Updated: 6 October 2026
1. Controller
Christian Hermann & Martina Hermann GbR An Rainen 3, 72525 Münsingen, Deutschland apps@bitbeans.de
The full version is a one-time purchase (no subscription). Purchases, restoration and external links are in the protected parents’ area.
Progress, pony names and settings stay on your device. No ads or advertising profiles.
Purchases and diagnostics
Our AppCore service processes a random purchase identifier, protected session tokens and purchase proofs from Apple or Google to verify and restore purchases and check refunds. No sign-in is required. Payment details stay with the store. Limited diagnostic codes contain the purchase stage, error category, platform and app version. They help us resolve purchase problems in our operations portal. We do not upload gameplay histories, pony names, voice recordings or advertising IDs.
Children and parents
The app is aimed at children of about 5 to 9 years. We do not knowingly collect personal data from children: there is no account, no advertising, no third-party analytics or tracking and no chat or sharing feature. Purchases, restoring and links leaving the app can only be reached after the parental check. The anonymous usage statistics contain no identifier and cannot be linked to a child. If a child has sent us information anyway, parents can ask for its deletion at apps@bitbeans.de.
Operation and storage
Cloudflare hosts AppCore and our operations portal. Connection data may be processed, and data may be processed outside the EU. Purchases and restoration need internet; gameplay and previously verified access also work offline. Android Keystore or iOS Keychain protects purchase credentials. Keychain data may survive reinstallation.
Retention and rights
Individual server diagnostic and usage reports are deleted after seven days, daily counts after 120 days. Aggregated operational figures contain no player data. Purchase proofs remain necessary for restoration, abuse prevention and legal obligations. Subject to applicable law, you can request access, rectification, erasure, restriction, portability and objection at apps@bitbeans.de and complain to a data protection authority, including the LfDI Baden-Württemberg.
Anonymous game statistics
My Stable is an app for children. Newer versions report a few fixed events to our backend run on Cloudflare, so that we can tell whether the app starts quickly, whether the introduction, mini-games and purchase page are understandable and whether children come back: the app's start time in coarse steps (such as “1 to 2 seconds”); whether the introduction was started and completed, up to which of its four pages a child got and how it was left (start or parents’ area); whether the app was opened again on the second, third or seventh day after first use; whether a mini-game was started and completed; whether a locked item was tapped; whether the purchase page was opened and “Buy” was tapped and from which fixed place; whether a parents’ entry was tapped before the parental check; whether the parental check was shown, solved, answered wrongly or cancelled and what for (a fixed place such as the purchase page or the parents' area); the outcome of a purchase or restore attempt (for example purchased, cancelled or nothing found); and the outcome of a rating request (for example shown or not possible). Each report contains only the event name, a fixed stage or reason, platform, app version, coarse app language, the origin of the installation (store or test installation) and the time – no device, advertising, account or personal identifier, no pony names, no input from children and no free text. The app sends each event per stage at most once per day. If a report comes from the networks Google publishes for its automated pre-launch tests (Firebase Test Lab), our backend counts it as test traffic; the IP address is only compared for this and not stored. There is no advertising and no third-party analytics or tracking. We delete individual reports after seven days; daily counters without identifiers that we copy into our internal operations overview are kept for at most 120 days. The legal basis is Art. 6(1)(f) GDPR (finding errors, improving the app). Because the reports contain no identifier, we cannot link them to a person or a child (Art. 11 GDPR). Parents can object under Art. 21 GDPR at any time by writing to apps@bitbeans.de. A failed report has no effect on the game.