Data protection

1. Controller

Proprietor: Greta Hoffmann
Telephone: +49 176 43878634
Email: greta@greatergames.net

2. Principle of data minimisation

O-Nio! does not require an account and we do not ask players for their name, email address, postal address, advertising identifier, device identifier, or precise location. We process only the limited technical and gameplay information described below. We do not use this information for advertising, profiling across apps or websites, or automated decisions.

3. Website

This website does not use analytics or advertising cookies. When the website is requested, the hosting system necessarily receives technical connection data such as the IP address, date and time, requested file, transferred data volume, browser information, and access status. This processing is necessary to deliver the website and maintain its security. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. Server logs, where generated, are deleted or anonymised when they are no longer required for security and operation.

Instagram and Discord are linked but not embedded. Data is transferred to these providers only after you choose to follow a link. Their own privacy notices then apply.

4. Pseudonymous retention measurement in the game

When the game is first opened, it creates a random, app-specific identifier. This identifier is not a device, advertising, account, or cookie identifier and cannot be used by us to track a player in other apps or websites. It is linked only with limited session information needed to understand retention: session timestamps or duration, whether the same installation returns, and the interval between sessions.

We use this information solely to understand how long installations are used and when players stop returning, so that we can identify usability or game-design problems and improve O-Nio!. We do not attempt to identify individual players. The legal basis is our legitimate interest in measuring and improving the game in a privacy-preserving manner under Article 6(1)(f) GDPR.

The identifier makes the information pseudonymous rather than anonymous while it remains linkable to sessions. Reports and statistics are aggregated wherever possible. The data is hosted on servers operated for us by netcup GmbH in Karlsruhe, Germany.

Pseudonymous gameplay records are deleted no later than 12 months after the installation’s last recorded activity. Before deletion, information needed for long-term statistical comparisons may be irreversibly aggregated. Aggregated statistics that can no longer be linked to an installation or individual may be retained indefinitely.

5. Crash and stability diagnostics with Sentry

We use Sentry to detect crashes, diagnose technical errors, and assess the compatibility, performance, and stability of the current game version. Depending on the error and platform, a diagnostic report may contain the time of the error, app and operating-system version, device type, technical stack traces, and contextual technical events immediately preceding the error. We configure Sentry to avoid sending names, email addresses, advertising identifiers, or other content intended to identify a player.

Technical connection data, including an IP address, may necessarily be processed when a diagnostic report is transmitted even where it is not included in the stored report. The legal basis is our legitimate interest in providing a stable and secure game and correcting errors under Article 6(1)(f) GDPR.

Sentry is provided by Functional Software, Inc., United States, acting as a processor. Our Sentry organisation uses the European Union data-storage region. Under Sentry’s current Developer plan, error data is retained for 30 days and is then deleted automatically. Insofar as data is nevertheless processed in the United States or another third country, the transfer is protected through applicable safeguards, including the EU–U.S. Data Privacy Framework where applicable and the European Commission’s Standard Contractual Clauses. Further information is available in Sentry’s privacy notice, data processing addendum, and retention documentation.

6. Recipients

Gameplay-retention data is processed by Greater Games e.U. and netcup GmbH as the hosting provider operating the telemetry infrastructure on our behalf. Crash and stability reports are processed by Sentry as described above. We do not sell data and do not disclose it to advertising networks.

7. Storage and deletion

Sentry error data is retained for 30 days under the current Developer plan. Pseudonymous gameplay records are deleted no later than 12 months after the installation’s last recorded activity. Information may be retained longer only after it has been irreversibly aggregated so that it can no longer be linked to an installation or individual. Mandatory statutory retention duties remain unaffected.

8. Your rights

Where the legal requirements are met, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection under Articles 15–21 GDPR. In particular, you may object at any time to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation.

Because we do not know the identity of a player, we may need the random application identifier to locate gameplay data. Without information that allows us to associate a record with you, Article 11 GDPR may limit our ability to fulfil a request relating to a specific record. Contact us at greta@greatergames.net.

9. Right to complain

You may lodge a complaint with a data-protection supervisory authority. The supervisory authority responsible for our establishment is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. Information and the complaint form are available at ldi.nrw.de/beschwerde.

10. Changes

We may update this notice when the game, its technical services, or legal requirements change. The current version and its update date will remain available on this page.