App & website

Privacy policy

Deutsche Fassung →

How Harmotwine and this website process information, and the choices available to you.

Last updated: 8 November 2026. Applies to the Harmotwine app (de.lnck.harmotwine) and this website.

1. Controller

2. Progress and settings

The app stores progress, completed puzzles, sound sculptures, preferences, consent decisions and unlocks locally. This is necessary to provide the game and remember your choices (Article 6(1)(b) GDPR; necessary device storage under section 25(2)(2) German TDDDG).

We do not operate a game-save server or our own cloud sync. Operating-system backups depend on your device settings and provider. The app requires no separate account and does not request access to contacts, camera, microphone or precise device location.

3. Advertising and consent (Google AdMob / UMP)

The app uses Google AdMob for optional rewarded videos. The EEA provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC in the United States may also process information.

At app launch, Google's User Messaging Platform checks consent status and presents a privacy form when required. This connects to Google and processes technical connection data such as IP address and app, device and consent information to manage and respect privacy choices. The legal basis is Article 6(1)(c) GDPR where legally required, otherwise Article 6(1)(f), our interest in operating the app lawfully. Necessary storage of the decision is based on section 25(2)(2) TDDDG.

The advertising SDK is initialized only when you choose to load a video and the consent check is complete. The app requests non-personalized ads. These can still process IP address and approximate region, device and app identifiers, technical device information, ad interactions, diagnostic and performance information to deliver and measure ads, diagnose problems and prevent fraud. Non-personalized does not mean no data is processed.

Where consent is required, the relevant processing and non-essential device access rely on Article 6(1)(a) GDPR and section 25(1) TDDDG. The Google form explains your options and participating providers. Change your choices in the app's advertising privacy settings. Withdrawal applies to future processing. The first 24 levels do not require rewarded videos; Pro provides an alternative for later unlocks.

The current release configuration uses test ads. Test ads and consent checks can still connect to Google. See Google's privacy policy and Google partner services information.

4. In-app purchases

Pro is a one-time purchase through Apple App Store or Google Play. The store processes payment and store account information. We do not receive full payment details. The app processes product and purchase or transaction identifiers, purchase status and entitlement to verify, unlock and restore purchases (Article 6(1)(b) GDPR). We do not operate a receipt server. Stores retain transaction data under their own legal obligations and retention policies. See Apple's privacy information and Google's privacy policy.

5. Optional usage analytics

Firebase Analytics is prepared but disabled in the current release configuration; no Firebase analytics events are currently sent. Before activation, this policy and store disclosures will be updated. An enabled version is intended to offer analytics only after separate, voluntary consent. Advertising consent does not replace analytics consent.

6. Website and Cloudflare

Cloudflare Pages hosts this website. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes technical request data such as IP address, time, requested resource, HTTP status, browser/device details and referring page where available, to deliver and protect the website. This is based on Article 6(1)(f) GDPR, our legitimate interest in secure, reliable hosting.

We include no web analytics, advertising, remotely loaded fonts or social plugins. Our website code sets no cookies and stores no browser data. Hosting security measures may require additional processing in individual cases. See Cloudflare's privacy policy.

7. Email support

When you email us, we process your email address, message and any voluntarily supplied information to respond. The legal basis is Article 6(1)(b) GDPR for contract-related requests, otherwise Article 6(1)(f), our interest in answering enquiries. Privacy-rights requests rely on Article 6(1)(c). The email providers involved deliver and store the communication.

8. Recipients and international processing

Depending on the feature used, recipients include Cloudflare for hosting, Google for consent and ads, Apple or Google for purchases, and email service providers for correspondence. We do not sell your data. Disclosure may also be necessary to meet legal duties.

These services may process data outside the EU/EEA, including in the US. Cloudflare explains transfer safeguards and EU standard contractual clauses in its Data Processing Addendum. Google explains its transfer frameworks. Where applicable to the recipient, safeguards include adequacy decisions such as the EU-US Data Privacy Framework or standard contractual clauses. Contact us for information about safeguards.

9. Retention and deletion

Local progress and settings remain until you delete app data or remove the app together with its data. Backups may retain copies that must be managed separately. We cannot remotely delete your local progress.

Support correspondence is retained for as long as needed to resolve and document your request, unless legal retention duties or the establishment or defence of claims require longer storage; it is then deleted. Technical hosting data and information held by Google or the stores follow the respective service-specific retention criteria for operations, security, consent records or legal duties described in the linked policies. Uninstalling the app does not automatically erase information already held by these providers.

10. Your rights

Subject to GDPR requirements, you have rights of access, rectification, erasure, restriction and portability. You may withdraw consent for future processing. You may object to legitimate-interest processing on grounds relating to your particular situation (Article 21 GDPR), and object to direct marketing at any time.

Contact support@harmotwine.app and describe the relevant interaction. We request only information necessary to locate the data and, when needed, verify identity. Without an account, we cannot associate local game data with you. You may complain to a supervisory authority, including where you live. Our competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA).

11. Voluntary provision and updates

We do not use automated decision-making with legal or similarly significant effects. No personal profile or account is needed to play. Contact details are required only if you want a response; necessary technical data is processed when you use the relevant online services. We update this policy when features or services change.