Last updated: 28 October 2026
This privacy policy explains which personal data the app Pirates Paradise (iOS and Android, “the App”) processes, for what purposes, and which rights you have. The App works without an account and without registration: you do not need to provide your name or email address to play. The App keeps your game on your device and, so that you can continue on another device and take part in the weekly league, also on our server under an anonymous player ID.
1. Controller
InnoMobile GmbH
Schlehenweg 20
18069 Lambrechtshagen
Germany
Amtsgericht Rostock, HRB 15811
Managing Director: Paul Stelzer
Email: support@innomobile.de
2. Summary
- The App registers with our server in Germany under a random player ID. Reports to our server are only linked to this ID, not to your email address or device identifiers. You choose the name of your captain yourself; it is only stored in your game and its copy on our server and is not shown to other players.
- Your game (your captain’s name, portrait and flag, island, ships, captains, progress, purchases made in the game, game statistics) is stored on your device and, about once a minute while you play, as a copy on our server (cloud save).
- To improve the game, the App reports gameplay events (start and end of a session with its duration, finished quests and chapters, level-ups, play time) under your player ID to our server.
- For the weekly league, the App sends your loot points of the week, your level and your current sea. Other players see these values under a name derived from your player ID (for example “Flint 42”). In a brotherhood (club), its members see each other with name and points.
- Purchases are handled by Apple or Google; we use RevenueCat to manage them. RevenueCat receives your player ID. The App also reports each purchase (item, price, time) to our server for statistics.
- The App shows optional reward videos from Google AdMob. Personalised advertising only takes place with your consent. The purchase “Captain’s patent” switches the ads off.
- To fix crashes and errors, we use the error reporting service Sentry.
3. Player ID
On first start, the App registers with our server. The server creates a random player ID and a secret key; only a hash of the key is stored on the server. The App sends the key with every request so that your game and ranking entries are assigned to your player profile. The ID is not derived from your name, email address or device identifiers.
When registering and with its requests, the App transmits: app language, platform (iOS, Android or web) and app version. The server notes on which days the App was in contact (for the number of players per day).
At the start, the App asks our server for the minimum app version (sending the app version) and the App Store or Google Play whether a newer version is available. The store query is subject to the privacy policies of Apple or Google.
Every day the App loads the seed of the day from our server (without personal data), from which price waves and events are derived – the same for all players.
Legal basis: Art. 6(1)(b) GDPR (providing cloud save, league and clubs of the App).
4. Cloud save
While you play, the App sends a copy of your game to our server about once a minute and when it goes to the background: your captain’s name, portrait and flag (freely chosen – please do not use your real name), your island with its buildings and stores, your ships, captains and crew, the explored sea, trade and reputation, research, quests, purchases made in the game and game statistics (for example sessions, offers seen and taken, ads watched). The server stores it compressed together with the time of saving, and reads a summary (level, sea, chapter, loot points, number of buildings, ships and captains, game statistics) for our statistics.
At the start, the App loads the copy from the server. If you played on two devices, the App asks which game you want to keep; the other one is replaced.
Legal basis: Art. 6(1)(b) GDPR (cloud save feature of the App).
5. Gameplay events
So that we can see where the game is too hard or too long and improve it, the App notes certain events while you play and sends them with the cloud save to our server: start and end of a session (session number and duration), finished quests and chapters, level-ups, each with the time, the minutes since the game was started, your play time so far and the app version. Until they are sent, the App keeps them on your device (at most 500).
The events are only linked to your random player ID, not to your name, email address or device identifiers. We only evaluate them in aggregated form (for example how many new players finish the first chapter and how long that takes).
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in improving the App).
6. Weekly league and brotherhoods
The App sends your loot points of the week, your level and your current sea to our server. The server checks whether the points are plausible for the level and keeps your best value of the week.
Weekly league: with your first accepted score of a week, the server places you in a league group with other players and computer opponents and counts the points you gain during the week; at the end of the week it works out your rank, promotion or relegation and your reward. Other players see your rank, points, level and sea under a name derived from your player ID (for example “Flint 42”); your own entry is marked for you. No name entered by you is shown.
Brotherhoods (clubs): you can found a brotherhood (name of your choice) or join one with its code. The server stores the brotherhood, its members and roles (founder, member) and the time of joining. Members see each other under the name derived from the player ID, with role and points of the week. A founder can remove members; you can leave a brotherhood at any time.
Legal basis: Art. 6(1)(b) GDPR (league and club features of the App).
7. Purchases
Purchases are made through Apple (App Store) or Google (Google Play); we do not receive your payment details. In the browser version, purchases are only simulated and no payment takes place.
The App reports each purchase (item, price, time, whether it was simulated) with your player ID to our server for statistics. Nothing is granted on the server based on these reports; what you bought is stored in your game.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in improving the shop of the App).
8. Purchases
In-app purchases are processed by Apple (App Store) or Google (Google Play). We do not receive your payment details. The privacy policies of Apple and Google apply.
To manage purchases we use RevenueCat (RevenueCat, Inc., USA). The App passes RevenueCat your player ID, the purchase receipts from Apple/Google and device and app information. RevenueCat informs our server about purchases; we store these messages with your player ID so that purchases such as the “Captain’s patent” can be assigned to your player profile and restored. We do not pass any name to RevenueCat. More information: RevenueCat privacy policy.
Legal basis: Art. 6(1)(b) GDPR (fulfilling the purchase) and Art. 6(1)(c) GDPR (statutory retention obligations).
9. Advertising (Google AdMob)
The App shows ads only as optional reward videos: you choose to watch one, for example to shorten a construction or an expedition (a few a day at most). After the purchase “Captain’s patent”, the App shows no ads and grants the reward right away. Ads are delivered by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
The App asks for your consent via Google’s consent form; on iOS, Apple’s tracking request is also shown. Only with your consent may Google use the advertising ID (IDFA or Google Advertising ID) and other data to show personalised ads. Without consent, Google only shows non-personalised ads; even then Google processes data such as IP address, device information and interactions with the ad to deliver ads, prevent fraud and measure ads. You can change your choice in the device settings (tracking/advertising ID). More information: How Google uses data from apps, Google privacy policy.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent) for personalised ads, otherwise Art. 6(1)(f) GDPR (financing the free version).
10. Error reports (Sentry)
If the App or our server encounters an error, an error report is sent to Sentry (Functional Software, Inc., USA). It contains the technical error description, the app version, platform, operating system and device type and, for server errors, the requested address. We do not send names, nicknames or profile details. We use the reports exclusively to find and fix errors. More information: Sentry privacy policy.
Legal basis: Art. 6(1)(f) GDPR (stable and secure operation of the App).
11. Server, hosting and log files
The App communicates with our server api.pirates-paradise.paul-stelzer.de. Server and database run at IONOS SE (Elgendorfer Str. 57, 56410 Montabaur) in a data centre in Germany; IONOS processes the data on our behalf (Art. 28 GDPR). When the App accesses the server, the web server records technical access data (IP address, time, requested address, status code, app/browser identifier) in log files. These log files are rotated automatically and deleted after a short time. In addition, we use the IP address briefly in memory to limit excessive requests (rate limiting); it is not stored in our database.
Legal basis: Art. 6(1)(f) GDPR (security and operation of the server).
12. Data on your device
The App stores your game (captain with name, portrait and flag, island, ships, captains, sea, quests, purchases, game statistics), your settings (sound, language), the purchases booked on this device and those not reported yet, gameplay events not sent yet with the session counter and play time, your player ID with its key, a copy of your player profile, your last league and brotherhood status, the version of the last cloud save, the last weekly score, the seed of the day (price waves), whether the store offered an update and when you last watched a reward video locally on your device. This data is deleted when you uninstall the App. The App also uses the device functions for sharing (system share dialog), store ratings (rating dialog of Apple/Google) and checking for updates (query of the store version).
13. Contact
If you contact us by email or via the support page, we process your message and your contact details to answer your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
14. Storage period
- Player profile (player ID, language, platform, app version, purchases), cloud save, league and ranking entries, brotherhood memberships, days of contact and purchase reports on our server: as long as we need them for cloud save, league, brotherhoods and statistics; gameplay events: 12 months; player profiles without game, ranking entry, purchase or brotherhood are deleted after 30 days. On request we delete all data stored for your player ID (section 16).
- Purchase data at RevenueCat, Apple and Google: according to their privacy policies and the statutory retention periods.
- Data on your device: until you start a new game or uninstall the App.
15. Recipients and transfers to third countries
We only pass data to the service providers named in this policy (IONOS, RevenueCat, Sentry, Apple, Google). RevenueCat and Sentry are based in the USA. Transfers take place on the basis of the EU Standard Contractual Clauses or, where the provider is certified, the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). We do not sell data.
16. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time for reasons arising from your particular situation.
To exercise your rights, write to support@innomobile.de. Please include your player ID (Settings). As your data is not linked to anything else, we can only find it with this ID; we will then delete your player profile, your cloud save, your league, ranking and brotherhood entries, your gameplay events and your purchase reports.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin, Germany.
17. Changes
We adapt this privacy policy when the App or the legal situation changes. The current version is always available on this page.
