Privacy Policy for the Halma App
1. General information
Protecting your personal data matters to us. We treat your personal data confidentially and in accordance with statutory data protection rules (in particular the GDPR) and this privacy policy.
2. Controller
The controller for data processing in this app is:
Sören Rauert
3. Data collection and processing
a) Use of the app
Using our app is generally possible without providing personal data. One exception is described in section 5 d): if Play Games Services are set up on your device, your player ID there is used for leaderboards and achievements.
b) Technical data
When the app is downloaded and used, information may be collected automatically by the app store (for example Google Play) and by the app itself. This includes in particular:
- device type and model
- operating system
- IP address
- time of access
- app version
This data is used to ensure technical operation and to improve the app.
4. Internet connection
The app may use an internet connection to provide content or enable functions. Technically necessary data may be transmitted in the process.
5. Use of third parties
a) Google Play Services
This app uses services provided by Google. The provider is:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Further information:
https://policies.google.com/privacy
b) Advertising
This app currently displays no advertising and contains no advertising SDK.
Should advertising be introduced in a future version, personal data may be processed by the advertising provider (for example Google AdMob), in particular:
device identifiers
IP address
usage behaviour
The purpose would then be to display personalised or non-personalised advertising. In that case, this privacy policy will be updated before release and the Google Play data safety declaration will be adjusted accordingly.
c) Analytics
This app uses Google Firebase Analytics, an analytics service provided by Google, to understand how the app is used and to improve it.
Firebase Analytics is activated only after your voluntary, explicit consent. Without consent, no analytics data is collected through Firebase Analytics. A refusal is not transmitted to Firebase.
Once consent has been given, the following data in particular may be processed:
- technical information about the device and operating system;
- app version as well as information about app and session usage;
- screen or class information;
- an app instance identifier;
- approximate location information that can be derived from the IP address;
- the following events, deliberately limited by Halma:
- starting, resuming and finishing a match, each with the number of players, the difficulty, the result, the hardcore mode and the selected game settings (computer opponent speed, target highlighting, vibration);
- opening, solving and abandoning the daily puzzle, each with the number of moves used, the distance from the shortest solution and the points achieved, but without the date, the puzzle number, the board position or the sequence of moves;
- reaching a milestone in the daily puzzles;
- technical states of the review dialog;
- a return to the app after a longer absence, provided a new app version is present, with the length of the absence as a range (for example "15 to 30 days") together with the previous and the current app version number;
- the consent you granted, including the consent version used.
All of these characteristics are transmitted in buckets only, never as raw values and never as precise timestamps.
No names, e-mail addresses, moves, board positions, free text, accounts or self-generated persistent user identifiers are transmitted to Firebase Analytics.
Collection of the Android advertising ID is disabled and the corresponding permission has been removed from the app. Signals for personalised advertising are disabled as well.
You can withdraw your consent at any time in the app settings with effect for the future. Withdrawal disables analytics collection immediately. Enabling it again requires consent once more.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google companies or service providers outside the European Economic Area. Further information:
https://firebase.google.com/support/privacy
https://policies.google.com/privacy
d) Google Play Games Services (leaderboards and achievements)
The daily puzzles are connected to Google Play Games Services. Two leaderboards (fewest moves of the day, points of the week) and four achievements are kept there.
When the app starts, it silently checks whether a Play Games player identity is already set up on your device. Halma shows no sign-in screen for this, never asks for credentials and does not create an account. If no identity exists, or if automatic sign-in is switched off in your Play Games settings, the entry points for leaderboards and achievements do not appear in the app at all; the app remains fully playable.
If a player identity exists, the following is transmitted to Google: your Play Games player ID together with the display name and profile picture you chose there; the number of moves you needed for today’s daily puzzle, and your point total for the current puzzle week; the unlocking of any of the four achievements.
Not transmitted: the puzzle number, the date, the board position, your sequence of moves, and anything from playing against the computer. Puzzle days played late do not count towards the leaderboards and are not transmitted.
Whether your entry is visible to other players is determined solely by your own Play Games profile visibility setting. You manage that setting with Google, not in this app.
The legal basis is Art. 6(1)(b) GDPR: leaderboards and achievements are part of the feature you use when playing the daily puzzles. You can stop the transmission at any time by switching off automatic sign-in in the Play Games settings of your Google account.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google companies or service providers outside the European Economic Area. Further information: https://policies.google.com/privacy
The daily puzzles are connected to Google Play Games Services. Two leaderboards (fewest moves of the day, points of the week) and four achievements are kept there.
When the app starts, it silently checks whether a Play Games player identity is already set up on your device. Halma shows no sign-in screen for this, never asks for credentials and does not create an account. If no identity exists, or if automatic sign-in is switched off in your Play Games settings, the entry points for leaderboards and achievements do not appear in the app at all; the app remains fully playable.
If a player identity exists, the following is transmitted to Google: your Play Games player ID together with the display name and profile picture you chose there; the number of moves you needed for today’s daily puzzle, and your point total for the current puzzle week; the unlocking of any of the four achievements.
Not transmitted: the puzzle number, the date, the board position, your sequence of moves, and anything from playing against the computer. Puzzle days played late do not count towards the leaderboards and are not transmitted.
Whether your entry is visible to other players is determined solely by your own Play Games profile visibility setting. You manage that setting with Google, not in this app.
The legal basis is Art. 6(1)(b) GDPR: leaderboards and achievements are part of the feature you use when playing the daily puzzles. You can stop the transmission at any time by switching off automatic sign-in in the Play Games settings of your Google account.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google companies or service providers outside the European Economic Area. Further information: https://policies.google.com/privacy
The daily puzzles are connected to Google Play Games Services. Two leaderboards (fewest moves of the day, points of the week) and four achievements are kept there.
When the app starts, it silently checks whether a Play Games player identity is already set up on your device. Halma shows no sign-in screen for this, never asks for credentials and does not create an account. If no identity exists, or if automatic sign-in is switched off in your Play Games settings, the entry points for leaderboards and achievements do not appear in the app at all; the app remains fully playable.
If a player identity exists, the following is transmitted to Google: your Play Games player ID together with the display name and profile picture you chose there; the number of moves you needed for today’s daily puzzle, and your point total for the current puzzle week; the unlocking of any of the four achievements.
Not transmitted: the puzzle number, the date, the board position, your sequence of moves, and anything from playing against the computer. Puzzle days played late do not count towards the leaderboards and are not transmitted.
Whether your entry is visible to other players is determined solely by your own Play Games profile visibility setting. You manage that setting with Google, not in this app.
The legal basis is Art. 6(1)(b) GDPR: leaderboards and achievements are part of the feature you use when playing the daily puzzles. You can stop the transmission at any time by switching off automatic sign-in in the Play Games settings of your Google account.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google companies or service providers outside the European Economic Area. Further information: https://policies.google.com/privacy
6. Disclosure of data
Personal data is disclosed only where this is permitted by law or necessary to provide the app (for example to service providers).
7. Storage period
Analytics and event data collected through Firebase Analytics is retained in Google Analytics for two months. Extension of this period through new user activity is disabled. Otherwise, personal data is processed only for as long as necessary for the respective purpose or as required by statutory retention obligations. Leaderboard entries and unlocked achievements are stored by Google as part of Play Games Services. The daily leaderboard resets daily, the weekly leaderboard weekly. Unlocked achievements stay linked to your Play Games profile for as long as it exists; you can delete game data in your Play Games settings.
8. Your rights
You have the right at any time to:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object (Art. 21 GDPR)
You can contact us at any time for this purpose.
9. Withdrawal of your consent
Where processing is based on your consent, you can withdraw it at any time with effect for the future in the app settings. Withdrawal does not affect the lawfulness of processing up to the point of withdrawal.
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
11. Data security
We use technical and organisational security measures to protect your data.
12. Changes to this privacy policy
We reserve the right to amend this privacy policy at any time.
13. Contact
For questions about data protection, please contact us at:
This translation is provided for convenience. The German version is authoritative.