Shingoki needs no account, no email address and no password. You only pick a display name for the leaderboards. We never learn who you are.
The app shows ads through Google AdMob and is funded by them. Ads can be removed permanently with a one-time in-app purchase.
For personalised ads we ask you first — through Google's consent dialog and, on iOS, through Apple's tracking prompt as well. If you decline you still see ads, just not personalised ones. Everything else works exactly the same.
We run no tracking and no usage analytics. No Firebase, no Google Analytics, and no product events of our own either: the app does not record how you play.
Pascal Dohmeier
Gustav-Müller-Strasse 20A
10829 Berlin, Germany
Email: pathfindermemory.support@gmail.com
Phone: +49 160 95861111
No data protection officer has been appointed; the conditions of Art. 37 GDPR and § 38 BDSG are not met. For anything concerning data protection you can reach me directly at the details above.
Your statistics, your streak, a paused game including the lines you have drawn and its undo history, your settings (language, appearance, sound, haptics, reminder, error display) and the list of players you have blocked. All of this is stored only in the app's local settings on your device. It is not transmitted and disappears when you delete the app.
Keeping the block list local is deliberate: blocking is a personal “I don't want to see this” and nobody's verdict — so it works offline and hides no one from other players.
So that the leaderboards and moderation can work at all, the following data is transmitted and stored:
| Data | Purpose | Legal basis |
|---|---|---|
| Random installation identifier (UUID), created on first launch | Links your results to your installation. No device name, no advertising ID, no hardware identifier — it is randomly generated and connected to nothing outside this app | Art. 6(1)(b) GDPR |
| Display name you choose | Shown on the public leaderboards | Art. 6(1)(b) GDPR |
| Daily puzzle result: date, board size, time taken, number of hints used | Daily, weekly and monthly leaderboards | Art. 6(1)(b) GDPR |
| Practice puzzle result: the shareable puzzle code, board size, time, number of hints used | The board for that one puzzle — reachable only from its own end screen | Art. 6(1)(b) GDPR |
| Streak (current and best run of solved days) | Streak leaderboard and the display in the app | Art. 6(1)(b) GDPR |
| Reports about display names | Moderation of offensive names — the App Store requires a report and filter function for public name lists | Art. 6(1)(f) GDPR |
| IP address, for the duration of the request | Technically unavoidable for any server access; processed for operation and abuse prevention and not stored with your profile | Art. 6(1)(f) GDPR |
What is not listed here, we do not collect: the app does not transmit how long you sat with a puzzle without solving it, which lines you drew, how often you restarted, or when you open the app. A puzzle you do not solve leaves no trace on the server.
Processor: Supabase Pte. Ltd, 65 Chulia Street #38-02/03,
OCBC Centre, Singapore 049513. The database runs in region
eu-central-1 — Frankfurt am Main, Germany. A data
processing agreement under Art. 28 GDPR forms part of Supabase's terms of service
and is therefore concluded; it incorporates the EU Standard Contractual Clauses
(see section 9).
Provider for the European Economic Area: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Ads appear in exactly two places: once when you leave the end screen of a solved daily puzzle, and as an optional video when you ask for a hint. Practice mode has no forced ads.
To deliver, measure and protect ads against fraud, Google processes among other things:
Google may also use this data across apps to build profiles. That is precisely why we ask first.
Your consent can be withdrawn at any time, without giving reasons, through the privacy options in Google's consent dialog. Apple's tracking permission is changed under iOS Settings → Privacy & Security → Tracking. A withdrawal takes effect from that moment; processing carried out before remains lawful.
Turning ads off entirely: the one-time in-app purchase “Remove ads”. After that the ad SDK is no longer loaded and no ad data is collected. You then get hints without a video.
More information: Google's privacy policy, “How Google uses information from sites or apps that use our services” and Google's data transfer frameworks.
The “Remove ads” purchase is handled by Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland). We receive no payment data and no personal data about you — the app only asks Apple whether a purchase exists for this Apple account. What Apple itself processes is described in Apple's privacy policy.
The app requests only two permissions, each only when it is needed, and each can be declined:
| Permission | What for | If you decline |
|---|---|---|
| Notifications | An optional daily reminder at 10:00 about the daily puzzle | Everything keeps working, just without the reminder. The reminder is scheduled locally on your device — nothing is sent to a server for it, not even to Apple |
| Tracking (Apple's advertising-ID prompt) | Personalised ads | You still see ads, just not personalised ones. The advertising ID is then not accessed |
The app does not request camera, microphone, photos, contacts, location or health data and cannot access them.
If you write to the email address above, we process your message and sender address in order to answer it (Art. 6(1)(f) GDPR, for contractual matters (b)). We delete such messages once the matter is settled and no retention obligation applies. Delivery runs through Google (Gmail) as the email provider.
This site is static — no cookies, no login, no analytics, no ads, no embedded third-party fonts or scripts. It is hosted on GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). For technical reasons GitHub logs the visitor's IP address for security and operational purposes; we have no influence over this and no access to it. Legal basis for operating the site: Art. 6(1)(f) GDPR (legitimate interest in a reachable information page, which § 5 DDG obliges us to provide anyway). Details in GitHub's privacy statement.
| Recipient | Country | Basis |
|---|---|---|
| Google (advertising) | USA | European Commission adequacy decision on the EU-US Data Privacy Framework, in which Google participates, and additionally EU Standard Contractual Clauses under Art. 46(2)(c) GDPR |
| Supabase (database) | Singapore (contracting party); storage in Frankfurt am Main, Germany | EU Standard Contractual Clauses under Art. 46(2)(c) GDPR, part of the data processing agreement |
| GitHub (hosting this website) | USA | EU-US Data Privacy Framework and EU Standard Contractual Clauses |
| Apple (in-app purchase) | Ireland, EU | No third-country transfer by us |
We deliberately name both bases for the USA. The adequacy decision on the Data Privacy Framework is in force but subject to pending proceedings before the European courts; the Standard Contractual Clauses carry the transfer even if it were to fall away.
| Data | Duration |
|---|---|
| Profile, display name, results, streak | Until you delete your profile (see section 13). Without deletion: for as long as the app is operated |
| Reports about display names | Until the case has been handled; deleted afterwards |
| IP address at the server | Only for the duration of the request, or in short-lived operational logs |
| Data on your device | Until you delete the app |
| Ad data at Google | According to Google's own periods — see Google's privacy policy |
You are not obliged to provide any data, and there is no statutory or contractual requirement to do so. The game itself works entirely without a server connection — puzzles are generated on your device, not downloaded. Anyone who prefers not to transmit anything simply does without the leaderboards. As for ads: without consent you see non-personalised ads; to have no ads at all there is the “Remove ads” purchase.
Delete your profile — right in the app, without asking us: Settings → “Profil löschen”. Display name, all leaderboard entries, your streak and your reports are removed from the server and the name becomes available again. You then continue as a new, anonymous player.
Beyond that you have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21), as well as the withdrawal of consent given (Art. 7(3)).
A practical note: we know you only by the random installation identifier. For an access request or a deletion we therefore need your display name — otherwise we cannot locate your profile, and we do not want to guess it from other traits.
You may also lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). The competent one is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
Phone: +49 30 13889-0 · Email:
mailbox@datenschutz-berlin.de
The app is not directed at children and is not classified as a kids app in the App Store categories. It does not ask for an age and collects no data that would indicate one. Display names are filtered automatically and can be reported by anyone; blocked players no longer appear on any leaderboard.
We update this policy when the processing changes — for instance because a service is added or removed. The date at the top shows the current version. We announce material changes in the app.