SplitSecond · Legal
Privacy Policy
Last updated: 4 June 2026
SplitSecond (“the game”) is a minimalist one-tap precision game operated by Tassilo Posegga, an individual developer based in Germany. Full contact and legal-notice details are in the Impressum. This policy explains what data the game collects, why, how long it is kept, and the rights you have over it under the EU General Data Protection Regulation (GDPR).
For any privacy question or to exercise a right described below, email tassilo@posegga.eu.
1. The short version
- No account, no sign-up, no name or email — ever.
- No ads, no in-app purchases, no loot boxes.
- Your scores and settings stay on your device. We never see them.
- The only data that leaves your device is anonymous crash and (optional) usage diagnostics, used to keep the game stable.
- You can turn usage analytics off at any time in Settings → Analytics.
2. Who is responsible (controller)
The data controller is Tassilo Posegga, Germany — see the Impressum for the full postal address. Contact: tassilo@posegga.eu.
3. What we collect, why, and the legal basis
3.1 On-device data (never transmitted)
SplitSecond has no user accounts and no game server. Your high score, personal best, and settings (sound, music, haptics, analytics toggle) are stored only in the app’s local storage on your device. This data is not sent to us or anyone else, and is removed when you delete the app.
3.2 Crash diagnostics
Via Google Firebase Crashlytics: crash stack traces plus basic device model and OS version, so we can fix what breaks. No game content or identity is attached. Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in a stable game.
3.3 Usage analytics (optional)
Via Google Firebase Analytics: anonymous, aggregated events about how the game is used (e.g. which screens are opened, games started). This is optional — you can turn it off at any time under Settings → Analytics, which stops collection on your device. Legal basis: your consent (Art. 6(1)(a)), withdrawable at any time.
3.4 Feature flags
Via Google Firebase Remote Config, the game fetches a small configuration (used to enable or disable features remotely without an app update). This involves a random installation ID and your IP address (technical only). Legal basis: legitimate interests (Art. 6(1)(f)).
3.5 What we do not collect
- Real name, email, postal address, or phone number.
- Account credentials — there is no sign-in.
- Contacts, calendar, photos, microphone, camera, or location.
- Advertising identifiers — no ad SDK is present in the game.
- Payment data — there are no in-app purchases.
4. Where your data is stored
Crash diagnostics and (if you opt in) usage analytics are processed by Google (Firebase Crashlytics and Firebase Analytics) on Google’s global infrastructure, which includes servers outside the EU/EEA, such as the United States. These transfers rely on the European Commission’s Standard Contractual Clauses and the EU–US Data Privacy Framework. Opting out of usage analytics (Settings → Analytics) stops that collection entirely.
5. Service providers (processors)
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase Crashlytics | Crash reporting & stability | Crash stack traces, device model, OS version |
| Google Firebase Analytics (optional) | Aggregated usage analytics — off when you opt out | Anonymous in-app events, app instance ID |
| Google Firebase Remote Config | Remotely enabling/disabling game features | A random installation ID and IP address (technical only) |
We do not use attribution or advertising SDKs. If our use of processors changes, this policy will be updated and you will see an in-app notice.
6. How long we keep it
| Data | Retention |
|---|---|
| On-device scores & settings | Until you clear them or delete the app |
| Crash diagnostics | Up to 90 days (Firebase Crashlytics default) |
| Usage analytics (if enabled) | Up to 14 months (Firebase Analytics default) |
7. Your rights (GDPR)
You have the right to:
- Access a copy of your data.
- Rectify inaccurate data.
- Erase your data (“right to be forgotten”).
- Restrict or object to processing based on legitimate interests.
- Withdraw consent at any time (turn off Analytics in Settings).
- Complain to a supervisory authority — for Germany, the data-protection authority of your federal state.
Because the game holds no account or personal identifier on our side, most data is either on your device (delete the app) or anonymous. To exercise any right, email tassilo@posegga.eu. We respond within 30 days, free of charge.
8. Children
SplitSecond is suitable for all ages and does not knowingly collect personal data from children. The analytics described above are anonymous and optional. If you believe a child has provided us data, contact tassilo@posegga.eu and we will delete it.
9. Security
Data sent to Firebase is transmitted over TLS. No system is perfectly secure; if a breach affects personal data we will notify the competent authority within 72 hours as the GDPR requires, and you where legally required.
10. Changes
We may update this policy. The “Last updated” date above shows the most recent change; material changes will be surfaced via an in-app notice on the next launch.
11. Contact
Tassilo Posegga · tassilo@posegga.eu · Impressum