Privacy policy

1. Controller

Controller for the processing of data (POEM‑Shop website and Color Duell Arena app):
Erol Mutlu
Zollernweg 26, 73760 Ostfildern, Germany
Phone: 01520 8832971
E‑mail: poemutlu@arcor.de

Legal representative: not applicable (private individual).
Data protection officer: none appointed (not required unless a legal obligation applies).

2. POEM‑Shop website

The website is provided via ordinary web hosting at STRATO. Technically necessary server log files may be created.

• Access data / server logs: IP address, date/time, requested URL, referrer, user agent, technical status data.
• Contact (e‑mail): the message you send voluntarily and any contact details you provide.

The website currently uses no own tracking cookies and no marketing profiles.

3. Color Duell Arena app

Color Duell Arena is one app. It does not require a user account and does not use its own online backend. There is no login, no registration, no online ranking and no server synchronisation via a proprietary server. Game progress and gameplay are not transmitted to the developer.

Certain information may be stored locally on the device where needed for gameplay. This includes in particular:

• display name / player profile
• settings (e.g. sound, haptics, left‑/right‑handed)
• save data
• level progress
• scores / personal bests
• play history / 365‑day history
• title and belt progress
• pause joker
• unlock / purchase status

These data generally remain local on the device. The selected language is currently not stored permanently. Location data, contacts, photos, camera, microphone or Bluetooth data are not processed. Push notifications are not used.

4. Premium purchase via Apple / in‑app purchase

Basic / free includes Level 1. Premium / purchase unlocks the full scope with all 5 levels. There is no subscription and no recurring charges.

Unlocking / premium use is handled with Apple StoreKit. Purchases and restorations are processed via the Apple App Store. Payment and billing data are processed by Apple. POEM‑Shop does not receive full payment details. Store operators may process in particular:

• store account information
• device information
• transaction data
• payment information
• purchase history

The developer does not receive full credit card or bank details. There is no own purchase‑status server and no own store backend of the developer. A purchase entitlement obtained via Apple is tied to the respective Apple account.

5. No advertising, no tracking

• no tracking
• no advertising SDKs
• no IDFA use
• no third‑party analytics
• no personalised advertising
• no marketing profile
• no location‑based advertising
• no external crash reporting

The website may process technically necessary hosting / server logs (see section 2). Support e‑mails are used to handle the request.

6. Purposes

• Website: providing the pages, technical operation, handling e‑mail enquiries.
• App: providing gameplay and local storage of game and profile data on the device.
• Stores: processing a possible one‑time premium purchase via Apple StoreKit.
• Support: handling requests by e‑mail.

7. Legal bases (GDPR)

• Art. 6(1)(b) GDPR: performance of a contract / providing requested website and app features and a possible store purchase.
• Art. 6(1)(f) GDPR: legitimate interests (secure website operation, IT security, support, technically necessary server logs).
• Art. 6(1)(a) GDPR: consent (only if tracking, analytics or marketing SDKs are added in the future; currently not active).

8. Recipients / third parties

• Website hosting: STRATO (hosting provider). Access data / log files may be processed.
• App stores / payments: Apple App Store / StoreKit (payment processing by Apple; POEM‑Shop does not receive full payment details).
• Other services: currently no analytics or advertising SDKs (as of September 2026).

International transfers: Apple services may involve processing in third countries. Apple’s privacy information then applies.

9. Retention and deletion

• Website logs: according to the hosting provider; typically days to weeks (security / troubleshooting).
• Support e‑mails: as long as necessary; then deleted/archived (e.g. up to 6 months) unless statutory retention applies.
• App local data: on the device until reset in the app, removed by the user, deleted by uninstalling, or removed by the operating system.

Local game and profile data can be reset in the app. Store purchase entitlements are separate from this and are tied to the respective store account.

10. Your rights

You may have rights of access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with a supervisory authority.

11. Minors

The game is intended for a general audience. If minors use the app, it should be with parental guidance as appropriate. There are no special features aimed at children. Please do not provide unnecessary personal data.

12. Tracking & cookies

• Website: no own tracking cookies (static site).
• App: no tracking, no analytics, no advertising identifiers used by the app (as of September 2026).

If analytics, personalised advertising or external media embeds (e.g. YouTube) are added in the future, this notice will be updated and consent will be obtained where required.

13. Security

We use appropriate measures within the available technical possibilities to protect the website and the app (e.g. access restrictions and device‑side isolation of local app data). Absolute security cannot be guaranteed for software and IT systems.

Internal debug / test versions may create local diagnostic information. This information is not transmitted to the developer and is not part of regular release use.

14. App store note

Apple (and later Google, if applicable) require a publicly accessible privacy policy URL and consistent “app privacy” disclosures. Public privacy URL: https://poem-shop.com/legal/datenschutz.html

15. Updates

This policy will be updated if the processing of data changes substantially (e.g. through user accounts, cloud features, advertising, analytics or an own backend).