Privacy Policy for LaneLume
1. Controller and principle
This policy applies to the LaneLume app, the website lanelume.punktdev.com and these legal pages on punktdev.com. The controller is Real Movement Analytics GmbH, Kleines Everstal 18d, 44388 Dortmund, Germany (legal notice). Contact: [email protected].
LaneLume works without an account. The app contains no ads and no third-party analytics, tracking or crash reporting services. We do not create usage profiles and make no automated decisions within the meaning of Art. 22 GDPR. The game is suitable for all ages but is not specifically directed at children under 13.
2. Your progress stays on your device
The app stores your best score and your settings for graphics quality, safe mode, music, sound effects and mute only on your device.
This storage is necessary for the game (Section 25(2) No. 2 TDDDG; where personal data is involved, Art. 6(1)(b) GDPR). The data remains until you clear the app data or uninstall the app. Depending on your device settings, operating system backups (iCloud or Google) may contain a copy; these are managed by Apple or Google, not by us.
3. Internet connection
LaneLume does not connect to any server of ours. Graphics, music and sounds are included in the app, and the game works entirely without internet. The app contains no purchases and no ads.
4. App Store, Google Play
You get LaneLume from Apple's App Store or Google Play. Apple and Google process account, download and, where applicable, payment data as independent controllers under their privacy policy (Apple) and privacy policy (Google). For users in the EU these are Apple Distribution International Ltd. and Google Ireland Ltd., both in Ireland. The stores provide us with aggregated usage and sales figures. For purchases, individual order and transaction information may also be available. Depending on your permissions and settings, the platforms may provide technical crash reports. This does not give us full card or bank details.
We use personal order, transaction and crash information from the stores solely to handle purchase and support questions. The legal basis is Art. 6(1)(b) GDPR for contract-related matters and otherwise Art. 6(1)(f) GDPR; our legitimate interest is handling support requests. We delete our copies after the case is closed, once they are no longer needed to establish or defend legal claims. Where statutory retention obligations apply, we retain the required data under Art. 6(1)(c) GDPR until those obligations expire.
5. Website
The website lanelume.punktdev.com is delivered via Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. With every request, Cloudflare processes your IP address and technical request data such as time, requested address, browser information and response status in order to deliver the page and protect it against disruption and abuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and reliable operation. We have not enabled access logging (Workers Logs) for this website, and we do not analyse access logs. Cloudflare also processes technical operating data under its privacy policy.
The website lanelume.punktdev.com sets no cookies, stores nothing in your browser and uses no analytics, tracking or advertising services. Fonts and images are served from our own server. Links to Google Play include the source tag utm_source=lanelume.punktdev.com so that Google can show us in aggregate how many visits come from this website. If you open an external link, for example to a store, the privacy policy of that provider applies there.
These legal pages are hosted on punktdev.com, which is also delivered via Cloudflare. There the page reads any light/dark preference stored in your browser's local storage so that your chosen appearance is kept (Section 25(2) No. 2 TDDDG). Nothing is transmitted to us.
6. Contact by email
If you email us, for example at [email protected], the message arrives in our company mailbox at Microsoft 365 (Microsoft Ireland Operations Ltd., Ireland). Microsoft stores the email including content and attachments as our processor under a data processing agreement (Art. 28 GDPR), generally in data centres in the EU. For transfers to Microsoft Corporation in the USA, for example for support or security, Microsoft relies on the EU-US Data Privacy Framework and EU Standard Contractual Clauses.
We process your address, the content and any information you choose to provide in order to answer your request. The legal basis is Art. 6(1)(b) GDPR for contract-related requests and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering requests. We delete the message once it is no longer needed for follow-up questions, legal defence or statutory retention obligations. Providing data is voluntary; without a reply address we cannot answer.
7. Recipients and processing outside the EU
We use these service providers for the purposes described:
- Cloudflare, Inc. (USA): hosting of the website as our processor under a data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; EU Standard Contractual Clauses apply in addition. Details are in the Cloudflare DPA.
- Microsoft Ireland Operations Ltd. (Ireland): Microsoft 365, our email mailbox, as our processor under a data processing agreement (Art. 28 GDPR). Data is generally stored in the EU; transfers to Microsoft Corporation (USA) are covered by the EU-US Data Privacy Framework and EU Standard Contractual Clauses.
Apple and Google are independently responsible for the App Store and Google Play (section 4). You can request a copy of the safeguards at [email protected].
8. Your rights
Subject to the statutory requirements, you have the right of access, rectification, erasure, restriction of processing and data portability, and the right to withdraw any consent with effect for the future.
Objection: Where we process personal data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation.
You have the right to lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.
Because your game progress is stored only on your device, we cannot view it, delete it for you or hand it over. You can do that yourself in the app or on your device.
9. Changes and language versions
We update this policy when the app, the website or the law changes. The version published here applies. This is a translation of the German version, which prevails in case of discrepancies.