Transparency is part of the design. Here is exactly what data Scale Match processes – and what it does not.
This privacy policy explains which personal data the mobile game “Scale Match” (“the app”) processes, why it does so, and what rights you have. It applies to the Android version currently published on Google Play. We have deliberately kept data processing to a minimum: there is no user account, no login and no password. The app only connects to our own server in order to store your level progress.
The controller responsible for the processing described here, within the meaning of the GDPR, is the operator of the app. Name, postal address and email address are set out in full in the legal notice.
The email address given there is also the right route for access and deletion requests. Section 8 explains how that works in practice.
No data protection officer has been appointed, as the legal requirements for doing so are not met. Please direct any concerns to the address given in the legal notice.
The app processes only the data needed to store and verify your game progress. There are three kinds:
We do not process:
These statements match the “Data Safety” form in the Google Play Store: a device ID and app activity are collected, the data is not shared with third parties, it is transmitted encrypted, and deletion is available on request.
The data described in section 2 is processed for these three purposes only:
Advertising is currently not used.
There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. The data is not used to analyse your behaviour or to evaluate you.
We process the pseudonymous identifier, the level progress and the IP address on the basis of our legitimate interest under Art. 6(1)(f) GDPR.
Our legitimate interest is in offering a functioning game: progress should be preserved, manipulation should be detectable, and the server should be protected against abuse. Your interests stand against this. We have weighed them and kept the processing as limited as possible – no identity data is collected, the identifier is generated on your device rather than assigned centrally, and your behaviour is not analysed. On that basis, we consider that your interests do not override ours. You nevertheless have the right to object to this processing at any time (see section 7).
Providing this data is neither a statutory nor a contractual requirement. It is, however, technically necessary in order to store, verify and restore progress on the server side.
We do not ask for consent, because the app contains no processing that requires it – in particular no advertising, no analytics and no tracking.
Your data is not shared with third parties, not sold, and not used for advertising purposes. The app integrates no third-party analytics SDKs, no ad networks and no tracking services.
The server storing your UUID and level progress is our own backend built with Symfony. It runs self-hosted in Docker containers (managed via Coolify) on servers in Germany.
Processor: a provider of server infrastructure, hosting the servers in a data centre in Germany. It processes the data solely on our instructions, under a data processing agreement pursuant to Art. 28 GDPR, and does not use it for its own purposes.
The connection between app and server is encrypted (HTTPS/TLS). Server access is restricted to the operator. We apply appropriate technical and organisational measures to protect the data against unauthorised access, loss and misuse.
Your level progress stays stored for as long as you keep playing. If your device does not contact our server for three months, we delete the corresponding record automatically. Please note what this means: if you pause for longer than three months, your progress is gone for good and cannot be restored. Independently of that, you can request deletion yourself at any time (section 8).
The same period resolves a case we could not otherwise handle: if you delete and reinstall the app, you get a new UUID. The old record can then no longer be attributed to anyone – not even to you, because you no longer have the old UUID. It does not sit there forever, though: after three months without server contact it falls under the same automatic deletion.
Server logs containing IP addresses are deleted after three months.
If you uninstall the app, all data stored locally on your device is removed immediately – including the UUID. The record on the server initially remains and is deleted automatically after three months without server contact. If you want it gone sooner, section 8 explains how to request that.
As a data subject you have the following rights under the GDPR. Section 8 explains how to exercise them in practice.
One honest note: under Art. 11 GDPR we are not obliged to collect additional data purely in order to identify you for the purpose of these rights. Without your UUID we simply cannot attribute a record to you – we would not know which of many pseudonymous entries is meant.
Because all we hold about you is a pseudonymous UUID, that UUID is the key to your rights. The app therefore displays your UUID directly, so that you can identify your device to us unambiguously.
Send us a message at the email address given in the legal notice and include your UUID. Let us know whether you want information about the stored data or its deletion. Without the UUID we cannot match your request to a record.
For a deletion request we remove the corresponding record completely and irreversibly, within 30 days at the latest. As we keep no backup copies, the record then exists nowhere any more. Access requests are answered within the same period. Both are free of charge for you.
Please note: once deleted, the progress is gone and cannot be restored. Also keep your UUID safe – anyone who knows it can request information about the associated game progress.
Scale Match is available internationally via Google Play. Regardless of where you are, your data is processed on our servers in Germany. We do not transfer data to third countries outside the European Economic Area.
So if you use the app from outside the EU, your data is transferred into the EU and processed there according to GDPR standards. Depending on your country you may have additional rights under your local data protection law; for those, please also use the contact address in the legal notice.
Distribution of the app itself happens through the Google Play Store. Google, not we, is responsible for the data processing connected with your store account and the download. Google's privacy terms apply to that.
Scale Match is not specifically directed at children. The age rating stated in the Google Play Store applies: rated for ages 0 and up (USK 0). Since the app neither collects identity data nor serves advertising, no data other than that described in section 2 is processed for younger players either.
Parents and guardians can request deletion of the progress at any time via the route described in section 8.
If the app changes and processes different data as a result, we will update this policy. The version published here is always the authoritative one; the date at the bottom of the page shows how current it is.
For material changes – for instance if advertising, analytics tools or sharing with third parties were added in future – we will additionally point this out in the app or in the store listing before the change takes effect.
Last updated: July 2026