Power PopIt

What this is about

Power PopIt is a toy for children. All game data — settings, statistics, and the player profile — is stored exclusively locally on the device. There are no accounts, no sign-in, no ads, no in-app purchases, and no text field anywhere: the nickname is rolled by dice, never typed. Exactly two features transmit data: the optional PopLiga leaderboard (off by default, can only be enabled behind a parent gate) and an anonymous usage statistic (can be switched off with a single tap at any time).

Controller

The controller responsible for data processing is: Robware, owner Robin Wichmann, Hauptstr. 58c, 21640 Bliedersdorf, Germany. E-mail: kontakt@robware.de

Privacy contact

For privacy inquiries about this app, you can reach us at kontakt@robware.de.

Settings and game statistics

The selected figure and color world, the sound and haptics switches, and the game statistics (total number of pops, completed pictures, highest completed level) are stored exclusively locally on the device and are never transmitted.

Player profile

Points, best scores per level and figure, the longest streak, earned badges, and the numeric seed from which the app generates the rolled nickname are also stored locally only. No name is ever stored as text.

Legal basis and deletion

Processing is carried out to provide the app's features on the basis of Art. 6(1)(b) GDPR. Deleting the app from the device also deletes all of this data.

Off by default

The PopLiga is switched off as shipped. As long as it is off, nothing is transmitted — nothing is even queued for later sending. It can only be enabled in the settings behind a parent gate (a two-second long press plus a math problem). It can be switched off again at any time; doing so deletes the locally queued round, the weekly identity, and cached leaderboards.

What data is transmitted

With the PopLiga enabled, the app sends to our server (popit.dudehub.de, located in Germany): an anonymous device credential generated by Apple via App Attest (a key ID) that only proves the request comes from a genuine copy of the app on a genuine device; the numeric seed of the rolled nickname (the server derives a name number from it itself — free text is never transmitted and structurally cannot be stored in the database); and the play events of one round (which bubble was popped at which moment). The server recalculates the score from these events itself — this is the only way to detect fabricated scores. Technically necessary connection data (e.g. IP address) is also incurred; it is neither stored nor analyzed.

What the server stores

Only the anonymous key ID, the derived name number, the best score of the week, and awarded weekly badges are stored. There are no accounts, no e-mail addresses, no location data, and no identifiers that we or Apple could link to a person.

Legal basis

Transmission is based on the consent given by a parent or guardian via the parent gate (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time with effect for the future by switching the PopLiga off.

What is sent

To learn which figures and color worlds are actually being played, the app sends a deliberately tiny, anonymous statistic via TelemetryDeck (TelemetryDeck GmbH, Berlin; processing on servers in the EU). At the end of a round, it transmits which figure and color world were played and whether it was a free round or a level; for completed levels, the band of ten (e.g. "11-20"), never the exact level number; and whether the PopLiga switch was turned on or off, plus the start of a session. No advertising ID (IDFA), no device identifier, no nickname, no scores, no play times — a blocklist in the app additionally filters such values out technically.

Opting out without hurdles

The statistic is active by default and can be switched off in the settings with a single tap — without a parent gate and with immediate effect: after that, no signal leaves the device. The legal basis is our legitimate interest in anonymous, aggregated usage analysis (Art. 6(1)(f) GDPR); the individual reports cannot be linked to any child or any device.

• No ads and no in-app purchases.
• No ad networks, no crash reporting, no tracking across other apps.
• No accounts, no sign-in, no contacts, no location data.
• No free text: nicknames are exclusively rolled by dice, never typed.
• With the PopLiga off (the default) and usage statistics off, the app sends nothing. Only links in the imprint and app info open the browser.

Power PopIt is designed as a "Made for Kids" app. No names, contact details, or other personal information are collected — neither offline nor with the PopLiga enabled: there, only an anonymous device credential, a rolled nickname seed, and the play events of one round travel. Parents or guardians are responsible for enabling the PopLiga and for withdrawing that approval; both happen via the parent gate in the settings.

All local data remains on the device until the app is deleted. Entries stored on the PopLiga server (key ID, name number, weekly best scores, badges) remain stored for as long as the PopLiga is used. Since this data is anonymous, neither we nor Apple can link it to a person. Switching the PopLiga off ends transmission immediately; questions about deleting server entries are answered at kontakt@robware.de.

Under the GDPR you have the right of access to the personal data concerning you (Art. 15), the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

We answer questions about privacy in Power PopIt at kontakt@robware.de.