This privacy policy explains how personal data is processed when using the Sort Rush app for Android and iOS (the “App”).
Controller under the EU General Data Protection Regulation (GDPR):
Joculus Studios
Patrick Uhl
Im Frondel 19
55424 Münster-Sarmsheim
Germany
E-mail: hallo@jokerstudios.de
Data protection contact: For any questions about data protection and to exercise your rights, contact us at hallo@jokerstudios.de or by post at the address above. No data protection officer has been appointed because the legal requirements for a mandatory appointment (Art. 37 GDPR, Section 38 German BDSG) are not met.
The App requires no registration, no user account and no sign-in. It does not read contacts, location or the advertising ID. Personal data is processed only in these cases:
The App stores game data and settings exclusively on your device, including:
This data never leaves your device – except for the online features you start yourself (section 8) – and is deleted when you uninstall the App.
If you allow notifications, the App schedules reminders (e.g. for the daily challenge) locally on your device. No push service is used and no device identifier is sent to a server. You can revoke the permission at any time in the App or in the system settings.
Only with your consent. On first launch the App asks whether it may send usage data. Declining is as easy as agreeing, and the game is fully playable either way. Until you agree, collection is switched off and nothing is sent.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Purpose: We want to understand how the game is used in order to improve it – for example which levels are too hard or too easy, which game modes are popular and whether players return.
Data processed:
What does not happen: The advertising ID is not read (the App does not request the permission for it). Advertising signals are switched off in the App; the data is not used for advertising or personalised ads and is not linked to Google accounts. Your display name, profile picture or other input is never sent.
Legal basis: your consent (Art. 6(1)(a) GDPR; Section 25(1) of the German TDDDG for storing the identifier on your device).
Withdrawal: You can withdraw your consent at any time with effect for the future – in the App under Settings → Privacy → Share usage statistics. Collection stops immediately and the app instance ID on your device is reset.
Retention: Event data at the level of individual app instances is deleted after the retention period configured in Google Analytics, at the latest after 14 months. Only aggregated reports without personal reference remain afterwards (e.g. the number of daily active users).
Error reports are optional and switched off by default. Technical error reports are sent to Google Firebase Crashlytics only with your separate consent (provider: Google, see section 5). You can change this choice at any time under Settings → Privacy → Error reports.
Data processed: time and course of the error (stack trace, the last screen opened), device model, operating system and app version, technical device state (e.g. free memory, orientation) and a randomly generated Crashlytics installation ID. No game data, no names and no advertising ID are transmitted; the IP address is technically required for the transmission.
Voluntary consent: Error reports can be chosen independently of usage statistics. Declining does not affect play. Withdrawal stops future transmission; unsent reports are queued for deletion.
Retention: Crashlytics deletes crash reports after 90 days.
A data processing agreement is in place with Google for Firebase. Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023. More information: firebase.google.com/support/privacy and policies.google.com/privacy.
Between rounds, the App occasionally shows advertising for the developer’s own products. No ad network is integrated: no Google AdMob, no advertising ID, no real-time bidding, no personalised advertising. Which ad you see depends solely on a fixed configuration, not on you or your behaviour.
The ad content is fetched from two external services when needed:
raw.githubusercontent.comcdn.jsdelivr.netAs with any request to a web address, these requests transmit your device’s IP address and technical details such as the time and device type to the respective provider. These providers may process the data in third countries. We ourselves neither collect, store nor evaluate this data. Without an internet connection, the App shows a locally stored ad and retrieves nothing.
If you tap “Visit website” in an ad, the target site opens in a browser window. From that point on, the privacy policy of that provider applies.
The legal basis is our legitimate interest in promoting our own products and in delivering the content (Art. 6(1)(f) GDPR). Privacy notices of the providers: GitHub · jsDelivr
Online duel, quick match, duet, ghost race, weekly leaderboard and progress transfer use the Google Firebase Realtime Database (servers in Belgium, europe-west1) and anonymous sign-in via Firebase Authentication. You start these features yourself. No account, email address or password is needed.
Data processed:
Purpose and legal basis: providing the online feature you choose (Art. 6(1)(b) GDPR).
Retention: rooms can be played for 30 minutes, ghosts for 7 days, progress backups for 90 days (they are deleted as soon as they are loaded on the new device); leaderboard entries apply to their week. We delete expired entries over time and immediately on request (see Deleting your data).
The information on data processing agreements and third countries in sections 5 and 6 applies.
The App uses network access (self-promotion and – with consent – crash reports and usage statistics), vibration for haptic feedback and – if you allow it – notifications for local reminders. On Android, so that scheduled reminders survive a restart and data can be sent in batches, the App may react to the device starting up and briefly keep the device awake. You choose a profile picture via the system image picker; the App only receives the selected image. No permissions for camera, microphone, location, contacts or the advertising ID are requested.
The App is offered through Google Play for Android and the Apple App Store for iOS. When downloading and updating, the relevant store provider processes data according to its privacy policy: Google and Apple.
The App is intended for a general audience. Usage statistics are voluntary; persons under 16 should only consent with the approval of a parent or guardian (Art. 8 GDPR). The full game remains available without consent.
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw consent at any time with effect for the future; the lawfulness of processing carried out before withdrawal remains unaffected. Because statistics and crash reports contain only random identifiers and no names, we generally cannot attribute data to a person (Art. 11 GDPR). The simplest way to stop usage statistics is Settings → Privacy. For any questions, you can reach us at the e-mail address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), in particular the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (responsible for the controller) or the authority at your place of residence. No automated decision-making, including profiling, takes place.
On your device: uninstall the App or clear its data in the Android settings.
Usage statistics: turn them off under Settings → Privacy; the identifier on your device is reset. Google deletes statistics data after 14 months at the latest and crash reports after 90 days.
Online data: email hallo@jokerstudios.de with the subject “Sort Rush – delete my data” and include your display name and, if available, your room, ghost or transfer code. We delete the related entries (leaderboard, rooms, ghosts, progress backup) within 30 days and confirm by email.
If the App gains new functionality, this policy will be updated. The current version is always available at this URL.