App privacy policy
The Rimado app needs no account and sends no identifier to us. Here is what data is still involved and how to turn it off.
This page is a translation made with AI assistance. Only the German version is legally binding. Read the German version
Last updated: November 2, 2026
No account, no tracking
The app needs no account and no sign-in. It contains no ads and no tracking. We do not link any data with other apps or websites, and we share nothing with third parties.
The only exception is anonymous usage statistics on our own server. They are described in detail below, and you can turn them off in Settings.
Data on your device
The app stores your progress and settings, such as the text size, only on your device. We have no access to them.
The puzzles are included in the app. You do not need an internet connection to play.
If you delete the app, you also delete this data.
Anonymous usage statistics (Aptabase, self-hosted)
To learn which puzzles people enjoy and where they get stuck, the app sends a few events to our own server, stats.rimado.org. We use the open-source software Aptabase, which we run ourselves. No third-party analytics service is involved.
The app reports when it is opened (with the chosen text size), when a puzzle is started or solved (with puzzle type, level and whether hints were used), when instructions are opened, when the full version is purchased, a purchase is cancelled or a purchase is restored (without the amount or receipt) and what kind of error occurred where in the program (without the error message). Each event also includes the time, the operating system and its version, the app version and the language setting.
The app sends no device identifier, no advertising ID, no name and no game progress. It groups the events of one use with a random session number. This number is created anew at each start and after an hour of inactivity, and is not stored permanently on your device.
When the app sends data, your IP address reaches our server for technical reasons. The server only derives the country and region from it, for example “Germany, Bavaria”, and does not store the IP address in the statistics. To count users per day, the server combines the IP address and the program identifier with a random value that changes daily into a one-way checksum (hash). We delete the random value after two days. After that, the checksum can no longer be linked to anyone.
Without an internet connection, the app sends nothing. You do not need the internet to play.
The server is located in Falkenstein, Germany, in a data center operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes the data only on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Transmission is encrypted (HTTPS).
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to improve the app and fix errors. For this, the app stores no identifier on your device and reads none; it only queries the operating system version and language, as every app needs them to display correctly.
We keep the statistics for 14 months and then delete them automatically. The server logs rejected requests with their IP address; we delete these logs after 7 days at the latest.
You can object at any time: in the app, open “Settings” and turn off “Anonymous usage statistics”. From then on, the app sends nothing to our server.
One-time purchase through the App Store or Google Play
The full version is a one-time purchase. Apple (App Store) or Google (Google Play) handles the payment. Their privacy policies apply to it.
The app only receives confirmation from the store that the purchase is valid. We never see your payment details.
On Android, the Google Play purchase interface sends technical diagnostic data to Google. Only Google receives this data, not us.
Links to the website
If you tap a link to www.rimado.org in the app, your browser opens. The website’s privacy policy applies there.
Your rights
You have the rights under Articles 15 to 21 GDPR, for example to access, erasure and objection. Because the statistics contain no identifier, we usually cannot link individual entries to a person (Art. 11 GDPR). The easiest way to object is therefore the switch in Settings.
If you write to us, we only use your details to reply. You can also lodge a complaint with a data protection authority.
Controller and contact
The controller responsible for the app is:
Maximilian Vogl
Maria-Montessori-Straße 24
40789 Monheim am Rhein
Deutschland