Privacy Policy for Hoshi: Star Sudoku
This policy describes how personal data is processed in Hoshi: Star Sudoku.
1. Controller and contact
The controller is:
Yassin Kuczma
Sole proprietorship “Yakuma”
[Street and house number]
[Postal code and city]
Germany
Email: mail@yakuma.de
Support: support@yakuma.de
2. Playing and age category
Game saves, progress, settings, privacy settings, and your age settings are stored locally on your device so that the app can function and we can apply age and consent rules. Until you make a selection, personalised advertising and Firebase Analytics are unavailable. This data remains there until you delete or reset the app or its data.
3. Optional Hoshi Account
A Hoshi Account is optional. On Android, we offer sign-in with Google. Sign-in with Apple is intended for iOS and will be processed once it becomes available there. When you sign in, we receive the account data released by the provider for authentication, in particular a provider identifier and, where applicable, an email address. We also process your Hoshi Account ID and your chosen username.
We need this data to provide and protect your account and profile and to associate a Pro purchase with your account on supported devices. You can also use the app without an account. Game saves, progress, and virtual content are not synchronised to the cloud through the account. You can delete your account in the app under “Settings” → “Account”. This deletes the active Firebase Authentication account and the Hoshi cloud profile. Temporary backup or recovery copies are removed in accordance with Google’s contractual deletion periods.
4. Purchases, advertising, analytics, security, and support
Purchases and subscriptions. Apple or Google process payment and the store receipt. RevenueCat processes the purchase and entitlement data required to provide, restore, and associate Pro. When you delete an account, we remove its association with the Hoshi Account. Purchase and entitlement data may remain for as long as a store subscription is active or purchased access must be restored. Deleting an account does not cancel a store subscription. We do not receive payment data.
Advertising and analytics. We may display non-personalised advertising. We use personalised advertising and Firebase Analytics only with your consent and where age and platform requirements are met. For this purpose, Google AdMob, Google User Messaging Platform, and Firebase Analytics may process device, app, usage, and advertising information. You can change or withdraw your consent for the future at any time under “Age & Privacy”.
Security and stability. To diagnose errors, we process technical data such as app version, operating system, device type, and error reports. For this purpose, we use Sentry with data storage in the European Union. Hoshi does not transmit an account identifier or additional profile data to Sentry.
Support. When you contact us, we process your email address, message, and information you provide in order to respond to your request.
5. Legal bases
Article 6(1)(b) GDPR applies to the app, the optional account, and purchases. Depending on the case, support and error diagnosis are based on performance of a contract or our legitimate interests under Article 6(1)(f) GDPR. Advertising and analytics are carried out with your consent under Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). We process the local age category based on our legitimate interest in protecting minors and applying consent rules.
6. Recipients and third countries
| Recipient | Purpose and storage location | Possible third-country transfer |
|---|---|---|
| Google Ireland Limited and Google LLC | Sign-in, Firebase, Analytics, AdMob, and consent management; depending on the service, EU and United States | United States; in particular on the basis of EU Standard Contractual Clauses |
| RevenueCat, Inc. | Purchase entitlements; United States | United States; in particular on the basis of EU Standard Contractual Clauses |
| Functional Software, Inc. / Sentry | Error reports; stored in the EU | Access from the United States is possible; in particular safeguarded by EU Standard Contractual Clauses |
Apple and Google process store purchases under their own responsibility. Apple will also become a recipient once Sign in with Apple is available. You may obtain a copy of the relevant safeguards by contacting support@yakuma.de.
7. Retention periods
Local game, age-category, and consent data remain stored until the app data is deleted or reset. We delete locally cached analytics events no later than after seven days. We retain a Hoshi Account and its RevenueCat association until the account is deleted. Purchase and entitlement data for anonymous purchases or active store subscriptions remain for as long as needed to provide or restore access. We delete support data after the request is completed unless statutory obligations require otherwise. We retain Sentry error reports for no more than 30 days. Firebase Analytics retains user and event data for 14 months; new user activity resets the retention period for user data. According to Google, advertising data in server logs is progressively anonymised by removing parts of the IP address after nine months and cookie information after 18 months; individual data may be retained longer for security or legal obligations.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw consent at any time with effect for the future. For privacy requests, contact us at support@yakuma.de. You may in particular lodge a complaint with the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
9. Additional information for California residents
These notices supplement the information above. During the preceding twelve months, or since the app became available if that period is shorter, we have processed the following categories of personal information: identifiers (Hoshi Account ID, authentication identifier, where applicable email address, username, and advertising or device identifier), commercial information (purchases and entitlements), internet or other electronic network activity and device data (interactions, app version, operating system, device type, and error reports), and information in support requests. The data comes from you, your device, the sign-in and store providers you use, and our service providers.
We use this data to provide the app, account, and purchases; operate the app securely and reliably; provide support; and enable advertising and analytics in accordance with your settings. For these purposes, we may disclose the listed categories to the service providers named in Section 6 and, for store purchases, to Apple or Google. We do not sell personal information for monetary consideration. When personalised advertising is enabled, disclosure of advertising and device identifiers and usage data to Google AdMob may constitute “sharing” for cross-context behavioural advertising under California law. You may opt out at any time under “Age & Privacy”; non-personalised advertising may still be displayed.
You may request access to your data, correction of inaccurate data, deletion, and opt out of the sharing described above. Exercising these rights will not result in discriminatory treatment. For requests, email support@yakuma.de; you can additionally delete your Hoshi Account in accordance with our account-deletion instructions. To verify a request, we may require reasonable information to confirm your identity and generally respond within 45 days, unless the law permits otherwise.
10. Changes
Where legally required, we will inform you of material changes. The current version is available at https://yakuma.de/en/games/hoshi/legal/privacy-policy.