Privacy policy for the “Snaky” app

Last updated: 21 August 2026

Translation for convenience. Only the German version is legally binding: read the German original. Where the two differ, the German text prevails.

Provider of “Snaky Wortsuche & Multiplayer”: Peters Rätselmanufaktur
Controller under the GDPR: Peter Bagaric, Martin-Luther-Str. 6, 85567 Grafing, Germany
Contact: snaky@snakyapp.com

1. Overview

Snaky can be played without registering. Without an account your progress stays on your device and nowhere else. You may optionally create an account to back up your progress and take part in the rankings. For online multiplayer, accounts and rankings we use Google Firebase; for voluntary reward videos, Google AdMob. There are no in-app purchases.

2. Local data (not transmitted)

Game progress, star ratings, the result of the daily level and your settings (language, theme, sound) are stored on the device. Without an account this data never leaves the device; clearing the app data removes it.

3. Anonymous play and multiplayer (Google Firebase)

When you enter multiplayer mode, an anonymous account is created automatically (a random user ID, Firebase Authentication) — with no name, email address or password. For a match we store in Google Cloud Firestore: the lobby code, the participants’ anonymous user IDs, the player name, the chosen level, the words found, the scores and the game state. This match data is deleted automatically after 7 days at the latest. Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Legal basis: Art. 6(1)(b) GDPR.

4. Optional account (email, Google or Apple) and cloud storage

You may voluntarily back up your game with an email address and a password, with your Google account or with “Sign in with Apple”. In doing so we process:

• Email account: your email address; the password is stored encrypted by Firebase Authentication alone, and we have no access to it.
• Google sign-in: the identifier supplied by Google and the email address linked to the Google account.
• Apple sign-in (iOS only): the identifier supplied by Apple and the email address Apple passes on to us. If you choose “Hide My Email” at Apple, all we receive is an anonymised forwarding address, not your real one.
• Cloud save: solved levels, star ratings, hint credit and the player name you chose are stored under your user ID so that you can carry on across several devices.

Legal basis: Art. 6(1)(b) GDPR. You can sign out at any time in the settings; the app remains fully playable without an account.

5. Rankings

If you take part in the rankings (daily ranking, monthly standings, team standings, hall of fame), we store and publish within the app: your player name, the stars and points you achieved, and the associated user ID and language. These entries are visible to other players. Please choose a player name that does not allow conclusions about your identity — your real name is not required. Legal basis: Art. 6(1)(b) GDPR. Monthly standings remain stored for the hall of fame of past seasons; on request we delete your entries (see section 9).

6. Error reports (voluntary)

If you send a report via “Beta tester”, we transmit your description, optionally your email address, and technical details (app version, device type and OS version, current level). Legal basis: Art. 6(1)(a) GDPR (consent given by actively sending it).

7. Advertising (Google AdMob) and consent

Advertising appears solely as a voluntary reward video when you would like an extra hint — no banner advertising, no forced advertising. On first launch we ask for your decision via Google’s consent platform (UMP); you can change it at any time under Settings → System → Privacy settings. Depending on your consent, Google (AdMob) processes device information, the advertising ID and approximate location data. Legal basis: Art. 6(1)(a) GDPR. If you decline, or withdraw later, a reward video you request still plays — but without personalisation. Details: policies.google.com/technologies/partner-sites

8. Audience measurement (Firebase Analytics)

So that we can see which features are used and where players get stuck, we use Firebase Analytics. The purpose isaudience measurement and improving the game — questions such as whether a difficulty is too hard or an explanation is not getting across.

The events we report: introduction completed · level started · level solved · daily puzzle played · multiplayer lobby created · lobby joined · match finished · link shared · link opened · hint video offered · hint video completed · account linked.

Depending on the event, these details go with them: pack, difficulty, language, level identifier, stars achieved, number of hints used, time taken in seconds, match result, link type, sign-in provider and the date of the daily puzzle. As a user property we also storewhether an account is linked (yes/no) — not which one.

Firebase additionally collects automatically: the screen currently shown (screen_view), first launch, session start, engagement time, and app and operating system updates.

Technical details: app version, device type, operating system, language and approximate region. Firebase Analytics uses a randomapp instance identifier for this.Your device’s advertising ID is not used — it is only involved in advertising (section 7).

The recipient is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is your consent, Art. 6(1)(a) GDPR.No measurement takes place without your agreement — collection is switched off at launch and is only enabled once you agree.

Withdrawal at any time: via the gear icon in the app —Settings → System → Privacy settings — you can change your decision at any time with effect for the future. Under Manage options,measurement and personalised advertising can be deselected individually. Both, however, build on permission to store and read data on the device: if you decline that basis, both fall away. Advertising is still shown after a withdrawal when you request a reward video — but without personalisation.

9. Your rights, deleting your account

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to complain to a supervisory authority (for example the BayLDA). Details and deadlines are on the page deleting your account and data.

Deleting your account directly in the app: under Settings → Account → “Delete account” you can remove your account yourself, permanently, at any time. Doing so deletes your user account, your cloud save including the player name, and your entries in the daily and monthly standings including the hall of fame. Your progress on the device is retained — you carry on playing without an account and can remove the local data at any time via the device settings or by uninstalling the app.

Team standings: team ranking entries are stored under a shared identifier belonging to both players and cannot technically be attributed to one individual. They contain nothing but the two player names and are deleted automatically no later than 400 days after the last game played together. On request we remove them sooner.

Alternatively by email: you can write to us at snaky@snakyapp.com instead; we will then delete your account together with all ranking entries manually.

Multiplayer match data deletes itself automatically after 7 days. If you play without an account, all we store is an anonymous user identifier and — should you take part in the rankings — the player name you chose; no link to you as a person is created.

10. App permissions

Snaky needs internet access (multiplayer, account, rankings, advertising, error reports). It does not request contacts, photos, camera, microphone or precise location.

11. Changes

When new features are added, this policy is updated before they are released.