1. Controller
The controller responsible for data processing on this website and in the PlayPact app is:
MEIPAK-Studios GbR
represented by Luis Meißner and Maximilian Pakosch
Kastenbergerstraße 11
84428 Buchbach, Germany
Email: kontakt@meipak-studios.de
We are not legally required to appoint a data protection officer. For any privacy questions, please contact us at the email address above.
2. Overview
We only process personal data where this is necessary to run this website and the PlayPact app, or where you choose to share it with us. We use no analytics or tracking tools and no advertising cookies, and we do not sell data.
3. Website hosting
This website and the web version of PlayPact are served via Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you open a page, the hosting service automatically processes technical data sent by your browser:
- IP address,
- date and time of the request,
- the page or file requested,
- browser type, operating system and, where applicable, the referring page.
This is technically necessary to deliver the page and keep the service secure (e.g. to fend off attacks). The legal basis is our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). We do not analyse this data ourselves.
4. Fonts
The fonts used on this website are hosted on our own server. No connection to Google Fonts or any other font provider is made when you visit a page.
5. Contact by email and contact form
If you email us or use the contact form, we process your email address, your name (if provided), the topic you chose and the content of your message in order to reply. Messages from the contact form are stored in the Firebase Realtime Database (Google, server location Belgium, EU); the technical process is as described in section 6. The legal basis is Art. 6(1)(b) GDPR for (pre-)contractual matters, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Our mailbox is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We delete correspondence and form messages once they have been dealt with, at the latest after 12 months, unless statutory retention obligations apply.
6. Beta test & game suggestions
Beta test sign-up
Using the form on the beta test page, you can sign up as a PlayPact tester. We process:
- the email address of your Google account (required),
- your name or nickname (optional),
- your device or Android version (optional),
- language and time of sign-up.
Purpose: to invite you to the closed test of PlayPact. We add your email address to the tester list in the Google Play Console, which Google uses to check that you may download the test version. We will also email you about the test (invitation, notes, feedback requests) — no advertising.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by emailing kontakt@meipak-studios.de; this does not affect the lawfulness of processing carried out before withdrawal.
Retention: until the end of the test phase or until you withdraw consent; we then delete your details from our list and from the Play Console.
Game suggestions
The suggest a game form only asks for a game title, platforms and an optional note — no personal data. Please don't enter names or contact details there.
Technical process
Both forms store your input in the Firebase Realtime Database (Google, server location Belgium, EU). To prevent abuse, your browser signs in to Firebase Authentication with a random, anonymous identifier. For this, the Firebase software package is loaded from Google servers (gstatic.com) — only when you open one of the form pages. The legal basis is our legitimate interest in processing your input securely and protecting it against abuse (Art. 6(1)(f) GDPR).
7. The PlayPact app
PlayPact is an app that lets groups of friends find out by swiping which game they want to play together. There is no traditional user account with a password. The following data is processed:
- Anonymous identifier: a random technical ID via Firebase Authentication that links your device to rooms, profile and friends list.
- Profile: your chosen display name, avatar (emoji and colour from a fixed selection), the platforms you play on, and your friend code. Uploading your own images is not possible.
- Room data: room code, member list, your likes and swipes, matches, room settings (mode, match rule, filters, platforms) and banned members.
- Friends & invitations: which identifiers are friends with each other and whom you have sent room invitations to.
- Online status: whether you are currently online and in which room (for the friends list).
- Blocks: which identifiers you have blocked, together with their display name at the time. Only you can see this list.
- Reports: if you report someone, we store your identifier, the identifier and display name of the reported person, the reason you chose, the room code where applicable, and the time. The reported person won't find out who reported them.
- Only on your device: your "My rooms" list, your game library ("I own this"), language and sound settings. This data never leaves your device.
Who sees what? Display name, avatar and platforms are visible to members of your rooms and to anyone who knows your friend code. All members of a room can see which games you liked there and which matches came about.
Purposes & legal bases: providing the app features you request (Art. 6(1)(b) GDPR); preventing abuse, e.g. the name filter, room creators' ability to ban members, blocking and handling reports (Art. 6(1)(f) GDPR). Storing and reading the identifier and settings on your device is strictly necessary for the service you request (§ 25(2) no. 2 TDDDG).
Storage location: Firebase Realtime Database (Google), server location Belgium (EU). In the web version, PlayPact loads the Firebase software package from Google servers (gstatic.com) for this; fonts are served locally from our own server.
Retention: rooms are deleted automatically when the last person leaves, when the creator deletes them, or at the latest after 30 days without activity. Profile, friend code, friends list and blocks remain until you delete them in the app under Settings → "Delete my data" or request deletion (see Delete data). Reports are deleted once they have been handled, at the latest after 6 months.
Advertising: PlayPact currently shows no ads. If we add advertising in future (e.g. via Google AdMob), we will update this policy beforehand and — where required — ask for your consent in the app.
8. Cookies & local storage
This website sets no cookies. Only on the form pages does Firebase store an anonymous sign-in identifier in your browser's storage (IndexedDB) so your input can be submitted securely. The PlayPact app likewise stores its identifier and settings locally on your device (see section 7). Both are strictly necessary for the respective service (§ 25(2) no. 2 TDDDG); you can delete this data at any time via your browser or device settings.
9. Recipients & third countries
We use the following processors, with whom data processing agreements under Art. 28 GDPR are in place:
- Google Ireland Limited (Firebase Hosting, Authentication, Realtime Database; Google Play Console for the beta test),
- IONOS SE (domain and email).
Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). EU Standard Contractual Clauses apply in addition. We only share data with other third parties where we are legally obliged to do so.
10. Your rights
Within the statutory limits, you have the right to:
- access the data we hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interests (Art. 21 GDPR),
- withdraw any consent with effect for the future (Art. 7(3) GDPR).
Just email us at kontakt@meipak-studios.de. Because PlayPact works without a traditional account, we need your friend code (in the app under "Friends") to identify your data.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
11. Deleting your data
You can delete your PlayPact data yourself at any time: in the app under Settings → "Delete my data". What gets deleted, and how to do it without the app, is explained on the Delete data page.
12. Other information
Obligation to provide data: You are not obliged to provide us with any data. Without the technical data described in sections 3 and 7, however, we cannot provide the website or the app; without an email address we cannot invite you to the beta test.
Automated decision-making: We do not make automated decisions or carry out profiling within the meaning of Art. 22 GDPR. PlayPact's name filter merely rejects certain inadmissible display names.
Children: PlayPact is not directed at children under 16.
Changes: We update this policy when our services or the law change. The version published here applies.