Privacy Policy Games
Last Updated: September 30, 2026
1. Introduction
This Privacy Statement applies to the offer and use of all mobile games (hereinafter "GAME" or "App"), which is provided to you by Sunday GmbH, An der Alster 42, 20099 Hamburg, Germany (hereinafter also referred to as "we" or "us") for use on your mobile device. We develop and publish free mobile games and applications that aim to entertain and inform people.
2. Contact and Data Protection Officer
Should you have any questions or comments about the handling or use of your personal data, should you require information about the personal data stored about you, or should you wish to exercise your other rights described in section 12 below, you can contact us by post at Sunday GmbH, An der Alster 42, 20099 Hamburg or by sending an email to privacy@sunday.gg.
We have appointed a data protection officer for our company:
Mr. Stephan Krämer, LL.M. (Attorney at law, Germany)KINAST Rechtsanwaltsgesellschaft mbH
Hohenzollernring 54
50672 Köln, Germany
You can contact our data protection officer via his website http://www.kinast.eu or via email at privacy@sunday.gg.
3. Information We Collect
We collect mobile identifiers and other technical information (if necessary, only with your consent) allowing us to recognize your device:
- device's advertising ID or identifier (Google GAID on Android devices or Apple IDFA on iOS devices)
- IP address
- general technical Information (the name and version of the app to which the ad is served, manufacturer and model, operating system name and version, the language of the operating system, etc.)
- activities within the app when using it (such as usage history and duration, user journey/visited and used areas, dwell time, tapping actions and interactions with the app or advertisements) are captured in a transaction record.
- gameplay data (levels reached, items purchased)
4. Protection of Minors
Our Games are explicitly intended for users aged 18 and older. If you are younger than 18 years old, please do not use our games.
We request age confirmation solely to ensure we comply with regional privacy laws and to restrict minors from accessing age-inappropriate content or tracking. Additionally, we utilize technical age signals to ensure that third-party advertising networks and partners handle your data in accordance with applicable child privacy laws (e.g., by disabling behavioral tracking).
Please note that age ratings in the Apple App Store or Google Play Store reflect the platforms' internal content classification. A low age rating does not imply that our Games are designed for, directed at, or marketed to minors.
5. How We Use Your Information
- To provide and maintain the game experience.
- To process in-app transactions.
- To analyze gameplay patterns for balance and bug fixes.
- To deliver personalized advertisements
6. Advertising and Analytics
Provided that you have given consent to the collection of personal data for advertising and analytics purposes, we share the data with the following categories of recipients:
Advertising partners, that enable us to monetize the ad inventory of our Apps and offer free products and services to users. We help advertisers promote their products and services to audiences with a proven interest in similar products and services, and enable them to optimize their marketing spend with our advertising partners. Some of these partners typically collect data through their own tools (software development kits or "SDK"), which are integrated in our App. An SDK, is a software component that allows them to serve ads in our App, and to collect information directly from our Apps. For these purposes, we contractually require our partners to obtain your explicit consent from their users. You can find a list of our partners who implement advertising SDKs through our Apps in the consent banner.
Analytics and measurement partners, who provide us with tools and technologies that enable us to better understand how users interact with our services, measure campaign performance, attribute install sources, prevent fraud, and help us improve them. These partners process data on our behalf as Data Processor through their own tools (software development kits or "SDK" integrated into our Apps). Collected data includes technical device parameters (model, OS version), network information (IP address), advertising identifiers (e.g., IDFA, GAID), and in-game engagement metrics.
Where required by applicable law, we rely on your explicit consent granted through our in-game Consent Management Platform (CMP) before deploying these tools. Below is a list of our partners that implement analytics SDKs through our Apps, as well as their privacy policies and instructions on how to manage your privacy choices:
- justtrack GmbH, An der Alster 42, 20099 Hamburg, Germany – https://justtrack.io/privacy-policy/
- Google Firebase, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – https://firebase.google.com/support/privacy
- AppsFlyer Ltd., Maskit 14, Herzliya, Israel – https://www.appsflyer.com/legal/services-privacy-policy/ (Opt-out: https://www.appsflyer.com/optout)
Because these partners act as Data Processors on our behalf, you may exercise your data protection rights (such as access, deletion, or objection) by contacting us directly at privacy@sunday.gg.
7. Anonymized Usage Data
We also process anonymized data in clusters to understand how users interact with the Game. This includes:
- Device models and operating systems
- Browser types and display settings
- General usage patterns (e.g. which content is accessed most)
This information helps us improve our app and identify any technical issues. It cannot be linked back to you personally.
8. Legal Basis
Under the GDPR, we must have a "legal basis" to handle your information. We rely on the following:
- Your Consent: When you give us explicit permission (for example, by opting into personalized ads), (Art. 6 (1)(a) GDPR)
- Our Contract with You: We process data that is strictly necessary to run the game and provide the services you’ve requested. (Art. 6 (1)(b) GDPR)
- Our Legitimate Interests: We process data to improve our business, provided it doesn't outweigh your privacy rights. This includes: (Art. 6 (1)(f) GDPR)
- Improving the Game: Understanding your needs to make the app better.
- Fraud Prevention: Keeping the game fair and free of cheats or scams.
- Security: Ensuring our servers are safe and the app runs smoothly.
- Legal Protection: Enforcing our terms and defending our legal rights.
- Legal Obligations: When we are required by law to collect or keep your data (e.g., for tax or regulatory reasons). (Art. 6 (1)(c) GDPR)
9. Data Sharing and Disclosure
- Service Providers: Cloud hosting: Amazon Web Services EMEA Sàrl - Avenue John F. Kennedy 38 - 1855 Luxembourg - Luxembourg - Server Hosting Provider: The data required to use GAME is stored on Amazon Web Services' servers within the European Union.
- Advertising Partners: Networks that show ads within your game
- Analytic partners: tools to improve our products.
- Legal Requirements: If required by law or to protect rights/safety.
10. Security measures
We are obliged to protect your privacy and treat your personal data confidentially. Your data will be stored in our databases, which are only accessible to us and employees specifically trained in data protection.
If we use support from third-party service providers who process your data on our behalf in order to provide our web services, we have ensured that they are subject to the strict conditions of this Data Privacy Statement, and that the use of your data beyond the cases described in this Data Privacy Statement will not take place. All contractors, service providers and their employees are subject extensively to our instructions and are also in particular legally obliged to observe, and trained in, the protection of your data.
In order to prevent the loss or misuse of the data stored by us, we take comprehensive technical and organizational safety precautions, which are regularly reviewed and adjusted to meet technological advances. If it is within our sphere of influence, we use in particular modern encryption techniques as well as a variety of other measures to prevent third parties from obtaining unauthorized information.
11. Automated decision making and profiling
Automated decision making occurs when an electronic system uses personal data to make decisions without human intervention. If we make an automated decision based on automated processing of personal data, we must either obtain your explicit written consent to do so or it must be justified in the public interest. Furthermore, we must take reasonable steps to protect your rights. Automated individual decisions based on your personal data or profiling within the meaning of Art. 4 No. 4 and 22 GDPR will not take place unless you have expressly consented to it.
12. Your Rights and Choices
As a data subject in the data processing by Sunday, you have the following rights. Please note that we may request proof of your identity before we can process it.
Information, Restriction of Processing and Erasure
Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about the data stored about you personally, its origin and recipients, and the purpose of the data processing. On presentation of the respective prerequisites, you may also have the right to the rectification of incorrect data, the restriction of the processing, and the erasure of data.
Withdrawal of Your Consent to Data Processing
Some forms of data processing are only possible on the basis of your explicit consent. You can withdraw your consent already given at any time by sending an email to privacy@sunday.gg. The legitimacy of the data processing carried out until the withdrawal will remain unaffected by the withdrawal.
Right to Data Portability
Regarding the data that we process automatically on the basis of your consent or in the performance of a contract, you generally have the right to access it yourself or have it provided to a third party in a customary, machine-readable format. If you require the direct transfer of this data to a third party, this will only take place if this is technically possible with reasonable effort.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of data privacy violations caused by us, you have the right to lodge a complaint with the competent supervisory authority. The supervisory authority responsible for Sunday GmbH in data protection law matters is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), the contact details of which can be found in the following link: https://www.datenschutz-hamburg.de/wir-ueber-uns-kontakt/wie-erreichen-sie-uns.html.
13. Children’s Privacy (COPPA/GDPR-K)
Sunday GmbH’s games are not intended for users under the age of 18. We do not intentionally collect personal data from anyone in this age group. If you are under 18, please do not provide any information to us or use our services.
14. Retention
We retain your data only as long as necessary to provide our services, fulfill your requests, or meet legal obligations. This means we store your info while your account is active, for 18 months of marketing inactivity, or until you request deletion—unless legal retention requirements prevent us from doing so. Once no longer required, your data is permanently deleted or anonymized.
15. International Data Transfers
We may transfer your data to partners outside the EU. When we do, we ensure a high level of protection by using European Commission-approved safeguards, such as Standard Contractual Clauses, or by transferring data only to countries for which the European Commission has issued an Adequacy Decision.
16. Updates
We always keep this Data Privacy Statement up to date. Therefore, we reserve the right to change it from time to time and to update any changes in the collection, processing or use of your data. Therefore, please read this privacy policy regularly.