Privacy — Nubbin

This is a translation for convenience. The German version at pascalreischl.com/nubbin/datenschutz/ is the legally binding one.

Nubbin is a game without a server. There is no user account, no sign-in and no registration. Everything the game knows about you and your creature stays on your device, and leaves it in exactly one case, which you trigger yourself: when you show another person a QR code.

Controller

Pascal Reischl Fockygasse 32/3 1120 Vienna, Austria Email: inbox@pascalreischl.com

What is stored on your device

Your save: your creature, its genetics, collected eggs, your breeding log and your progress. Alongside it a device-bound identifier and a cryptographic key pair, generated on first launch, which marks eggs as originating from your device. The private key lives in the operating system’s keychain and never leaves the device.

This data sits in the app’s protected storage area. I have no access to it. If you delete the app it is gone — there is no cloud backup and no way to restore it.

Nothing is sent to me

The app sends no data to me or to any server I operate. There is no analytics, no usage statistics, no crash reporting to me, no advertising and no advertising identifier. The game is fully playable offline.

Camera and QR codes

Breeding only works when two players meet in person and scan each other’s codes. The app therefore asks for camera access. The camera image is searched for a QR code in memory only. It is not stored, not added to your photos and not transmitted anywhere. You can withdraw the permission in your system settings at any time; the game keeps working, just without encounters.

What you hand over when you show a code

An encounter or gift code contains a creature’s genetics, its ancestry data and the identifier of the device where its lineage began. It contains no name, no email address, no location and no identifier that leads back to you as a person. The transfer runs directly from screen to camera, without a network connection and without any intermediary.

Beta phase via TestFlight

While the app is distributed through Apple’s TestFlight, Apple processes data about your participation as an independent controller: the email address you joined with, installed versions, crash reports and device details. I have no influence over this; Apple’s privacy policy applies. In TestFlight I can see how many testers installed a version, plus crash reports and any feedback you explicitly submit there.

Children

The app is not directed at children and collects no data that identifies a person.

Your rights

You have the rights to access, rectification, erasure, restriction, data portability, withdrawal of consent and objection. Since I collect no data from you, I can neither provide information about your game data nor delete it — it rests solely with you. If you believe the processing of your data breaches data protection law, you may lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde.