Last updated: 18 August 2026
This Privacy Policy explains how ShopyZwei GmbH (“we”, “us”), the developer of the mobile game Card Prophet (“the App”), collects, uses, and protects your personal data, and the rights you have under the EU General Data Protection Regulation (GDPR) and applicable German law.
ShopyZwei GmbH
Schlesischer Ring 13a, 45894 Gelsenkirchen, Germany
Email: privacy@shopyzwei.de
We have not appointed a Data Protection Officer as we are not legally required to; you can reach us for any privacy matter at the email above.
Card Prophet is playable as a guest without any sign-up. We collect only what is needed to run the game, and we do not use your data for advertising or cross-app tracking. The data we process:
| Data | What it is | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Device identifier | A per-device ID used to recover your guest profile after a reinstall or token loss. | Provide the game / keep your progress on your device. | 6(1)(b) contract; 6(1)(f) legitimate interest |
| Account & profile | A random account ID, your in-game display name and optional @handle. | Identify you within the game, leaderboards/social later. | 6(1)(b) contract |
| Sign-in identifiers (optional) | If you choose to sign in, the identifier Apple or Google gives us for your account (and the name you provide). We do not store your email address. | Let you keep your profile across devices. | 6(1)(b) contract; 6(1)(a) consent (you initiate sign-in) |
| Device & app info | Platform, device model, app version, language. | Compatibility, support, product analytics. | 6(1)(f) legitimate interest |
| Approximate location | Country, derived from your IP address at connection time. We do not collect precise/GPS location. | Regional feature availability, aggregate analytics. | 6(1)(f) legitimate interest |
| Gameplay data | Match results, positions, playtime, achievements, activity days. | Run matches, track achievements/stats, product analytics. | 6(1)(b) contract; 6(1)(f) legitimate interest |
| Usage events | In-house analytics events (e.g. first launch, session start, game played, purchase made) linked to your account. | Understand and improve the game. | 6(1)(f) legitimate interest |
| Purchases | Which in-app item you bought (e.g. a tip), the amount and currency, and the transaction identifier. Payment itself is handled by Apple — we never see your card details. | Record support/tips, receipts, analytics. | 6(1)(b) contract; 6(1)(c) legal (tax/records) |
| Push token | A notification token issued by Apple/Firebase, if you enable notifications. | Send game notifications you opted into. | 6(1)(a) consent |
We do not collect your email address, contacts, photos, health data, precise location, or any special-category data, and we do not serve advertising.
Notifications are optional. If you enable them, we register a push token with Apple Push Notification service via Firebase Cloud Messaging (Google) to deliver them. You can turn notifications off at any time in your device settings; doing so stops all notifications.
We do not sell your personal data. We share data only with the service providers (processors) we need to operate the game:
Some of these providers are based in the United States. Where data is transferred outside the EU/EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
We keep your account and related data for as long as your account exists. Transaction records may be retained longer where required by law (e.g. tax/accounting). When you delete your account (see below), your personal data is erased; anonymised/aggregated data and legally required records may remain.
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You may also lodge a complaint with a supervisory authority (in Germany, your state Data Protection Authority).
You can permanently delete your account and all associated personal data from within the App: open your profile and choose Delete account. This is immediate and irreversible. You may also contact us at privacy@shopyzwei.de to exercise any of your rights.
Card Prophet is not directed at children under the age required for data processing in your country (16 in Germany, unless a lower age is set locally). We do not knowingly collect personal data from children below that age. If you believe a child has provided us data, contact us and we will delete it.
We use industry-standard measures (encrypted transport, access controls, EU-region hosting) to protect your data. No method of transmission or storage is completely secure, but we work to protect your information.
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, announced in the App.
For any privacy question or request: privacy@shopyzwei.de
This document is provided for the Card Prophet mobile app. ShopyZwei GmbH — Schlesischer Ring 13a, 45894 Gelsenkirchen, Germany.