Privacy policy
This policy applies to the app PaddleX (com.grabow.paddlex, Android and iOS) and to this website.
Last updated: 31 October 2026
In short
- There is no user account: no sign-up, no login, no email address.
- Your progress and settings stay on your device only. We run no server for the app and receive no data from it.
- The app is free and shows ads between two matches through Google AdMob. Ads are personalised only if you consent. PaddleX is meant for players aged 13 and up.
- The app loads game settings (such as how often ads appear) through Firebase Remote Config. Nothing about you or your game goes to Google with it.
- No analytics, no crash reporting, no sale of data.
- Two-player games run on one device, without internet.
Controller
Controller under the General Data Protection Regulation (GDPR):
B. Grabowski
Beethovenstr. 36
76275 Ettlingen
Germany
Email: grabow.commuter@gmail.com
No data protection officer has been appointed, as the legal requirements for one are not met.
Data on your device
The app stores the following in its protected storage on your device. It does not leave the device and is deleted when you uninstall the app or clear its data:
- your progress: unlocked levels, best score per level, whether you have seen the credits
- settings: hand (left or right), sound on or off, language
- which hints have already been shown
- for ads: how many matches were played since the last ad and when the last ad was shown
- your consent choice (see below)
If your device makes a system backup (Android backup, iCloud), it may contain this data. Your device controls that, not the app.
Advertising (Google AdMob)
PaddleX is funded by advertising through Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A full-screen ad (image or short video) appears at most before every sixth match and no sooner than four minutes after the last one, never during a match and not in the first levels.
To load and show an ad, Google processes among other things: your IP address and a coarse location derived from it (country, region), device and app information (model, operating system, language, app version), which ad was shown and whether it was tapped, and, where you allow it, your device's advertising ID (Android: Advertising ID, iOS: IDFA).
Personalised only with your consent. PaddleX is meant for players aged 13 and up. The app requests ads suitable for teens (rating “T”). If you consent, Google and its advertising partners may tailor ads to your interests, store and read information on your device for this (such as the advertising ID) and build an advertising profile. If you do not consent, you get non-personalised ads, chosen only by the content of the app and your coarse location. The game is the same either way.
Consent: In the European Economic Area, the United Kingdom and Switzerland the app asks for your consent before the first ad, where the law requires it, using Google's consent tool (Google User Messaging Platform). On iPhone, iOS also asks whether the app may track you (App Tracking Transparency); if you decline, Google does not receive the IDFA. The form shows the individual purposes and advertising partners and lets you choose “Do not consent”. You can change or withdraw your choice at any time in the app under Settings → Privacy settings, and on iPhone also in the iOS settings under Privacy → Tracking. Without consent the app shows only non-personalised ads that need no consent, or none at all.
Legal basis: for personalised advertising and for access to your device that requires consent, your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR); otherwise our legitimate interest in funding the free app through advertising (Art. 6(1)(f) GDPR).
More: How Google uses information from apps that use its services and Google's privacy policy.
Settings from afar (Firebase Remote Config)
We can change some settings of the game without an app update: how often and from when ads appear, how strongly the opponent plays in single levels and how much it eases off after defeats. For this the app asks Firebase Remote Config, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, at start and at most once an hour. Without internet the values loaded last or the built-in ones apply.
For the request Google processes: a random Firebase installation ID (not the advertising ID and not linked to it) with an access token, app ID, package name, app and SDK version, platform and system version, the device's language, country and time zone, and your IP address. The app sends nothing about your game (no progress, no results). We use no Firebase Analytics and no crash reporting.
Legal basis: The installation ID is stored on your device because the app cannot load the settings without it (§ 25(2) no. 2 TDDDG). The processing relies on our legitimate interest in tuning the game fairly without an app update and keeping ads moderate (Art. 6(1)(f) GDPR). More: Privacy and security in Firebase.
Permissions
- Internet access: only to load ads, the consent form and the settings from afar. The game itself works without internet.
- Advertising ID (Android): lets AdMob read the advertising ID unless you have opted out; you can delete it in the Android settings.
The app does not ask for location, camera, microphone, contacts or photos.
Children
PaddleX is meant for players aged 13 and up and is not directed at children under 13. We do not knowingly collect personal data from children. The app has no account, no chat and no purchases. Where the law sets a higher age for consent (16 in Germany), younger players should give consent to personalised ads only together with their parents, or choose “Do not consent”.
Recipients and transfers outside the EU
The only recipient of the data named above is Google as the provider of AdMob and Firebase. Google may also process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework; transfers rely on the European Commission's adequacy decision and on Google's standard contractual clauses.
Retention
| Data | Kept |
|---|---|
| Progress, settings, ad counter, consent | On your device until you uninstall the app or clear its data |
| Firebase installation ID | On your device until you uninstall the app or clear its data; at Google according to Firebase's retention periods |
| Data at Google (AdMob) | According to Google's retention periods, see its privacy policy |
| Your email to us | Until your request is settled, then at most 6 months |
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on legitimate interest (Art. 21) and withdrawal of consent with effect for the future (Art. 7(3)).
As we receive no data from you ourselves, we cannot provide information about your device. You delete the data on your device by clearing the app's data or uninstalling the app. For data held by Google, please contact Google; you can reset or delete the advertising ID in your device settings.
For any request, contact us at grabow.commuter@gmail.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR); ours is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
This website
paddlex.drawla.app is hosted on Firebase Hosting (Google Ireland Limited). When a page is requested, the usual access data arise on the server: IP address, time, requested address, amount of data transferred, browser identifier. They serve operation and security and are not analysed by us. Legal basis: Art. 6(1)(f) GDPR.
The website sets no cookies, loads no fonts, scripts or images from third parties and uses no analytics or tracking tools. That is why there is no cookie notice here.
Changes
When the app changes, this policy changes with it. The current version is at paddlex.drawla.app/en/privacy; the date above shows its state. The German version is the binding one.