not learn what was shared.

4. Anonymous usage statistics

To understand which parts of the app are used, Sippy sends individual events to a self-hosted installation of Umami on my server at Hetzner Online GmbH (server location: Germany, Nuremberg). What is sent is the name of the event — such as "game started", "evening finished" or "purchase page shown" —, simple details about it such as the chosen game, the number of players or whether the game is played alcohol-free, the app's language and a random value that is only valid until the app is closed.

No names, no content and no photos are sent. Sippy stores no identifier on your device for this, uses no advertising ID and builds no profile. When receiving an event, the server necessarily processes your IP address and a technical identification of the request; Umami does not store the IP address and only derives an approximate region from it.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a data-minimising analysis of app use). As nothing is stored on or read from your device for this, no consent under § 25 (1) TDDDG is required. You can object at any time: turn off "Anonymous usage statistics" in the app's settings, and Sippy sends nothing from then on. This choice is stored on your device so that it lasts.

5. Purchases through Google Play

Sippy offers a one-time purchase ("Sippy Full"). The purchase is handled entirely by Google Play; for customers in the European Economic Area, Google is the seller. I do not receive any payment details. The app only learns from Google Play whether the purchase exists and stores this unlock on your device. Google's processing is governed byGoogle's privacy policy.

6. Google Play as the distribution channel

Sippy is installed and updated through Google Play. Google processes data in its own responsibility in doing so, for example about your Google account and device. From Play Console I only receive aggregated figures such as install counts and technical crash reports that do not identify individuals.

7. No ads, no other services

Sippy contains no ads and includes no advertising, tracking or social media services. Apart from the usage statistics in section 4 and Google Play in sections 5 and 6, the app makes no connections. When you open this privacy policy from the app, thewebsite's privacy policy applies.

8. Your rights

Under the GDPR you have the right at any time to

• access the data stored about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on a legitimate interest (Art. 21).

As the usage statistics contain no identifier, I generally cannot attribute events to a person. Contact kontakt@schweizerlelab.de informally to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); the authority responsible for me is the Bavarian State Office for Data Protection Supervision (BayLDA).

9. Changes to this policy

I update this policy when the app's data processing changes, for example through new features. The date of the last review is shown at the end of this page.