Privacy Policy
Last updated: 13 October 2026. This policy covers the iPhone app “Hamburg Streetwars” and the website hamburg-streetwars.com. The German version is legally binding: Datenschutz.
1. Controller
Markus Sülflow
Holunderstieg 1a, 21039 Escheburg, Germany
E-mail: support@hamburg-streetwars.com
2. In short
- No account, no sign-in, no analytics or tracking tools.
- Your save game stays on your iPhone (and, if you use iCloud, in your iCloud). We have no access to it.
- On first launch the app downloads its game content from the internet, one time. As with any request, your IP address reaches our technical service providers (Cloudflare, IONOS) – nothing else.
- Data only goes to a third party when you choose to watch a reward video (Google AdMob, non-personalised ads) – and only with your consent where required.
3. Data in the app
Save game and settings. Progress, in-game currency, settings (sound, graphics, language, controls) and the notification schedule are stored only in the app’s storage on your iPhone. They contain no personal details and are never sent to us. Kept until you reset the game in the settings or delete the app.
Notifications. Reminders such as “till is full” are scheduled directly on your iPhone (local notifications). No server is involved. iOS asks for your permission first; you can turn them off any time in iOS Settings or in the game.
Vibration, screen. The app uses your iPhone’s haptics and screen orientation. No data is stored or transmitted.
Downloading game content. On first launch – and after an update with new content – the app downloads its game content (3D models, images, sounds, music, videos; currently about 160 MB) from the internet, one time. The files are stored with Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) in a storage location in the EU and are delivered at spiel.kiez-daten.org via Cloudflare’s global network. If that source cannot be reached, the app downloads the same files from our website server at IONOS (www.hamburg-streetwars.com, see section 4). As with any request on the internet, technical connection data is processed: your IP address, date and time, the requested file and the identifier of the app and operating system (user agent). The app does not send any data about you or your game – no account, no identifier, no save game – and we do not analyse these requests. Legal basis: Art. 6(1)(f) GDPR (secure and reliable delivery of the game content).
Cloudflare and IONOS act on our behalf (processors). Cloudflare processes your IP address at the network location closest to you, which may be outside the EU. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework, and for all other cases the EU standard contractual clauses are agreed in our data processing agreement with Cloudflare. Cloudflare keeps the connection data only as long as needed to deliver the files and keep its network secure; for IONOS the retention period in section 4 applies. More from Cloudflare: cloudflare.com/privacypolicy.
iCloud backup. If iCloud is on, the app keeps a copy of your save game in the iCloud key-value store of your Apple ID so it survives a new device or reinstall. Apple runs this service; we cannot access it. Legal basis: Art. 6(1)(b) GDPR. Turn it off in iOS Settings → Apple ID → iCloud.
In-app purchases. Purchases are handled entirely by Apple (App Store, StoreKit). We receive no payment data. The app only gets a confirmation from Apple (transaction ID, product, date, App Store country) and stores it in your save game to unlock and restore the purchase. Legal basis: Art. 6(1)(b) GDPR. Apple’s privacy policy applies to payment and refunds.
Reward videos. If you choose to watch an ad video for an in-game reward, the ad is served by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We request non-personalised ads only and do not ask for permission to track you across apps. Google processes technical data: IP address (and from it your approximate location), a device identifier for apps of the same vendor, device type and OS, ad events (request, impression, tap) and crash/performance data, to deliver and count ads and to prevent fraud. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework.
Before the first video, where required by law (EU/EEA, UK, Switzerland), the app asks for your consent via Google’s consent form. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw consent at any time in the app under Settings → Account → “Change ad consent”. Without consent you can still play everything; there are just no ad videos. More from Google: policies.google.com/privacy and policies.google.com/technologies/partner-sites.
Crash and usage data from Apple. If you allowed “Share Analytics” in iOS Settings, Apple provides us with anonymised crash reports and usage statistics. You control this in iOS Settings.
Beta (TestFlight). If you use the beta, Apple processes your e-mail address (if invited), crash reports and voluntary feedback and makes them available to us.
4. This website
The website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). The server logs technically necessary access data (IP address, date and time, page requested, browser) to run the site securely. Legal basis: Art. 6(1)(f) GDPR. IONOS stores the IP address only in shortened (anonymised) form. Retention: at most 8 weeks, after which IONOS deletes the log files automatically.
No cookies, no tracking, no fonts or content from third-party servers.
5. Contact by e-mail
If you write to us, we use your e-mail address, your message and any screenshots only to reply. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete the message once your request is resolved and no retention duty applies.
6. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and may withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Contact us at the e-mail above. You may also lodge a complaint with a supervisory authority, e.g. the Independent Centre for Privacy Protection Schleswig-Holstein (ULD), Kiel.
Data that only lives on your iPhone you can delete yourself: Settings → “Reset game”, or delete the app.
7. Children
The game is rated 16+. We do not knowingly collect data from children.
8. Changes
We will update this policy when new features arrive. The current version is always available here.