1. In Short
Memoria Land shows no ads, uses no advertising, analytics or cross-app tracking services and does not sell personal data. The game processes the data needed for your account, local and cloud save, public player profile, online and tournament features, safety and purchase verification. The game server is hosted in the European Union. Google or Apple are involved when you use their optional sign-in or store services and may also provide operating-system backups according to your device settings. You can permanently delete your game account from within the app.
This policy covers the Memoria Land app on Android and iOS, its game server, and the technical delivery of the Memoria Land legal pages on andreneubert.com, including this policy, the terms and the account-deletion page.
2. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Andre Neubert
Mainz, Germany
Email: contact@andreneubert.com
Further provider details are available in the Impressum. Please send privacy enquiries to the email address above.
3. Who the App Is For
Memoria Land is intended for players aged 13 and over. It is not directed at children under 13 and does not participate in the Google Play Families programme. If it becomes known that a child under 13 is using an account, the circumstances will be reviewed and the account deleted where required. You can report such cases to contact@andreneubert.com.
4. What Data Is Processed
4.1 Data Stored on Your Device
The app stores device-specific settings and account-related data locally. This includes language, sound and music settings, onboarding status, a local copy of game progress, sign-in state, the Terms revision you accepted with the acceptance time, and a random guest identifier. The guest identifier is created when you choose to continue as a guest. It is neither a hardware identifier nor an advertising ID and is sent to the game server to create or access your pseudonymous guest account.
Local data normally remains until it is cleared in the app or operating-system settings, or until the app is uninstalled. Depending on your operating-system and backup settings, it may also be included in a device backup and restored after a reinstall or on another device. After successful account deletion, the app resets the active sign-in state and guest identifier on that device. Device-specific settings and individual local progress copies may remain; you can remove all local app data through the operating-system settings or by uninstalling the app.
4.2 Account and Optional Provider Sign-In
- Guest account: The random guest identifier is used to create or access a pseudonymous game account on the server without separate registration.
- Google Sign-In (optional): The app receives an authentication token containing your Google account identifier and, depending on the data supplied by Google, profile information such as your name and email address. The token is sent to the game server for validation and linking. Your first name may be used as a one-time suggestion for your display name.
- Sign in with Apple (optional, iOS only): The app requests your Apple account identifier, email address and name. Apple may supply your real email address or a private relay address if you choose “Hide My Email”. The identity token is sent to the game server for validation and linking. Your first name may be used as a one-time suggestion for your display name.
Provider sign-in is voluntary for normal play but required before a store purchase. The game server stores the provider account identifier needed for the link; authentication tokens are processed for sign-in and validation. Linking makes the game account recoverable after a reinstall or on another device. Google and Apple process data under their own privacy terms when you use their sign-in service.
4.3 Save Game, Public Profile and Online Features
- Display name: freely chosen and checked for prohibited terms. It is visible to other players and can be used to find your profile.
- Save game and inventory: campaign and event progress, character and profile settings, coins, XP, diamonds, unlocked or purchased items, cosmetics, achievements and trophies.
- Public player profile: depending on your progress, other signed-in players can see information such as your display name, level, selected character and title, trophies, league, wins, tournament results, campaign progress, achievements and recent online-match history, including opponents, result, time and duration.
- Social and online data: account identifier, friend code, friend requests and friends list, blocks, leaderboard records, matchmaking and online-match results.
- Tournaments: registration, team or bracket assignment, match results, ranking, rewards and tournament status.
- Quick chat: online matches offer predefined phrases only. There is no free-text chat. Optional free text can, however, be submitted in a player report as described below.
4.4 Player Reports, Moderation and Abuse Prevention
If you report another player, the server stores the account identifiers and display names of the reporter and reported player, the selected category, an optional free-text note of up to 300 characters, timestamps, processing status and the moderation outcome. Where action is taken, the reason and duration of a restriction or suspension may also be stored. Do not include unnecessary personal or sensitive information in the report note.
Reports are available only to authorised moderation staff. Report counts and previous outcomes are used to prevent misuse of the reporting system. Repeated rejected reports can automatically result in a temporary loss of the ability to submit further reports. Name filters, rate limits, duplicate-purchase checks and technical fraud or abuse indicators may also operate automatically. These checks do not constitute solely automated decisions with legal or similarly significant effects within the meaning of Art. 22 GDPR; player-account sanctions are reviewed by an authorised person.
4.5 Technical Data and Logs
When the app or this page connects to a server, IP address, time, requested service and technical connection, error and security information may be processed. This is necessary to establish the connection, operate and protect the service, diagnose faults and investigate abuse. Such data may appear in server or infrastructure logs. For these legal web pages, STRATO retains IP addresses in server logs for no more than seven days; anonymised downloadable log data may be available for up to six weeks.
The Memoria Land legal pages store your language choice in the browser only for the duration of the browser session. They do not use an advertising or tracking cookie for this purpose.
If you contact us by email, we process the sender address, time, subject, message content and technical delivery information to handle your request and, where necessary, verify that you are authorised to act for a game account.
4.6 Notifications and Permissions
If you enable notifications, Memoria Land can show a local alert when a relevant game or tournament event is received from the game server. The alert itself is displayed by the app on your device. Memoria Land does not register a remote-push token and does not use a separate push-notification provider. On operating systems that require it, the app asks for notification permission; you can withdraw it at any time in the device settings.
The app needs network access. Store purchases and notifications may add the corresponding operating-system or store permissions. Memoria Land does not request access to contacts, precise location, photos, camera or microphone.
4.7 What Does Not Happen
The release build contains no advertising, analytics or cross-app tracking SDK. Personal data is not sold or used for advertising profiles. Memoria Land does not make solely automated decisions that produce legal or similarly significant effects within the meaning of Art. 22 GDPR. The limited automated safety and abuse-prevention checks are described in Section 4.4.
5. In-App Purchases and Purchase Verification
Memoria Land offers consumable diamond packs and the one-time non-consumable purchase “The Insect Meadow”. The adventure can be restored on another device when you use the same linked game account and store account. There are no loot boxes, randomised purchase mechanics or gacha. Diamonds and coins are not legal tender, cannot be exchanged back into money, and are neither transferable nor tradable.
5.1 Payment and Verification
Google Play or the Apple App Store processes your payment. Andre Neubert does not receive your card number, bank details or billing address. For verification and crediting, however, the app and game server process the product identifier, store, purchase or transaction identifier, receipt or purchase token, purchase status and relevant timestamps. A pseudonymous game-account reference is also sent to the store so that the purchase can be assigned to the correct account. The receipt or token is checked with Google or Apple before an item is credited.
Raw receipts, purchase tokens and store responses are used for validation and are not kept as the permanent purchase record. Google and Apple process payment and store-account data under their own privacy terms.
5.2 Why Store Purchases Require a Linked Account
Store purchases require a game account linked to Google or Apple. A guest account depends on locally stored credentials and may become inaccessible if that local data is lost. Linking is therefore a purchase safeguard: it assigns the balance or entitlement to a recoverable account.
5.3 Pseudonymous Purchase Ledger
To prevent duplicate redemption, process refunds or revocations and document the correct entitlement, the game server keeps a pseudonymous purchase record. It contains protected representations of the transaction and game-account identifiers together with the product, store, status, relevant purchase and processing timestamps, and operational information required to manage the record. It contains no card, bank or billing-address data and no permanently stored raw receipt.
The direct binding to an active game account is removed when that account is deleted. The remaining purchase record is pseudonymous rather than automatically anonymous and is retained only while it is necessary for duplicate-redemption prevention, refund or revocation handling, dispute resolution or applicable legal obligations.
6. Recipients and Service Providers
- DigitalOcean, LLC: infrastructure and database hosting for the self-hosted game server. The active game data is hosted in an EU data centre.
- Strato AG, Germany: hosting and technical delivery of this privacy policy and the account-deletion page, and email delivery for support and privacy enquiries sent to the contact address.
- Google Ireland Ltd. and Google Commerce Ltd.: optional Google Sign-In and Google Play payment and purchase verification on Android.
- Apple Distribution International Ltd.: optional Sign in with Apple and App Store payment and purchase verification on iOS.
Data may also be disclosed to the service providers' approved subprocessors, professional advisers or public authorities where this is necessary to provide the service, establish or defend legal claims, or comply with a legal obligation. Data is not disclosed to third parties for their advertising.
6.1 Processing Outside the EEA
DigitalOcean, Google and Apple are part of international groups. Depending on the service and support situation, data may be processed in or accessed from countries outside the European Economic Area, including the United States. An EU data-centre location does not by itself exclude such access. Where required, transfers are based on an adequacy decision such as the EU-US Data Privacy Framework for certified recipients, or on the European Commission's standard contractual clauses and supplementary safeguards. You can request further information about the safeguards using the contact details in Section 2.
7. Purposes and Legal Bases
- Art. 6(1)(b) GDPR (performance of a contract or steps requested before entering into a contract): creating and authenticating your game account, optional account recovery through Google or Apple, local and cloud save, public profile, online play, social and tournament functions, and processing, verifying and unlocking in-app purchases.
- Art. 6(1)(f) GDPR (legitimate interests): reliable and secure operation, technical logs, fault diagnosis, service and account security, name filtering, moderation, protection of players, rate limiting, and prevention of cheating, abusive reports, fraud and duplicate purchase redemption. The interests are a fair and safe game, reliable operation and the establishment, exercise or defence of legal claims.
- Art. 6(1)(c) GDPR (legal obligation): processing required to comply with statutory duties or binding requests from competent authorities.
7.1 Required and Optional Data
Account, save-game and connection data is required to provide the relevant online functions. Without it, those functions cannot be used or can be used only to a limited extent. Linking to Google or Apple is optional for normal play, but is required for account recovery across devices and before a store purchase. Friend, tournament, reporting and notification functions are optional. The free-text note in a player report is always optional.
8. Retention and Deletion
Core account, save and profile data is kept while your game account exists. Other data is kept only for as long as the relevant purpose requires it:
- regular game-server and infrastructure logs until they are no longer needed for operation or fault diagnosis, in particular as part of technical maintenance; there is currently no fixed calendar retention period. Security-related extracts may be kept until the incident has been resolved. Website-hosting logs follow the periods stated in Section 4.5;
- your own match and leaderboard data while the account exists. Public match history is limited to the latest 50 entries. Entries containing your name and account identifier may also remain in an opponent's limited history until they are replaced by newer matches or deleted with that opponent's account;
- tournament records while needed to run and settle the tournament and handle objections. A tournament record may remain after account deletion until the tournament has ended. Seven days after the end it becomes eligible for deletion and is removed during the next technical tournament-maintenance pass;
- reports and moderation records while a case is being processed and afterwards for as long as necessary to document the decision, identify repeated abuse, protect players or defend legal claims. Account deletion does not automatically remove a resolved report where it also concerns another person or a record still needed for those purposes. Once the purpose no longer applies, the information must be deleted or anonymised through moderation administration;
- pseudonymous purchase records according to the criteria in Section 5.3. They are not automatically removed in full when the account is deleted; once the purpose no longer applies, they must be deleted or anonymised; and
- records concerning privacy, deletion and support requests while necessary to handle the request, document that it was handled correctly or defend legal claims.
Deleted game data may remain in access-restricted production database backups for up to seven days, after which the backup cycle overwrites it. Backups are used only to restore the service after a technical incident, not to restore a deleted account in normal operation. If a backup must be restored, deletion requirements are applied again.
8.1 Deleting Your Account in the App
You can delete your account yourself: Menu → Settings → “Delete account”, confirmed by two safety prompts. A connection to the game server is required. This works for guest accounts and for accounts linked with Google or Apple. After successful server deletion, the app resets the active sign-in state and guest identifier stored on that device.
8.2 Deletion Without the App
If you no longer have the app, email contact@andreneubert.com. If available, include your friend code or game-account identifier. A display name can help with the search but is not unique. To protect accounts from unauthorised deletion, additional proof that the account belongs to you may be requested. Requests are normally handled within 30 days. Details are available on the account-deletion page.
8.3 What Is Deleted
Deletion removes the active game account, save game, inventory and balances, display name and public profile, current friends and social data, leaderboard entry, account-provider links and data that is no longer required for an overriding purpose. On the device used for deletion, the app resets the active sign-in state and guest identifier. Device-specific settings and individual local progress copies may remain; you can remove all local app data through the operating-system settings or by uninstalling the app. Deleting Memoria Land does not delete your Google or Apple account or the purchase history held independently by the app store.
8.4 What May Remain
Pseudonymous purchase records, required moderation or legal records, tournament records, entries in an opponent's limited match history, server and security logs and temporary backup copies may remain according to the purposes and criteria above. Active account restrictions end when the account is deleted. The remaining records remain subject to access restrictions and your applicable GDPR rights.
8.5 Note on Purchases
Diamonds are deleted with the game account because they form part of its balance; statutory rights and the store's refund rules remain unaffected. The permanent purchase “The Insect Meadow” remains recorded in your store account and can normally be unlocked once for a new game account after account deletion via “Restore purchases”, provided that the store records and technical evidence allow it.
9. Your Rights
Subject to the relevant legal requirements and exceptions, you have the right to:
- access personal data processed about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16),
- erasure (Art. 17),
- restriction of processing (Art. 18),
- data portability (Art. 20), and
- object to processing based on legitimate interests (Art. 21).
You may withdraw consent at any time with effect for the future. Processing carried out before withdrawal remains lawful. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.
To exercise your rights, email contact@andreneubert.com. A friend code or game-account identifier helps match the request to the correct account. Additional information may be requested only where necessary to verify your identity; never send a password, full purchase receipt or payment details by email.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz); you may also contact the supervisory authority where you live or work or where the alleged infringement occurred.
10. Data Security
Transmission between the app and the publicly accessible game service is protected by TLS. Access to production systems and personal data is restricted to authorised persons. Purchase receipts are validated with Google or Apple before an item is credited. No method of transmission or storage can provide absolute security.
11. Changes to This Policy
This privacy policy will be updated if Memoria Land, the services used or the legal requirements change. The current version is available at this address; the date above shows its status.