Privacy Policy

This privacy policy explains how personal data is processed when you use the BilliardBase app for iOS and Android (the "App") and the website billiard-base.com (the "Website"). In short: the App works without an account, your matches, players and settings stay on your device, and we do not track you or show advertising.

1. Controller

The controller responsible for data processing under the EU General Data Protection Regulation (GDPR) is:

Moritz Kohnke
Kaiser-Wilhelm-Ring 36
48145 Münster
Germany
Email: support@billiard-base.com

2. Using the App without an account

You can use the App without creating an account. Your matches, players, statistics and settings are stored only on your device. They are never uploaded to us.

Anonymous usage analytics (TelemetryDeck)

To understand which features are used and to find errors, the App sends anonymous usage events to TelemetryDeck GmbH, Germany. These events contain information such as which screens were opened, the app version, the operating system version and the device type. They do not contain your name, email address, handle or account ID. The device identifier is hashed on your device before it is sent, so TelemetryDeck cannot trace it back to you. Data is processed in the EU.

Legal basis: our legitimate interest in improving the App and fixing errors (Art. 6(1)(f) GDPR). See also TelemetryDeck's privacy policy.

3. Using the App with an account (optional)

You can optionally create an account by signing in with your email address (we send you a one-time sign-in code), with Apple or with Google. If you do, we store:

• your email address (with Sign in with Apple this may be a private relay address provided by Apple);
• a user ID that identifies your account;
• the handle (user name) you choose;
• if you sign in with Apple or Google, the account identifier that provider gives us;
• sign-in and security logs kept by our hosting provider, including the IP address and time of sign-in attempts.

Your handle is currently not visible to other users. Your matches, players and settings are still stored only on your device; creating an account does not upload them.

Purpose and legal basis: providing your account and signing you in, which is necessary to perform our agreement with you (Art. 6(1)(b) GDPR), as set out in our terms of service. The security logs serve our legitimate interest in protecting the service against abuse (Art. 6(1)(f) GDPR).

4. Using the Website

When you visit the Website, our web server automatically logs the technical data your browser sends: IP address, date and time of the request, the page requested, referrer and browser and operating system information. This is necessary to deliver the Website and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). These server logs are deleted automatically after 14 days.

The Website uses no cookies, no analytics and no third-party tracking. Fonts are served from our own domain, not loaded from Google. If you use the dark mode switch, your choice is saved in your browser's local storage and never sent to us.

5. Service providers and where data is stored

We use the following service providers, who process data on our behalf under data processing agreements (Art. 28 GDPR):

• Supabase (Supabase, Inc., USA): hosting of the account database and sign-in. Data is stored in the EU (Ireland).
• Resend (USA): sending sign-in emails, from its EU region.
• TelemetryDeck (TelemetryDeck GmbH, Germany): anonymous usage analytics, see section 2.
• IONOS (IONOS SE, Germany): the server that delivers the Website, see section 4.

Where a provider based in the USA may access data, the transfer is protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses (Art. 45 and 46 GDPR).

If you choose to sign in with Apple or Google, that provider processes your sign-in under its own privacy policy (Apple, Google).

We do not sell your data or share it with anyone else, and we do not use it for advertising.

6. Retention and deletion

We keep your account data for as long as your account exists. You can delete your account at any time in the App under Profile → profile card → Delete account, or by email. Deleting your account immediately removes your account and profile, and revokes Sign in with Apple if you used it. Copies in our providers' backups and email logs are deleted automatically when those expire, at the latest after 30 days. See Delete your account for details.

Data stored only on your device (matches, players, settings) is removed when you uninstall the App.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have incorrect data corrected (Art. 16);
• have your data deleted (Art. 17);
• restrict processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object at any time to processing based on our legitimate interest (Art. 21), for example to the anonymous analytics;
• lodge a complaint with a data protection supervisory authority (Art. 77), for example the one in your country or the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (ldi.nrw.de).

To exercise your rights, email support@billiard-base.com.

8. Security

All data sent between the App, the Website and our service providers is encrypted in transit (TLS). Access to account data is restricted so that each user can only access their own account.

9. Children

You must be at least 16 years old to create an account. If you believe a child under 16 has created an account, please contact us at support@billiard-base.com and we will delete it.

10. Changes to this policy

We will update this policy when the App or the Website changes how data is processed. The current version is always available on this page.

This privacy policy is effective as of 2026-10-27.