Privacy policy

In short

Cogwisp is an offline puzzle game with no account of its own, no server of its own, no ads and no tracking or analytics of its own. Your progress stays on your device. To buy the full game the Android app uses Google Play Billing (the Windows version is bought directly in the Microsoft Store); Google processes data in the process – including technical diagnostic data that the billing library sends to Google. This website sets no cookies and uses no trackers.

Controller

The app “Cogwisp”: local data

No account, no server of our own: The app’s own code contains no network client and no advertising or analytics SDK. We do not receive any data about you from the app.

Local storage: Progress, language setting and unfinished puzzles are stored only locally in the app’s storage on your device. The full-game unlock is also recorded locally; the app stores no payment data there. Android backup is disabled for the app.

Permissions: The app requests no access to camera, microphone, contacts, storage, location, advertising ID or notifications. Declared are the Google Play billing permission and – through the included Google libraries – internet access and network state.

Deleting: “Clear storage” in Android settings or uninstalling removes all local app data. This does not cancel a purchase and does not delete data already sent to Google. After reinstalling you can restore your purchase.

Buying the full game via Google Play

Android app: the prologue is free. The full game is unlocked with a single in-app purchase through Google Play Billing. Google handles payment and the purchase; we receive no payment or card data. The app processes the product ID, purchase status and a purchase token to acknowledge the purchase with Google Play and store the unlock. Google processes purchase, payment and account data under its own responsibility according to the Google Privacy Policy.

Technical diagnostic data: The Google Play Billing library included in the app sends technical diagnostic data to Google (endpoint firebaselogging.googleapis.com). Observed fields include status or error messages of the billing function, app package name, app and library version, device model, manufacturer, OS version/build, language and country, time zone, network type and mobile country/network code (MCC/MNC). This data is first cached locally and sent when a connection is available. We were not able to decode every field of this transmission, so we cannot rule out that it contains further technical identifiers.

When this happens: Without a saved purchase, the billing library stays inactive until you open the purchase page or restore a purchase. If a purchase is already saved or a purchase is still pending, the library is activated at app start to reconcile the purchase status with Google Play (e.g. for refunds); it then stays active for the session and may send data afterwards. The library offers no way to switch off this diagnostic transmission. We do not receive this diagnostic data ourselves.

The legal basis is the performance of the purchase contract or pre-contractual steps (Art. 6(1)(b) GDPR) and our legitimate interest in working purchase handling (Art. 6(1)(f) GDPR). Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework.

Google Play in general: Download, installation and updates take place through Google Play; Google processes data according to its own privacy policy.

Windows version (Microsoft Store)

The Windows version is bought once as the full game through the Microsoft Store. It contains no Google libraries and no in-app purchase, and it does not open any network connections itself. Progress and settings are stored only locally in your Windows user profile (AppData). Uninstalling the app makes Windows delete this data too.

Purchase, payment, download, licence checks and updates are handled by Microsoft, which processes data under its own responsibility according to the Microsoft Privacy Statement. We receive no personal customer data from Microsoft, only aggregated sales figures.

This website

This website uses no cookies, no trackers, no analytics tools and loads no external scripts or fonts.

Hosting: The website is served via GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit, GitHub processes technically necessary data such as your IP address, date and time and the requested page (server logs) to deliver and secure the website. The legal basis is our legitimate interest in secure and reliable delivery (Art. 6(1)(f) GDPR). Data may be transferred to the USA; GitHub is certified under the EU-US Data Privacy Framework. Details: GitHub Privacy Statement.

Contacting us by email

If you write to us, we use your email address and the content only to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that purpose.

Your rights

Under Art. 15–21 GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Thuringian State Commissioner for Data Protection and Freedom of Information. Since the app sends no data to us, we hold no data about you apart from emails. For data processed by Google, please contact Google.