Anonymous usage statistics
So that we can see how Fotanni is used and where getting started fails, the app reports a few fixed game events without any identifier to the Fotanni backend (Cloudflare): whether the introduction was started, skipped or completed, that a deck was created, that a round was started or finished (per game mode), that an online room was opened or a guest joined, and that a result card was shared. Each report contains only the event name, where applicable the game mode as a fixed category, platform and app version, plus the rough origin of the installation (store or test) so that test traffic is counted separately; the origin is determined on the device. No account, device or installation identifiers, player names, photos, deck or room names, game progress or free text are transmitted. Events are only counted per day; the Fotanni backend deletes counters older than 14 days when the next report arrives, so a fixed maximum period is not guaranteed. We keep aggregated daily counts in our internal operations overview without a fixed deletion period. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving the app and finding problems when getting started. Because the reports contain no identifier, we cannot link them to a person (Art. 11 GDPR). You can object under Art. 21 GDPR at any time by emailing apps@bitbeans.de. If a report fails, this has no effect on the game or a purchase.
Updated: 16 October 2026
1. Controller
Christian Hermann & Martina Hermann GbR, An Rainen 3, 72525 Münsingen, Germany; email: apps@bitbeans.de.
2. Data processed
Local decks, selected photos, game state and settings are stored encrypted on the device. Fotanni reads the capture year and month from the image data (or the file name) on your device and stores them in the deck; location data (GPS) is never read and is removed from the photos. Deliberately created exports are encrypted, and the shareable result card contains no photos.
Private online rooms process sign-in (Apple or Google via Firebase Authentication; players can join as guests without an account), room data, aliases, participant state and the photos added to the room together with their year and month through Cloudflare (R2, EU), and show them only to players who joined. Transport is encrypted (TLS) but not end-to-end: while the room exists, the server can technically access the photos. When the room ends, or when a player is removed or leaves, access is withdrawn immediately; the photo files are deleted after 24 hours at the latest in photo rooms (Timeline, “Whose photo?”) and up to 7 days in Pairs rooms with an uploaded deck. There are no push notifications and no public gallery.
Reports process the room, content and report information required for review. Photos may be shared only when the required rights and consent are in place.
Purchase verification and secure restoration may process technical store transaction data and a non-reversible binding to the Apple or Google sign-in used.
Purchase and account-deletion diagnostics: the app reports fixed technical purchase steps and a failed account deletion with only the event name, a fixed reason, platform and app version, without identifiers, room or photo data and without purchase receipts. They are counted per day; the Fotanni backend deletes counters older than 14 days when the next report arrives, so a fixed maximum period is not guaranteed. Aggregate daily counters of purchase steps, restorations and account-deletion errors are kept in our internal operations overview without a fixed deletion date (Art. 6(1)(f) GDPR).
3. Purposes and legal bases
We process data to provide the app, verify purchases, deliver online features you actively use, maintain security, resolve errors and answer voluntary requests. Depending on the operation, the legal bases are Article 6(1)(b), (f) or, where expressly requested, (a) GDPR.
4. Recipients and service providers
We use Cloudflare for private rooms, media and security, Firebase/Google for sign-in, and Apple and Google for store services.
5. International transfers
Some providers may process data outside the EU or EEA. Where no adequacy decision applies, transfers rely on appropriate safeguards, in particular EU Standard Contractual Clauses, or on applicable statutory exceptions.
6. Advertising and tracking
The app contains no third-party advertising. We do not create advertising profiles, sell personal data or use advertising tracking.
7. Retention and security
Local data remains on the device until it is removed in the app or through system settings. Server data is retained only for as long as required for the respective function, security and statutory evidence. Transfers are encrypted.
8. Delete data and account
Local data can be removed in the app or through the device’s system settings. Where an account or cloud data exists, deletion can be requested in the app or by emailing apps@bitbeans.de. Store purchases are managed separately by Apple or Google.
9. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future. You may also lodge a complaint with a data-protection authority; the LfDI Baden-Württemberg is the authority responsible for our registered office.