Späti TycoonOne shift behind the counter

Privacy Policy

Last updated: 10 November 2026

Short and complete: the app has no accounts, no sign-in, no advertising and no tracking, and it plays in airplane mode exactly as it does online. Your savegame stays on your device. Exactly two things leave the app: the purchase check — at launch, when buying and when restoring, the app asks Apple or Google Play through the service provider RevenueCat whether the full version is unlocked, using a random anonymous ID instead of your name — and a report you send yourself using “Report a problem”. Nothing else.

Controller

Martin Langhammer
contact@c-arena.com

What the app processes

• Your savegame — money, stock, day, achievements, settings. It is stored only in the app's own storage on your device and is never transmitted anywhere. Delete the app and it is gone.
• Purchase check through RevenueCat — a random, anonymous app ID that the purchase SDK creates on first launch, plus the purchase receipt and purchase history of the full version. It runs automatically at launch, when buying and when restoring. Details under “The in-app purchase”.
• A report at the press of a button — only if you send something yourself using “Report a problem”. The next section describes exactly what that looks like.
• News, if you switch them on — then a notification device ID is stored with us. The switch is off by default. Details under “News about the game”.
• Nothing else. No name, no email address, no location, no contacts, no photos, no advertising ID, no automatic crash reports to us.

Accordingly, the App Store privacy section lists four items: Purchases (purchase history, from the purchase check), Diagnostics (other diagnostic data) and User Content (other user content, both from a report), plus Identifiers (device ID — only if you switch news on). None of it is linked to your identity and none of it is used for tracking.

Report a problem

The game has a “Report a problem” button. Apart from the purchase check it is the only way data leaves the app. It happens only if you tap the button, write something and tap send. Before that, the game shows you in full what will go out. Nothing is ever sent automatically and nothing is ever sent in the background. The report goes to https://spaeti.c-arena.com/melden.

What a report contains — the complete list:

• art — bug, idea or other.
• text — the free text you write yourself, 2000 characters at most.
• fassung and build — the app's version and build number.
• markt and sprache — the market you have set (e.g. de, at, it) and the language.
• plattform and huelle — a short note on the operating system and whether the game runs in the app shell or in a browser.
• bildschirm — the screen size in points, e.g. 390x844.
• tag, kasse, sterne — day, till balance and rating, that is your savegame in short form.
• fehler — up to 5 script error messages that occurred most recently in the game: the text of the error message, 500 characters each at most.
• zaehler — four counts from this device: how often this form was opened, how often Send was pressed, how many reports arrived and how many failed. No identifier, no timestamp, no ordering. The reason: between August and October 2026 not a single report arrived, and without these counts there was no way to tell whether nobody sent one or whether reports were lost on the way. They cannot be used to recognise a device.

What is stored on your device: the four counts above and — if a report did not get through — your own text, so that it is still there next time you open the form and you do not have to write it twice. Both stay on the device and only travel along when you tap Send. The report number is not stored. Starting over in the game removes both.

What a report explicitly does not contain: no name, no email address, no phone number, no device ID, no advertising ID, no location, no contacts, no photos, no purchase receipt. There is deliberately no field for contact details. Which also means: we cannot reply to a report.

Do not write anything personal into the free text. Whatever you type there arrives with us exactly as you typed it — so please no names, addresses or other personal data.

Your IP address is not stored — neither in the record nor in an access log, because this domain still keeps no access log. So that nobody can flood the endpoint, the IP is hashed in memory only, against a random value that is rolled again every hour. After that the value cannot be traced back to anyone.

Who receives the report: only the controller named above. There is no processor for the contents, no sharing with third parties and no evaluation for advertising purposes. The server is hosted by Hetzner Online GmbH in Germany.

How long: 90 days. After that the report is deleted automatically, by a daily job on the server.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in fixing bugs. You trigger the sending yourself.

Note down the report number if you may want it deleted later. After sending, the game shows you a number in the form M-1A2B3C4D. That number is the only way to find your report again, because nothing else is attached to it that would let us match it to you. Without it we can neither hand out a report nor delete a specific one — that is not reluctance, it is technically impossible. With the number both work; just write to the address above.

The in-app purchase

Payment for the one-time full version purchase is handled by Apple (on Android by Google Play). Payment and receipt run through your Apple or Google account; we receive no payment data, no name, no email address and no postal address. What Apple and Google process is described in their own privacy policies: apple.com/legal/privacy, policies.google.com/privacy.

Purchase check through RevenueCat. The app checks whether the purchase exists using the purchase SDK of RevenueCat, Inc. (USA), which acts on our behalf (processor under Art. 28 GDPR). For this the app connects to RevenueCat at launch, when buying and when restoring. Without a connection the game still plays; the last known purchase state stays on the device.

What goes to RevenueCat:

• a random, anonymous app ID that the SDK creates on first launch. We assign no ID of our own, and nothing links it to your name, your email address or your Apple or Google account;
• the purchase receipt and purchase history of the full version: product, time, price and currency, store country, Apple or Google transaction ID;
• technical details needed for the request: platform, operating system and app version, language or region; and, as with any connection, the IP address.

What for: to verify the purchase, unlock the full version and restore a purchase on a new device, and so that we can see an overview of purchases and revenue in RevenueCat (per anonymous ID, without names). No advertising, no tracking across other apps.

Legal basis: Art. 6(1)(b) GDPR (performing the purchase and unlocking) and Art. 6(1)(f) GDPR (legitimate interest in fraud prevention and a purchase overview). Third country: RevenueCat processes the data in the USA; the transfer is safeguarded by the EU Standard Contractual Clauses in RevenueCat's data processing agreement. How long: for as long as we use RevenueCat for the app; after that RevenueCat deletes the data under its data processing agreement. More from RevenueCat: revenuecat.com/privacy.

News about the game

The pause menu has a switch “Turn news on”. It is off by default — without you doing anything you get no notifications from us and no ID from your device is stored with us. Only once you switch it on does the following happen:

• What is transmitted: a notification device ID (the “push token” Apple or Google issues for your device), the platform (ios or android) and the game language. Nothing else — no savegame, no cash, no game day, no device model, no email address, no IP address.
• What we store alongside it: two dates without a time of day — when the ID was first seen and when it was last refreshed. That is their only purpose: after 180 days without a sign of life the entry is deleted. With a time of day this would be a trace of when you play, and that has nothing to do with sending out an announcement.
• What for: announcements about the game — a new city, a new version, an event. A few times a year, and every time because a human decided to.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given by turning the switch on.
• Withdrawal: turn the switch in the pause menu off again. The ID is forgotten on the device immediately and deleted with us. You can also turn notifications off in your system settings — then nothing arrives any more and the entry with us expires after the 180-day period.
• Recipients: Apple (APNs) and Google (Firebase Cloud Messaging) as the transport — without them there are no notifications on these devices. Both learn your device's ID and the text of the message; the text is the same for everyone.

Reminders (“Your shop is closed”) are a different thing and stay a different thing: your device schedules them itself, they never leave it, and nothing about them is stored with us. That is the switch “Turn reminders on” right above.

This website

• No cookies, no third-party embeds — fonts come from your operating system, not from the network. The only script on this site is our own page counter, described in the next point.
• Our own reach measurement without cookies. We keep our own count of which pages are opened. The counter runs on our own server in Germany (mess.c-arena.com, the same machine that serves this site) — no service provider, no paid analytics service, nothing passed on to third parties.
  • No cookie is set, nothing is stored on your device and nothing is read from it — no local storage, no session storage, no browser fingerprint. All that is sent is what your browser transmits with the request anyway, plus the width of the browser window.
  • What is stored per event: the time, the address requested without its query part, the host of the referring page (the host only) and its classification (direct, search engine, social network, AI assistant, other referral, internal), campaign parameters (utm_*), a coarse device class (phone, tablet, computer), the window width, the browser language in short form, a coarse country of origin, the time spent on the page, and clicks on important targets (such as App Store, Google Play, help) together with the host and path of the click target.
  • Your IP address is not stored. It is shortened (IPv4 to the first three number blocks, IPv6 to the first 48 bits) and used only as one ingredient of a checksum, together with a random value drawn afresh each day, the browser identification and the page. Only that checksum is held in the database; it makes it possible to count repeat visits within one day once, and nothing else. The random value is deleted after two days — after that the checksum cannot be resolved even with the database. You are not recognised beyond the day.
  • The country of origin is coarse — and only the country. It is derived from your IP address at the time of the request, exclusively on our own server: the lookup uses a table stored there that maps public address ranges to countries (IP geolocation by DB-IP, used under CC-BY 4.0). No request is made to any third party, and your IP address is discarded immediately after the lookup — only the country code is stored. If the table does not cover an address range, the country is estimated from your browser's language setting instead; the database records per row where the value came from. No location more precise than the country is derived or stored.
  • Retention: the individual records are deleted after 30 days; all that is kept are daily totals without any link to an individual visit. Requests from search engines and monitoring services are not counted.
  • The legal basis is the legitimate interest in anonymous statistics about the use of our own pages (Art. 6(1)(f) GDPR). You may object at any time (Art. 21 GDPR) — an email to the address above is sufficient. Technically the measurement is omitted entirely if you switch off JavaScript or block requests to mess.c-arena.com; the page then works unchanged.
• No access logs: the web server keeps no access log for this site. The same goes for the report endpoint /melden and for the path used to subscribe to and unsubscribe from news (/melden/push). Your IP address is necessarily processed for the moment it takes to deliver the page (Art. 6(1)(f) GDPR), but it is not stored. This does not affect the page counter in the point above — that is a different thing from an access log and holds no IP address.
• A plain tally on the sticker short links: the QR codes on printed stickers lead to /a and /i. There we count how often the page was opened — all that is stored is a single number per short link and day, for example “a, 1 October 2026: 7”. No access log, no IP address, no browser identifier, no entry per request. That number cannot be traced back to an individual visit or person, not even by us.
• The connection is encrypted with HTTPS.

Waiting list for the Android version

The Android version is currently in a closed test on Google Play. Google only admits devices whose Google account address has been registered beforehand. On /a you can therefore leave your address yourself. This is voluntary — the page works the same without it, just without access to the test.

• What is stored: only the email address you enter yourself, plus the time and which page the entry came from. No name, no IP address, no browser identifier, no device identifier.
• What for: to enable you for the closed Play test and to send you a message once the Android version is public. Nothing else — no advertising, no newsletter, no sharing with third parties.
• Legal basis: your consent, Art. 6(1)(a) GDPR. You give it by entering and submitting the address.
• How long: until you ask to be removed, at most twelve months. After that the entry is deleted automatically — a clean-up job runs daily on the server, so the period is not just words on this page.
• Removal: any time, informally, to contact@c-arena.com. Your withdrawal takes effect immediately; processing up to that point remains lawful.
• Who sees it: we do, and Google for the activation — the address is entered as a tester address in the Google Play Console. On data processing at Google: policies.google.com/privacy.

Children

The app is aimed at a general audience. Nothing is processed about children beyond what applies to everyone: the anonymous purchase check above, and a report if they send one themselves. What a report contains is decided solely by the person sending it — hence the note above about keeping personal details out of the free text.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, objection and data portability, as well as the right to lodge a complaint with a supervisory authority. Because neither the purchase check nor a report carries a name or an email address, we can only match data to you using something you give us: for a report its number M-…, for the purchase the transaction ID from your Apple or Google purchase receipt. Ask anyway if you are unsure — the address is above.

Changes

If something changes in the app that is described here, we change this page and update the date at the top.