Privacy Policy

for the Android app “Twelve Peaks” and the website twelvepeaks.app · Last updated: October 29, 2026

1. Controller

Andi Ehrlich, Büttel 34, 25376 Borsfleth, Germany
Email: support@twelvepeaks.app

2. Summary

• The app needs no account and no sign-in.
• Game progress, statistics, settings and unlocks are stored only locally on your device. I do not receive them.
• The app shows ads from Google AdMob. Google processes certain data for this (see section 4). Where required by law (e.g. in the European Economic Area), the app asks for your consent first.
• I do not use any analytics or tracking tools myself.

3. Data that stays on your device

The app stores on your device: current and finished games, statistics and achievements, daily challenge progress, summit stones, shop unlocks (dice designs, colors, backgrounds) and settings (language, sound, vibration, opponent, difficulty). This data does not leave your device and I do not evaluate it. You can delete it at any time by clearing the app data or uninstalling the app. Summit stones are a purely virtual in-game currency with no monetary value; the app has no purchases with real money.

4. Advertising with Google AdMob

To fund the app, it shows ads (interstitials and optional rewarded videos) through Google AdMob. For users in the EEA and Switzerland the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA.

What data? When ads are loaded and shown, Google may process in particular: IP address (from which an approximate location is derived), your device’s advertising ID, device and software information (e.g. model, operating system, app version), information about interactions with ads, and crash and diagnostic data. I do not receive personal data from this, only aggregated ad reports.

Purposes: serving and measuring ads, fraud and abuse prevention, and analysis and improvement of the ad services.

Legal basis: Where information is stored on or read from your device and consent is required for advertising, the basis is your consent (Art. 6(1)(a) GDPR, section 25(1) TDDDG). The app requests consent on first launch through Google’s consent form (User Messaging Platform) if you are in the EEA, the United Kingdom or Switzerland.

Change or withdraw consent: If the app showed you a consent request, the settings icon at the top right (sliders icon) opens a menu with the entry “Privacy settings” where you can change your choice at any time. You can also reset or delete your advertising ID and turn off personalized ads in your Android settings under “Google → Ads” (on some devices “Privacy → Ads”).

Transfers to third countries: Google may transfer data to the USA and other countries. Google LLC is certified under the EU-US Data Privacy Framework; Google also uses standard contractual clauses.

More information: policies.google.com/privacy and policies.google.com/technologies/partner-sites.

5. App permissions

The app needs internet access (for ads) and the permission to read the advertising ID. It does not request camera, location, contacts, microphone or storage permissions.

6. Google Play

If you install the app through Google Play, Google processes data under its own privacy policy (e.g. account, payment processing, device information). I have no influence on this. In the Play Console I only see aggregated statistics (e.g. installs, crashes), no data of individual users.

7. This website

The website twelvepeaks.app is delivered through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary access data (IP address, date and time, page requested, browser and system information) to deliver the site and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place with the provider. The website itself sets no cookies, uses no analytics or tracking tools, and loads no external fonts or scripts.

If you email me, I process your address and the content of your message to answer your request (Art. 6(1)(b) or (f) GDPR). I delete the data once it is no longer needed and no statutory retention duties apply.

8. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). To do so, write to support@twelvepeaks.app. Since I hold no personal data about you from the app, requests concerning advertising usually concern Google (see section 4).

You also have the right to lodge a complaint with a data protection authority, e.g. the Independent Centre for Privacy Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

9. Children

The app is not directed at children under 13 and is not offered to children specifically.

10. Changes

If the app or the legal situation changes, I will update this policy. The version published here applies.