🇩🇪 Deutsch · 🇬🇧 English

Privacy Policy for Macher

Last updated: 02.07.2026

This policy informs you, in accordance with Articles 13 and 14 GDPR, which personal data we process in the Macher app, for what purposes, and on what legal basis.

1. Controller

Jannis Klaus Email: kontakt.macher.app@gmail.com

We have [not appointed a data protection officer, as we are not legally required to.

2. Principles

Macher is a party game for events. We process only the data needed to operate the game. We use no advertising, no trackers, and no third-party analytics SDKs, and we do not sell or rent data.

3. What data we process

a) Account & profile Display name, chosen emoji, optional profile photo, optional short description (bio); the crews you join.

b) Game content (user-generated content) Photo and video “proofs” that you capture and post; your reactions, comments, votes, and reports.

c) Sign-in With “Sign in with Apple” we receive a pseudonymous user identifier issued by Apple. We receive no password; you can hide your email address from Apple, and the game does not need it. Anyone who only browses uses an anonymous account without Apple sign-in.

d) Push notifications If you enable notifications, we process a device token (Firebase Cloud Messaging) in order to send you messages. You can disable this at any time in the app or system settings.

e) Camera & microphone Access occurs only when you capture a proof, and only after you grant permission in the system. Recordings are stored only once you post them.

4. Purposes and legal bases

Providing the game (account, profile, crews, proofs, scores): Art. 6(1)(b) GDPR (performance of the user contract).
Push notifications: Art. 6(1)(a) GDPR (consent), revocable at any time with effect for the future.
Security, abuse and fraud prevention, moderation of reported content: Art. 6(1)(f) GDPR (legitimate interest in a safe community) as well as Art. 6(1)(c) GDPR in conjunction with the Digital Services Act, to the extent statutory reporting and moderation obligations apply.

5. Recipients and processors

Other users see your content according to the visibility you choose: crew proofs only your crew, publicly posted proofs everyone taking part in the respective event.

We use the following processors (Art. 28 GDPR):

Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging) of Google Ireland Ltd. / Google LLC. Data is stored primarily in the EU region (europe-west1). A data processing agreement is in place.
Apple (Sign in with Apple) for sign-in.

6. Transfers to third countries

When Google services are used, processing by Google LLC (USA) may occur. This is safeguarded by the EU–US Data Privacy Framework and/or the EU Commission’s Standard Contractual Clauses pursuant to Art. 46 GDPR. [Confirm before launch which mechanism applies.]

7. Retention

We store your data for as long as your account exists. When you delete your account (in Settings), your profile, your posted photos and videos, your comments, and your crew membership are deleted server-side and the sign-in is removed; this usually happens within a few minutes. To fulfil legal obligations or to defend against abuse, individual log data may be retained for a shorter, limited period.

8. Your rights

You have the following rights against us: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3)). To do so, contact kontakt.macher.app@gmail.com

You can exercise the right to erasure directly yourself via “Delete account” in the app settings.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular the one responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach

10. Minimum age

Macher is intended for people aged 16 and over. When setting up an account you confirm that you are at least 16 years old.

11. Data security

Transmission is encrypted (TLS). Access to content is restricted to authorized accounts by server-side security rules.

12. Changes

We adapt this privacy policy when the processing changes. The version published in the app or at this address at the relevant time applies.