Privacy Policy
1. Controller
Pascal Ammersbach
Hauptstraße 152
97909 Stadtprozelten, Germany
E-mail: games@madgeeks.de
2. Overview
Hoply is a mobile game you can play without signing in. Your progress (coins, level, skins, records, settings) is stored on your device. Data is only sent to service providers when a feature needs it – ads, friends, your account or purchases – as described below.
3. Advertising (Google AdMob) and consent
Hoply shows ads from Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). On first start we ask for your consent to personalized ads via Google's User Messaging Platform. Google processes your advertising ID, IP address (and an approximate location derived from it), device and app information and ad interactions.
Legal basis: your consent (Art. 6(1)(a) GDPR) for personalized ads; our legitimate interest in funding the free game (Art. 6(1)(f) GDPR) for non-personalized ads and fraud prevention. Change your choice any time under Settings → Privacy & legal → Privacy options. Google may also process data in the USA; Google is certified under the EU-US Data Privacy Framework. More: policies.google.com/privacy.
With an active Hoply+ subscription or the “Remove ads” purchase there are no ads between runs; optional reward videos stay available.
4. Friends, gifts, account and cloud save (Supabase)
For friends, gifts, sign-in and the cloud save we use Supabase (Supabase, Inc.) with servers in Frankfurt am Main (EU). A connection is only made when you open the friends screen or sign in.
| Feature | Data |
|---|---|
| Friends & gifts | random user ID, friend code, your chosen player name, skin, level, record, friend requests and friendships, sent and received gifts |
| Account (sign in with Google or Apple) | e-mail address and ID of your Google or Apple account, time of sign-in |
| Cloud save (account only) | progress: coins, XP, skills, unlocked items, scores, player name, daily bonus and missions |
Only players who accept a friend request become friends. Other players see your name, skin, level and record only once you are friends or when you send them a request.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Signing in with Google or Apple is also subject to their privacy policies.
Deletion: Settings → Account → Delete account deletes your account, profile, friendships, gifts, push tokens and cloud save immediately and permanently. Without an account, e-mail us at the address above (please include your friend code).
5. Push notifications (Firebase Cloud Messaging)
To tell you when a friend sends you a gift, sends you a friend request or accepts yours, we use Firebase Cloud Messaging (Google Ireland Limited) and store a device token, your game language and your push settings at Supabase. Turn pushes off in the app (Settings → Notifications) or in your phone's settings. Legal basis: Art. 6(1)(b) GDPR. Play reminders are scheduled locally on your device, not sent from a server.
6. Crash reports (Firebase Crashlytics)
If the app crashes we send a crash report to Firebase Crashlytics (Google Ireland Limited): error message, device model, OS version, app version and a random installation ID. This helps us fix bugs quickly (legitimate interest, Art. 6(1)(f) GDPR). You can switch this off under Settings → Privacy & legal → Send crash reports.
7. In-app purchases (Google Play / App Store, RevenueCat)
Payments are handled by Google Play or the Apple App Store; we never receive payment details. Purchases and subscriptions are managed with RevenueCat (RevenueCat, Inc., USA): an app user ID (the Supabase user ID for signed-in players), purchased products, purchase times and store receipt information. Legal basis: Art. 6(1)(b) GDPR. Transfers to the USA are based on EU Standard Contractual Clauses.
8. Retention
On-device data stays until you uninstall the app. Supabase data is kept until you delete your account or ask us to delete it. Crash reports are deleted by Crashlytics after 90 days. Purchase data is kept as long as needed for purchases and legal obligations.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time with effect for the future. You can also lodge a complaint with a data protection authority, e.g. the one responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.
10. Children
Hoply is intended for players aged 13 and over.
11. This website
This website uses no cookies, no tracking, no analytics and no embedded third-party content. Fonts and images are served from our own server.
Hosting and server logs: The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Nuremberg data centre; a data processing agreement with Hetzner is in place. When you visit it, the server processes technically necessary data: IP address, date and time, requested page, amount of data transferred, referrer and browser identifier. This serves the secure delivery of the website and the defence against attacks (legitimate interest, Art. 6(1)(f) GDPR). Logs are deleted after 30 days at the latest unless a security incident requires keeping them longer.
Links to app stores: The Google Play and App Store buttons are plain links. Only when you click them do you go to the respective provider, whose privacy policy then applies.
E-mail: If you write to us, we only use your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed.
12. Changes
If the app, the website or the legal requirements change, we update this policy. The version published here applies.