Privacy policy

Updated 6 October 2026. Applies to this website and Orbit Twist.

Controller

Hogir Akan, trading as AKAN Development, Rehrstieg 69, 21147 Hamburg, Deutschland. Contact: h-a1991@live.de.

Local game data

Orbit Twist stores scores, your optional player name and settings on your device to provide the game (Article 6(1)(b) GDPR). Version 1.0 has no online account. TestFlight 1.1 also stores a randomly generated guest identifier locally. Store versions 1.0 and 1.1.0 do not upload scores or include a friend network. The separate social beta is described below. The app has no analytics service. We do not receive these local records. They remain until reset or deletion of the app; operating-system backups are subject to your device settings.

Optional account

Optional sign-in in TestFlight 1.1: You can continue playing as a guest. If you choose Apple or Google sign-in, Firebase Authentication processes your account identifier, provider identifier, email address and name where supplied, plus technical connection information for authentication and abuse prevention. We use this information to provide and secure the account you request (Article 6(1)(b) GDPR; abuse prevention: Article 6(1)(f) GDPR). Apple may provide a relay email address. We do not receive your Apple or Google password. The authentication service stores the session on your device. Sign out or delete your account in the profile; deletion requires authentication again and removes the Firebase account. It does not delete your Apple or Google account or local scores. Firebase retains authentication records until account deletion; its policy allows up to 180 days for removal from live and backup systems and a few weeks for logged IP addresses. Google and Apple process sign-in information under their respective privacy policies. Cloud backups of game progress are not available. Online score comparison is limited to builds with the optional social beta enabled.

Optional friends and rankings beta

In builds with the social beta enabled, you can opt in after signing in. Firebase Cloud Firestore stores your random player name, unique account identifier used as your friend code, new best scores for Classic and Dynamic, and friend requests, accepted connections and blocks. The database location is Frankfurt (europe-west3). All signed-in players can read enrolled player names, identifiers and best scores; connection records can be read only by the two participants. Your email and Apple or Google name are not copied into public ranking profiles. We use this data to provide the requested feature (Article 6(1)(b) GDPR). Existing local scores are not uploaded. Scores are not independently verified. We do not access your address book or send invitations automatically. Records remain until you remove the connection or delete your account; blocking records remain until unblocked or account deletion. Account deletion in a social-capable build removes the social profile and its connections before deleting the Firebase account. If deletion fails, retry while online or contact support. Uninstalling the app does not delete online records. Local level and daily-goal progress remain on the device. Google processes this data as the infrastructure provider; the international-processing information below also applies.

Optional advertising

The app uses Google AdMob and Google User Messaging Platform, provided in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The advertising SDK may process IP addresses (including approximate location), device identifiers, ad interactions and diagnostic/performance data to deliver and measure ads and prevent fraud. This app requests non-personalized ads; that does not mean no data processing. Required privacy choices are requested before ad loading. Where consent is required, the basis is Article 6(1)(a) GDPR and section 25(1) TDDDG. You can revisit available advertising privacy choices in Settings. Withdrawal applies to future processing. You can play new rounds without watching ads. TestFlight builds use test ad units. No Apple tracking permission or IDFA access is requested by this version.

Support by email

When you contact us, we use your email address, message and attachments to answer you. The basis is Article 6(1)(b) GDPR for game-related requests, or Article 6(1)(f) for our interest in responding to other enquiries. Our Microsoft Outlook mail provider also processes the correspondence. We delete resolved enquiries when no longer needed, unless statutory retention or a continuing dispute requires longer storage. Please do not send passwords or unnecessary personal information.

Website hosting

This website is hosted using OpenAI Sites. OpenAI Ireland Limited and its infrastructure subprocessors process connection data such as IP address, request time, requested URL and browser information to deliver and secure the site. The basis is Article 6(1)(f) GDPR: our legitimate interest in a reliable information and support website. Our pages contain no own analytics, advertising scripts or contact forms. We do not maintain a separate visitor database. Technical records are retained only as required for hosting, security and applicable obligations under the hosting service arrangements.

Recipients and international processing

Google, Apple, Microsoft and OpenAI may process data using infrastructure outside the European Economic Area, including the USA. Depending on the recipient and service, adequacy decisions or EU standard contractual clauses provide safeguards. OpenAI’s DPA provides for these safeguards for EEA data transfers. Information about processing, retention and safeguards is available in the providers’ linked privacy notices; you may also contact us to request details.

Your rights

Subject to the applicable conditions, you may request access, correction, deletion, restriction and portability of your data. You may withdraw consent and object to processing based on legitimate interests for reasons relating to your situation. Contact h-a1991@live.de. You can complain to a supervisory authority, including the Hamburg Commissioner for Data Protection and Freedom of Information. We do not make automated decisions producing legal or similarly significant effects. Providing support data is voluntary but necessary to answer your request.

Firebase Privacy · Apple Privacy · Microsoft Privacy · OpenAI DPA · OpenAI subprocessors · Datenschutzaufsicht Hamburg · Google Privacy Policy · Google Mobile Ads SDK: data disclosure