Privacy policy

1. Controller

marcel@studio-bubela.com

Phone: +49 15679 833349

2. Bruno Blast on your device

Bruno Blast works offline, without an account, ads, tracking or its own analytics or crash-reporting services. The game does not connect to the internet on its own and sends no gameplay data to me or other providers. It does not ask for access to location, camera, microphone, contacts or photos.

The app stores the following locally:

• your best score: points and level reached,
• settings for music, effects, volume, vibration and “Reduce motion and flashes”,
• learning progress: explanations already shown and how often you have used a world’s special feature.

These values support the game’s functions and remain on your device until changed or deleted. I cannot access them. Like other app data, they may be included in an iCloud or computer backup you have configured. Deleting the app removes its local app data; existing backups are not automatically deleted.

Where these local values constitute personal data, processing is necessary to provide the requested game features under Art. 6(1)(b) GDPR. Necessary storage on your device falls under section 25(2)(2) TDDDG (Germany).

3. App Store and Apple

Apple handles purchases, downloads and any refunds as a controller in its own right. Apple’s privacy policy applies. Apple provides me with aggregated figures, such as download numbers. I receive optional app crash reports and usage statistics through Apple if you have allowed analytics to be shared with app developers on your device. You can change this under Settings › Privacy & Security › Analytics & Improvements.

4. Links from the game

The game opens your browser or email app only when you tap a website link or “Write an email”. The following information applies when you visit this website. Other services have their own privacy policies. Opening an email draft does not send a message.

5. Hosting this website

This website is served through Cloudflare Pages. The service provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Cloudflare processes the technical data needed to deliver and secure the website, including your IP address, requested URL, time, browser and device information, and technical status data. The legal basis for processing arranged by me is Art. 6(1)(f) GDPR; my legitimate interest is a reliable, secure website.

Cloudflare operates a global network; processing exclusively within the EU is not guaranteed. Processing on my behalf is governed by Cloudflare’s data processing addendum, which includes EU standard contractual clauses for applicable international transfers. Cloudflare also acts as a controller for certain network and security data. See Cloudflare’s privacy policy.

I do not maintain a visitor database or export access logs. Technical data is processed as long as required for delivery, troubleshooting and security; security incidents or legal duties may require longer retention. Platform retention depends on the Cloudflare service and its settings.

6. Cookies and embedded content

The page code supplied by me sets no cookies and does not use local storage or similar browser storage to recognise visitors. It contains no advertising or analytics scripts, embedded video, external fonts, accounts or contact forms. Images and styles are served with the website.

7. Email and telephone enquiries

If you write to brunoblast@studio-bubela.com or marcel@studio-bubela.com, I process your email address, name if supplied, message and any voluntary attachments to respond to your enquiry. An email link only opens your email app; it does not send a message. Device information and saved game data are not attached automatically.

The mailboxes use Apple iCloud+ with a custom domain. The iCloud provider for Germany is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple processes messages and technical data for delivery, storage and security. Apple companies and service providers outside the EEA may process data. Apple describes the safeguards for applicable transfers, including standard contractual clauses, in its privacy policy. The iCloud terms also apply.

The legal basis is Art. 6(1)(b) GDPR for contractual enquiries and Art. 6(1)(f) GDPR for other enquiries; my legitimate interest is answering questions and providing support. Your email address is needed to reply. Other information is voluntary.

I delete messages once the enquiry is resolved and the correspondence is no longer needed. Ongoing claims may require retention until resolution and expiry of relevant limitation periods. Business records subject to legal retention duties are kept for the prescribed period.

For telephone enquiries, I process your phone number if transmitted and the information needed to handle your request. The telecommunications providers involved process technical connection data to establish the call. The same purposes, legal bases and retention criteria as for email enquiries apply to my handling of telephone enquiries.

8. Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation. If processing relies on consent, you may withdraw it for the future.

To exercise your rights, email brunoblast@studio-bubela.com. You may complain to a data protection supervisory authority, particularly where you live, work or suspect an infringement. The authority responsible for the provider in Bavaria is the Bavarian State Office for Data Protection Supervision.

I do not carry out profiling or automated decisions with legal or similarly significant effects.