Privacy – My Dino Museum

Anonymous game and purchase statistics

My Dino Museum is an app for children. From version 1.6.1 it reports a few fixed events without any identifier: introduction shown and completed; first to third expedition started and finished; first to third find cleaned, skeleton assembled and exhibited in the museum; first to third mini-game started; all three free sites finished; at which fixed place a hint at the full version appeared or was tapped (for example a locked site or the trial rounds used up); whether the parental check was shown, solved, answered wrongly or cancelled and what for (for example the purchase page or the parents' area); whether the purchase page was opened and “Buy” was tapped and from which fixed place; the app's start time in coarse steps; which mini-game (detective, memory or paths) was started and whether a round was left before its end, only roughly as early, middle or late; and purchase and restore steps with a fixed result or error code. Each report contains only the event name, a fixed stage or reason, platform, app version, app language and the origin (store or test installation) – no device, personal, purchase or transaction identifier, no name, no site, no animal, no game progress and no free text. How often a report is sent is strictly limited: milestones at most once or for the first to third time per installation; hints, parental check, purchase page, start time, mini-game start and left rounds at most once per day and place or game type; purchase and restore steps are counted per step. For a purchase, our backend also stores from which fixed place on the purchase page it started according to the app. If a report comes from the networks Google publishes for its automated pre-launch tests (Firebase Test Lab), our backend counts it as test traffic; to limit abuse the IP address is briefly used in hashed form. In the statistics database we store neither IP addresses nor individual reports, only daily counters, which are deleted after 14 days. Separate technical connection data and Cloudflare diagnostics are described in the section on processed data; daily counters without identifiers that we copy into our internal operations overview are kept for at most 120 days. There is no advertising and no third-party analytics or tracking. The legal basis is Art. 6(1)(f) GDPR (finding errors, improving the app). The stored daily counters contain no identifier and we cannot link them to a person (Art. 11 GDPR). You can object under Art. 21 GDPR at any time by writing to apps@bitbeans.de.

1. Controller

Christian Hermann & Martina Hermann GbR, An Rainen 3, 72525 Münsingen, Germany; email: apps@bitbeans.de.

2. Data processed

Game progress, unlocked dinosaurs and settings are stored locally on the device.

For purchase verification, restoration and refund status, we process a random technical purchase identifier (a pseudonym), product ID, store platform and purchase or transaction data from Apple or Google. Our backend verifies the purchase with the store, stores the receipt encrypted and links it to the purchase identifier. This link supports unlocking, restoration and refund handling; it is separate from anonymous game statistics. We receive no card details. There is no app account.

Feedback can only be sent from the parent area behind the parental gate. We then process the message, an optional contact email address, app version, platform, language and limited technical device information. To limit abuse we also store an irreversible hash of the IP address, created with a secret key, not the address itself. We delete the stored record after 180 days. For handling, the feedback is also forwarded by internal email to our support; we keep that copy only as long as we need it for handling and legal record-keeping. Game progress is not included.

Gameplay and game progress stay on the device. The few anonymous events the app reports from version 1.6.1 are listed in the section “Anonymous game and purchase statistics”. The app contains no advertising and no third-party analytics or tracking services.

Technical operation: when the app connects to our backend, Cloudflare processes the IP address and technical connection data to deliver and protect the service. Separately from the statistical counters, sampled diagnostic traces are stored, for example with the time, requested URL, status, duration, device or browser information and approximate region derived from the IP address. Cloudflare retains these traces for seven days. They are used for troubleshooting and security, not advertising or building profiles of children.

Children and parents: the app is made for children aged about 6 to 9. There is no app account, advertising, third-party analytics or tracking service, chat or sharing feature. Purchases, restoration, feedback, ratings and links out of the app are protected by the parental gate; feedback is intended for adults. Game statistics use no personal, device or installation identifier. The purchase data, voluntary support information and technical connection data described above are separate. Please do not send names or other personal information about children. If a child has nevertheless sent us such information, parents can request access and deletion via apps@bitbeans.de or https://bitbeans.de/daten-loeschen; we delete such information without delay.

3. Purposes and legal bases

We process data to provide the app, verify purchases, deliver online features you actively use, maintain security, resolve errors and answer voluntary requests. Depending on the operation, the legal bases are Article 6(1)(b), (f) or, where expressly requested, (a) GDPR.

4. Recipients and service providers

We use Cloudflare for secure purchase verification, refund status, the anonymous game and purchase statistics, storage of voluntary feedback and internal email delivery; Apple and Google are used for store and payment services.

5. International transfers

Some providers may process data outside the EU or EEA. Where no adequacy decision applies, transfers rely on appropriate safeguards, in particular EU Standard Contractual Clauses, or on applicable statutory exceptions.

6. Advertising and tracking

The app contains no third-party advertising. We do not create advertising profiles, sell personal data or use advertising tracking.

7. Retention and security

Game progress stays local until reset or removed using the device’s system functions. Statistical counters in the app backend are deleted after 14 days; daily counters copied into our internal operations overview after at most 120 days. Cloudflare traces are retained for seven days. Feedback records are deleted after 180 days; internal support emails are kept only as long as needed for handling and legal record-keeping. Purchase receipts and their links are retained without a fixed deletion period for as long as needed for restoration, unlocking, refund checks or legal obligations. Transmissions are encrypted.

8. Delete data

My Dino Museum has no app account or cloud game save. You can reset local game progress in the parent area or remove it using the device’s system functions. You can request deletion of feedback, support and purchase data at apps@bitbeans.de. The order number from the store confirmation may be needed to identify a purchase; do not send passwords or payment details. Purchase records may still be required for restoration, refunds and legal obligations. Apple and Google manage store purchases separately.

9. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future. You may also lodge a complaint with a data-protection authority; the LfDI Baden-Württemberg is the authority responsible for our registered office.