Privacy Policy for the Mobile App “WestLeben”

This English version is provided for convenience. The German version is the legally authoritative version.

German version: WestLeben-Datenschutzerklärung

1. Controller

The controller responsible for data processing in connection with the mobile app “WestLeben” is:

Tamerlan Azaew
Alleestraße 1a
56727 Mayen
Germany

Email: westleben@itsec-dach.de

Legal Notice:
https://itsec-dach.de/weiteres/westleben-legal-notice.php

2. General Information on Data Processing

The mobile app “WestLeben” is a single-player game. We currently do not operate user accounts, our own servers for storing game progress, advertising networks, or analytics tools for the app.

The app currently does not transmit saved games, character data, or other gameplay data to us. Save files and game progress are stored locally on the user’s device.

However, personal data may be processed by third parties, especially by Google, when the app is installed through Google Play or when in-app purchases or DLCs are purchased or restored through Google Play.

3. Local Game and App Data

When using Westleben, save files and game progress are stored locally on the user’s device. This may include, in particular, the created character, game progress, inventory, relationships, in-game currency, unlocked content, settings, and similar game data.

This data is not stored on our own servers and is not transmitted to us. The local storage is used to provide the game functions and to allow the user to continue their game progress.

Local game and app data generally remains stored on the device until it is reset by the user within the app, removed by uninstalling the app, or deleted through functions of the operating system.

The legal basis is Art. 6(1)(b) GDPR, insofar as the processing is necessary to provide the app functions. Insofar as the processing serves the functionality, security, and usability of the app, the legal basis is Art. 6(1)(f) GDPR.

4. In-App Purchases, DLCs, and Restoring Purchases via Google Play

Westleben may offer paid additional content, in particular DLCs, through Google Play. Payment processing is carried out through Google Play or Google Payments. We do not receive complete payment data such as credit card numbers, bank details, or other complete payment information.

To unlock and restore purchased content, the app may process information about the purchase status and the purchased product. This includes, in particular, information about whether a specific DLC was purchased through Google Play and whether this content may be unlocked in the app.

The purchase process, payment verification, management of the Google account, and processing of payment data are carried out by Google. Google is responsible for this data processing. Google’s privacy policies and Google Payments notices apply.

Further information can be found at:
Google Privacy Policy
Google Payments Privacy Notice

The legal basis for the local processing of the purchase status within the app is Art. 6(1)(b) GDPR, as this processing is necessary to provide and restore purchased content.

5. No Own User Accounts

Westleben currently does not offer its own user accounts. Registration with the provider is not required. We do not collect names, addresses, email addresses, or passwords within the app for the purpose of creating a user account.

6. No Advertising and No Analytics Tools

Westleben currently does not use advertising networks or analytics tools to evaluate user behavior. We currently do not create tracking profiles.

7. No Location Data, Contacts, or Special Device Permissions

Westleben currently does not access location data, contacts, camera, microphone, calendar, photos, or similar personal content on the device.

8. Contact

If users contact us by email, we process the information transmitted in this context, in particular the email address, the content of the message, and any additional information provided voluntarily, solely for the purpose of handling the request.

The legal basis is Art. 6(1)(f) GDPR based on our legitimate interest in responding to inquiries. If the inquiry relates to the conclusion or performance of a contract, Art. 6(1)(b) GDPR is an additional legal basis.

Inquiries are deleted as soon as they are no longer required for processing and no statutory retention obligations apply.

9. Provision of This Privacy Policy and Web Hosting

This privacy policy is provided on our website. When accessing this website, technically necessary data may be processed by the web host, in particular the IP address, date and time of access, the accessed page, browser type, and technical access data.

The processing is carried out to provide the website, ensure technical security, and maintain the stability of the service. The legal basis is Art. 6(1)(f) GDPR.

10. Recipients of Personal Data

In connection with the use of the app, we currently do not transmit saved games or gameplay data to our own servers.

In connection with installation, updates, in-app purchases, and restoring purchases, personal data may be processed by Google. This particularly concerns Google Play and Google Payments.

If users contact us by email, the data generated in this context may be processed by the email and hosting service providers used by us.

11. Storage Period

Local save files and app data generally remain stored on the device until they are deleted or reset by the user or removed by uninstalling the app.

We store data from contact inquiries only for as long as necessary to process the inquiry or as long as statutory retention obligations apply.

The storage period for data processed by Google in connection with Google Play or Google Payments is governed by Google’s privacy policies.

12. Rights of Data Subjects

Data subjects have the following rights, subject to the applicable legal requirements:

Right of access to the personal data processed,
Right to rectification of inaccurate data,
Right to erasure,
Right to restriction of processing,
Right to data portability,
Right to object to certain processing operations,
Right to withdraw consent with effect for the future.

To exercise these rights, you may contact us at: info@itsec-dach.de

Insofar as data is processed exclusively by Google, in particular in connection with Google Play, Google Payments, or the Google account, rights should additionally be exercised directly against Google.

13. Right to Lodge a Complaint with a Supervisory Authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of personal data violates data protection law.

The competent supervisory authority may in particular be the data protection authority of the federal state in which the controller is established.

14. No Automated Decision-Making

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

15. Changes to This Privacy Policy

We reserve the right to update this privacy policy if the app, the data processing activities, or the legal requirements change.

Last updated: June 2026