Equazy1. Who we are
In short: We make the app and look after your data. Write to us with any questions.
Equazy is an app made by alexma (Alexma, sole proprietorship, CVR 30954580, Denmark). Alexma is the data controller for the personal data processed when you use the app and this website. Contact: hello@alexma.app.
2. What we collect and why
In short: We know your username, your country and how you play. Not who you are.
| Data | Why |
|---|---|
| An anonymous account ID, created automatically. No email, phone number or password. | So your games and stats belong to you. |
| Your username | So opponents can see who they play, and so you can appear on leaderboards. |
| Country, taken from your phone’s region setting (you can change it in Profile) | Country leaderboards. |
| Game data: games, moves, scores, stats and rating | To run the game and show your stats and leaderboards. |
| Push token, only if you allow notifications | To tell you when it’s your turn. Game messages only, never marketing. |
| Reports and blocks you make | To handle offensive usernames and let you avoid certain players. |
Product events inside the app, such as app_open and game_started | To see whether the game works and how it is used. Only inside Equazy; no tracking across other apps or websites by us. |
| An Apple App Attest key (device verification) | To check that requests come from the real app and not from cheating tools. |
| Crash reports via Sentry, without your name or email | To find and fix bugs. |
| Purchase confirmation from Apple (no card details) | To remove ads for you after the one-time in-app purchase. |
| Advertising data handled by Google AdMob: device and app information, IP address, approximate location derived from it, ad interactions and, only if you allow tracking, your device’s advertising identifier (IDFA) | To show ads that keep the game free, limit how often you see the same ad, and prevent ad fraud. See section 3. |
| IP address in short-lived server logs | Security: preventing code guessing, abuse and overload. |
We do not collect your name, email address, phone number, contacts or precise location.
3. Ads, consent and tracking
In short: Ads keep Equazy free. You decide whether they may be personalised, and one purchase removes them.
Equazy is free and paid for by ads, shown with Google AdMob. You see a small banner on the home screen and a full-screen ad after some games. Ads are never shown during a game.
- Google’s consent dialog. In the EU/EEA, the UK and Switzerland, the app shows Google’s consent dialog (User Messaging Platform) before ads are personalised. You can say yes or no, and you can change your choice later through the privacy and consent options in the app.
- Apple’s tracking prompt. iPhone asks whether Equazy may track you (App Tracking Transparency). Only if you allow it can AdMob use your advertising identifier (IDFA). You can change this at any time in Settings → Privacy & Security → Tracking.
- If you say no, you still see ads, but they are non-personalised or limited. Google may still process some data, such as your IP address and device information, to deliver ads, count them and prevent fraud.
- Removing ads. After the one-time in-app purchase, the app stops requesting ads.
For parts of the ad processing, Google acts as an independent controller. You can read how Google uses data from apps that use its services at policies.google.com/technologies/partner-sites.
4. In-app purchases
Payment is handled entirely by Apple through your Apple ID. We never see your card details. Apple sends the app a confirmation of the purchase, which we use to switch off ads. Apple processes the purchase under its own privacy policy.
5. Legal basis (GDPR)
In short: Most of it is needed for the game to work. Notifications and personalised ads are your choice.
- Contract (Art. 6(1)(b)): account, username, game data, stats, leaderboards and unlocking your purchase. This is the service itself.
- Consent (Art. 6(1)(a)): notifications, personalised ads and access to your advertising identifier. You can withdraw consent at any time in the app or in your iPhone’s Settings. Withdrawing does not affect processing that already took place.
- Legitimate interest (Art. 6(1)(f)): crash reports, product events, device verification, abuse protection, handling reports, and showing non-personalised ads to keep the game free. You can object; see section 9.
6. Who we share data with
In short: Only the companies that make the app run get your data. We don’t sell it.
| Provider | Role | Location |
|---|---|---|
| Supabase | Database and game server | EU (Stockholm, Sweden) |
| Sentry (Functional Software, Inc.) | Crash reports | EU (Germany) |
| Apple | Push notifications, App Attest and in-app purchases | USA/EU |
| Google (AdMob) | Ads and ad measurement | USA/EU (global) |
| Vercel | Hosting this website | USA/EU (global network) |
| Cloudflare | DNS for our domain | Global network |
Supabase, Sentry and Vercel process data only on our behalf (as processors). Where data is transferred outside the EU/EEA, this is based on the EU Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, where the provider is certified.
We never sell your data.
8. How long we keep data
In short: We keep data only as long as we need it. Delete your account and it’s gone.
| Data | Kept for |
|---|---|
| Account, username, game data, stats, rating | As long as you have the account. Deleted when you delete it. |
| Finished games against other players | Kept for your opponent, but without your name (“Deleted player”). |
| Push token | Until you delete your account or the token stops working. |
| Product events | Up to 24 months (deleted with your account). |
| Crash reports | Up to 90 days. |
| Purchase confirmation | As long as you have the account. |
| IP addresses in logs and abuse protection | From 1 day up to 30 days. |
| Reports about other players | Until handled, up to 12 months. |
| Advertising data at Google | According to Google’s own retention rules. |
9. Your rights
In short: It’s your data. You can see, correct or delete it at any time.
You have the right to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw consent.
- Change your username and country in the app under Profile.
- Delete your account in the app: Profile → Delete account. Everything is deleted straight away. See Delete account.
- For anything else, email hello@alexma.app. We reply within 30 days.
You can complain to the Danish Data Protection Agency (datatilsynet.dk) or the data protection authority where you live.
10. Children
Equazy is not directed at children under 13, and we do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, write to us and we will delete it.
11. Security
All traffic is encrypted (HTTPS). Access to data is restricted so each player can only see their own games and data, and game results are decided on the server. No system is 100% secure. If a breach affects your data, we will tell you as the law requires.
12. Changes
We update this policy when the app changes. The date at the top shows the latest version. We will tell you about important changes in the app.
13. Contact
Alexma · CVR 30954580 · Denmark · hello@alexma.app