Privacy Policy

Last updated: 2025-01-12

Note: The original version of this document was drafted in German. The German version is applicable and this English version solely acts as a translation.

1. General Information

We, SiliyonSoftware, take the protection of your personal data seriously. This privacy policy informs you about which data is collected, processed, and used when using our app "Claim Of Zones". Our app is primarily intended for users aged 18 and older; minors should only use the app under the supervision of an adult.

2. Data Controller

The responsible party for data processing in connection with the use of the app is:
Patrick Hirschi (Siliyon)
Email: siliyon55@gmail.com

3. Data Collected and Purposes of Processing

3.1 Authentication and User Account

Using our app requires authentication. You may log in either with email/password or via Google Sign-In. The following data are collected:

• Email address: Used to uniquely identify your account and for account recovery.
• Password (for email login): Stored in encrypted form and used exclusively for authentication.
• Google account information (for Google Sign-In): Name and email address from your Google profile.
• Username: The display name chosen by you, visible to other players.

These data are stored in our Firebase database (Firestore) and serve account management and the sharing of your game state with other teams.

3.2 Location Data (Geolocation)

The app collects your location data to enable the core gameplay functionality. Location data are used for:

• Zone-based gameplay: To determine in which geographical zone you are located and whether you are eligible to claim it.
• Map display: To show your position on the game map (Google Maps).

The app uses both precise (GPS, ACCESS_FINE_LOCATION) and approximate (Network, ACCESS_COARSE_LOCATION) location data. Location data are collected only when you grant the corresponding permission. For certain interactions (e.g., claiming a zone) the location is stored to ensure the best gameplay experience. Otherwise, location data are not permanently stored on our servers and are only processed during runtime.

3.3 Media and User-Generated Content

The app enables the uploading and sharing of media and text. The following data are collected and stored:

• Photos and videos (evidence media): Players can upload image and video evidence to verify challenges. These are stored in Firebase Storage.
• Chat messages: Players can communicate within a game. Chat messages are stored in Firestore.
• Comments: Comments on uploaded evidence are stored.
• Descriptions: Descriptions created by players for evidence.
• Game names: Names given to games by players.

To access media, the app requires permissions to read images and videos (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO). These permissions are used only to upload media selected by you.

3.4 Push Notifications

The app uses Firebase Cloud Messaging (FCM) to inform you about game-related events such as:

• When another team claims a zone
• New chat messages
• Status changes of evidence

To receive push notifications, a device-specific FCM token is generated and stored. You may disable notifications in the app settings at any time.

3.5 Local Data Storage

The app stores certain data locally on your device to improve user experience:

• Settings and preferences: Your app settings are stored locally.
• Game state (demo mode): In demo mode, game progress is stored locally.
• Cached data: Game data may be temporarily cached to improve performance.

3.6 In-App Purchases

The app offers in-app purchases via Google Play Billing. For purchases, transaction data are processed by Google. We only receive a confirmation of the purchase status, but no payment information such as credit card data.

3.7 Crash Reports and Error Logging

To improve app stability and assist in debugging, we use Firebase Crashlytics. In the event of an app crash, the following data are automatically collected:

• Device type and operating system version
• App version
• Time of crash
• Stack trace (technical error details)
• App-specific log data

Important: Sensitive information such as passwords, personal messages, or precise location data are filtered out of crash reports. Only app logs, not system logs, are transmitted.

It is also possible to send reports manually. In that case, only the information explicitly confirmed by you will be transmitted.

3.8 Analytics

Anonymized analytics data are collected and sent to Firebase Analytics. These data serve exclusively to improve and analyze the app’s functionality and do not contain personal information.

4. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

• Performance of a contract (Art. 6 para. 1 lit. b GDPR): Processing is necessary to enable gameplay and the associated functions.
• Legitimate interests (Art. 6 para. 1 lit. f GDPR): To improve app stability and quality (Crashlytics, Analytics).
• Consent (Art. 6 para. 1 lit. a GDPR): For the collection of location data and receiving push notifications, consent is obtained through the corresponding permissions.

5. Transfer and Use of Data

Your data are transferred to the following third parties insofar as necessary to provide the app's functionality:

• Google Firebase: For authentication, database (Firestore), file storage (Storage), push notifications (FCM), crash reporting (Crashlytics), and analytics.
• Google Maps: For map display and location functions.
• Google Play: For handling in-app purchases.

No additional data transfer to third parties occurs unless there is a legal obligation to do so.

Note on data transfer to third countries: Google Firebase and Google Maps are operated by Google LLC, whose servers may also be located in the USA. Google participates in the EU-US Data Privacy Framework and provides adequate safeguards for the protection of your data.

6. Storage and Deletion

Your data are stored for as long as necessary to use the app and to fulfill the intended functions:

• Account data: Until your account is deleted.
• Game data: For the duration of the respective game and for a reasonable period afterward.
• Uploaded media: Until deleted by the user or upon deletion of the respective game.
• Chat messages and comments: For the duration of the respective game.
• Crash reports: According to Firebase retention policies (typically 90 days).

Upon request and within legal requirements, your data may be deleted. Please contact us using the contact details provided above.

7. Security

We employ technical and organizational measures to protect your data against loss, misuse, and unauthorized access:

• All data transmissions occur via encrypted connections (HTTPS/TLS).
• Passwords are stored in encrypted form (Firebase Authentication).
• Firebase Security Rules restrict data access to authorized users.
• Sensitive data are filtered out of crash reports.

8. Use by Minors

Our app is generally recommended for users aged 18 and older. Minors may only use the app under the supervision of an adult. The same data protection provisions apply. We do not knowingly collect personal data from children under 13 years of age.

9. User Rights

You have the following rights regarding your personal data:

• Right of access: You may request information about the data stored about you.
• Right to rectification: You may request the correction of inaccurate data.
• Right to deletion: You may request deletion of your data ("right to be forgotten").
• Right to object: You may object to the processing of your data.
• Data portability: You may request your data in a structured format.
• Withdrawal of consent: You may withdraw granted consents at any time (e.g., by revoking location permissions in device settings).

To exercise these rights or to ask questions regarding data protection, please contact us using the contact details provided above.

You also have the right to lodge a complaint with a data protection supervisory authority.

10. App Permissions

The app uses the following permissions:

• Location (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION): For zone-based gameplay and map display.
• Notifications (POST_NOTIFICATIONS): For push notifications about game events.
• Internet (INTERNET): For communication with Firebase servers.
• Media access (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO): To upload evidence media.
• In-app purchases (BILLING): For handling purchases via Google Play.
• Autostart (RECEIVE_BOOT_COMPLETED): To receive notifications after a device restart.

Permissions are used solely for the purposes indicated. You may revoke permissions at any time in your device settings, although certain functions of the app may then no longer be available.

11. Changes to this Privacy Policy

We reserve the right to adjust this privacy policy as needed to comply with legal requirements or reflect changes in data processing. The current version is available in the app and in the Play Store listing at the specified URL. In the event of material changes, we will inform you within the app.

12. Contact for Privacy Questions

For further questions regarding data protection or to exercise your rights, please contact us at:
Email: siliyon55@gmail.com