flinqe finga – Privacy Policy

1. Controller◀▶▲▼

Controller for data processing within the meaning of the General Data Protection Regulation (GDPR):

Frank Köstler
flinqefinga
Wilhelmshöhe 28
58454 Witten
Deutschland
E-mail: frank@amkabel.de

2. Overview◀▶▲▼

The app flinqe finga can in principle be used without transmitting personal data. All game functions work fully offline.

Personal or device-related data is only transmitted to our server (flinqefinga.de) in the clearly defined cases described below – essentially when you voluntarily use the online leaderboard (including the typing record), the group contest or the team competition. In the team competition your player name and results are also shown on publicly reachable web pages (section 6).

No advertisingNo tracking SDKs No profiling for advertising No sharing with third parties

3. Local data on your device◀▶▲▼

The following data is stored exclusively locally on your device and is not transmitted:

• App settings (volume, vibration, display options, etc.)
• Local leaderboard / game progress and personal bests, including the typing record
• Self-chosen player name

This data remains on the device and is deleted when you uninstall the app or via the Android/iOS settings.

A typing-record result that could not be sent for lack of a connection is kept on the device until the next attempt and removed afterwards.

4. Online leaderboard (optional)◀▶▲▼

Only if you voluntarily register for the online leaderboard is data transmitted to and stored on the server.

4.1 Registration

• A player name (nickname) chosen by you
• A randomly generated, anonymous device identifier (UUID) – without hardware IDs, used only to assign your own entries

4.2 Transmitted game results

• Player name and device UUID
• Game parameters (keyboard layout, level, rule set, target phrase, navigation mode)
• Result (points, moves, optimal value, time taken)
• App build number
• IP address (stored server-side, see section 8)

Purpose: provision and display of the online leaderboard, assignment of your own entries, detection of abuse/manipulation.
Legal basis: Art. 6(1)(b) GDPR (requested function) and Art. 6(1)(f) GDPR (legitimate interest in a manipulation-proof leaderboard).

4.3 Typing record

In the typing record you type a given text as fast as possible. Only this given text is evaluated; the app does not read any input outside the typing record. For the weekly text the following is transmitted to the server:

• Player name and device UUID
• Calendar week, the typed text and a checksum of it
• The input method (drawn on-screen keyboard, the phone’s own keyboard or a connected keyboard), the chosen handling of mistakes and whether upper/lower case counts
• Result: number of characters, time taken, mistakes, speed
• The time intervals between keystrokes
• App build number and IP address (see section 8)

The keystroke intervals serve solely to check whether a result was achieved by a human (protection against automated input). Only three figures derived from them are stored – average, spread and the share of very short intervals; the individual intervals are discarded after the check. They are not used to recognise people by their typing behaviour.

Player name and result appear in the typing-record leaderboard, which all app users can see.
Purpose: leaderboard and protection against manipulation.
Legal basis: Art. 6(1)(b) GDPR (requested function) and Art. 6(1)(f) GDPR (legitimate interest in a manipulation-proof leaderboard).
Storage period: until you delete your account.

Record texts: Whoever sets up a typing contest can expressly publish its text as a record text (tick box, off by default). We then store the text, its length and the time of publication – without any link to the person who published it. The text is visible to all app users and can be replayed. Results for it are stored as described above and appear with the player name in the text’s leaderboard. Please do not put personal details into a record text. On request we remove a record text together with its results (contact see section 1).
Purpose: replayable leaderboards for freely chosen texts.
Legal basis: Art. 6(1)(a) GDPR (consent given by the tick box) and Art. 6(1)(b) GDPR (requested function).
Storage period: the text until the operator removes it, results until you delete your account.

Reports: You can report a record text or a player name from a leaderboard as inappropriate. We then store only what was reported (the text’s checksum or the player name), a reason if you give one, the number of reports and the time – not who reported.
Purpose: protection against offensive or objectionable content.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a clean service).
Storage period: until the operator has dealt with the report; reports concerning your player name are removed at the latest when you delete your account.

4.4 Messages from the operator

With an online account the operator can send you messages in the app, for instance notes on new versions or questions – to all players or to you personally. For this the app checks for new messages at start-up. Stored are the message, whether and when you read it, and a short reply (at most 100 characters) if you write one.
Purpose: communication with players.
Legal basis: Art. 6(1)(b) GDPR (a function of the account) and Art. 6(1)(f) GDPR (legitimate interest in being able to reach players).
Storage period: until the operator removes the message, at the latest until you delete your account.

5. Group contest (optional)◀▶▲▼

The app offers a group contest: one person sets up a contest and reads out a short code; anyone who wants to take part joins with that code. Taking part is voluntary and does not require registration for the online leaderboard.

The following is transmitted and stored on the server:

• The display name you give for the contest (your player name or any name you choose)
• The contest code as well as keyboard, rule set, playing time and the list of target phrases
• Your result: points, number of phrases played, moves and time used
• In a typing contest additionally the input method and the time intervals between keystrokes. The intervals are only evaluated for the plausibility check and are not stored; what is stored is the result (speed, mistakes, time).
• The IP address is processed for the connection but not stored (see section 8).

Results are visible to everyone taking part in the same contest – that is the point of a shared ranking. No device identifier is transmitted for this.

Purpose: running and evaluating the contest.
Legal basis: Art. 6(1)(b) GDPR (function requested by you).
Storage period: a contest is deleted automatically at the latest four hours after it was created – together with all participant names and results. Nothing is stored permanently.

6. Teams, league and cup (optional)◀▶▲▼

Beyond the group contest you can join a team and take part in a season – a league with a table, a cup, promotion and relegation. All of this is managed in the browser under /liga/, not in the app. It is voluntary: if you do not join, none of the data described here comes into being. It requires an online leaderboard account (section 4), which is what the entries are linked to.

6.1 Team

• The team’s name, short name, colour and motto, and when it was founded
• Your membership: the link between your player name and the team, the date you joined, and whether you play as a regular or as a guest
• Two codes per team: a joining code to pass on and a captain’s code that gives access to the management page

6.2 Season

• The line-up: which board you play on which matchday – decided by the team captain
• Your result per matchday: score, phrases played, moves, time and the efficiency calculated from them (in a typing league: speed, mistakes, time and accuracy)
• A rating of your playing strength, and its history, which rises or falls after every board duel
• Honours at the end of the season, such as „Golden Keyboard“
• A log of administrative steps (such as fixtures, scoring, rejected results) in which player names may appear – to keep the scoring traceable
• The IP address is processed for the connection but not stored (see section 8).

6.3 Who can see this

The table, the fixtures, the board duels, the squads and the honours are on publicly reachable web pages. Your player name, your team and your results appear there. That is the very point of a team competition – without a table anyone can look at, there would be none.

These pages are closed to search engines („noindex“) and do not appear in search results. Anyone who knows the address can, however, open them. The captains’ management page additionally requires the captain’s code.

So please choose your player name in the knowledge that it will be visible there. A pseudonym is enough; your real name is neither required nor recommended.

Purpose: running, scoring and displaying the team and season competition.
Legal basis: Art. 6(1)(b) GDPR (a function you asked for) and Art. 6(1)(f) GDPR (legitimate interest in scoring that is traceable and resistant to manipulation).
Storage period: results and tables are a competition’s memory and remain for as long as it is meant to be viewable. If you leave a team, the membership ends; results already played stay in the table, because removing them would distort the other teams’ standings. If a team is disbanded, its name and short name stay taken so that old result lists remain readable. If you delete your account (section 11), memberships, line-ups for upcoming match days, rating and awards are deleted; results already scored remain only anonymously as “Gelöschter Spieler” (deleted player).

7. Diagnostic log of hidden functions◀▶▲▼

The app contains a hidden extra function („Easter egg“). If it is triggered by a deliberate input, a technical diagnostic log is transmitted to the server once.

The following is transmitted:

• Player name and device UUID (if registered, otherwise empty)
• IP address and client identifier (user agent)
• Device model and manufacturer
• Operating system version and Android API/SDK level
• App language and app build number
• Time of triggering

Purpose: technical analysis of usage and device compatibility of this function.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical analysis and further development). No advertising tracking, no merging into user profiles.

8. IP address and hosting◀▶▲▼

Whenever you connect to our server, your IP address is processed for technical reasons. It is stored only together with entries of the online leaderboard (section 4.2), the typing record (section 4.3) and the diagnostic log (section 7), in order to detect and prevent abuse (Art. 6(1)(f) GDPR). In the group contest and the team competition it is not stored.

The server is operated by a hosting provider in Germany. A data processing agreement pursuant to Art. 28 GDPR exists with the provider.

9. No sharing, no advertising, no tracking◀▶▲▼

• No data is collected for advertising purposes.
• No third-party analytics, tracking or advertising libraries are integrated.
• No sharing or sale of data to third parties (apart from the technically necessary hosting provider).

10. Storage period◀▶▲▼

• Local data: until uninstallation or manual deletion.
• Online account, leaderboard, typing record and messages: until you delete your account (in the app or on request, see section 11).
• Group contest: deleted automatically at the latest four hours after it was created.
• Teams and season: for as long as the competition is meant to be viewable; earlier when you delete your account (scored results then only anonymously).
• Diagnostic log: only as long as required for analysis, then deleted; immediately when you delete your account.
• Server backups: deleted after 30 days. Deleted accounts therefore disappear from the backups after 30 days at the latest.

11. Your rights◀▶▲▼

Under the GDPR you have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21).

You can delete your online account completely at any time:

• in the app under menu → Einstellungen (Settings) → Spieler (Player) → Konto löschen (Delete account) – immediately, or
• by e-mail to frank@amkabel.de, stating your player name – within 30 days.

Deleted are: player name, device identifier, high scores and typing records including IP addresses, diagnostic logs, messages, team memberships, contest entries, rating and awards. League results already scored remain without any personal reference as “Gelöschter Spieler” (deleted player) so that the other teams’ tables stay correct. Details: Delete account.

You also have the right to lodge a complaint with a data protection supervisory authority.

12. Children◀▶▲▼

The app is aimed at all age groups and does not specifically collect data from children. Online registration is voluntary; minors should only use it with the consent of their parents or guardians.

13. Changes to this policy◀▶▲▼

This privacy policy may be adjusted if app functions or the legal situation change. The current version published here applies.