Privacy Policy

1. Controller

Maik Schmidt
MaiSolutions
An der Schönau 2
22929 Schönberg
Germany
Email: hi@the-terra-incognita.app

2. Overview of Data Processing

Types of Data Processed

  • Usage data (e.g., pages visited, access times)
  • Meta/communication data (e.g., IP addresses, browser type)
  • Account data (e.g., user ID, email address upon registration)
  • Health data (step count data via Apple HealthKit / Google Health Connect)
  • Game data (game progress, map state, building levels, resources)

Categories of Data Subjects

  • Website visitors
  • Mobile app users

3. Legal Basis

  • Performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary for the provision of the app and game services.
  • Consent (Art. 6(1)(a) / Art. 9(2)(a) GDPR): For the processing of health data (step counter), we obtain explicit consent.
  • Legitimate interests (Art. 6(1)(f) GDPR): Provision and security of the website and app.

4. Website

4.1 Hosting

This website is hosted on Firebase Hosting (Google Ireland Limited). When you visit the website, the following information is automatically stored in server log files:

  • IP address
  • Date and time of the request
  • Requested URL
  • Browser type and version
  • Operating system

Legal basis: Art. 6(1)(f) GDPR. Google may also process data in the USA. The basis for third-country transfer is the EU-US Data Privacy Framework.

4.2 Fonts

This website uses the "Montserrat" font. The font files are served directly from our own server and are not embedded from any external service. In particular, no connection to Google servers is established and no IP address is transmitted to Google.

Legal basis: Art. 6(1)(f) GDPR.

4.3 Local Storage

We store your language preference and your cookie choice in your browser's localStorage. This is technically necessary to keep your preferences across visits. No cookies are set for this storage itself.

Legal basis: Art. 6(1)(f) GDPR.

4.4 Web Analytics (Google Analytics)

With your consent, we use Google Analytics 4, a service of Google Ireland Limited, to statistically analyze how our website is used. Google Analytics sets cookies and processes data such as a truncated IP address, pages visited, time on site, and your approximate location.

This processing only takes place if you have agreed in the cookie banner. Without consent, Google Analytics is not loaded and no analytics cookies are set. You can change or withdraw your consent at any time with effect for the future:

Legal basis: Art. 6(1)(a) GDPR (consent). Google may also process data in the USA. The basis for third-country transfer is the EU-US Data Privacy Framework. More information: Google Privacy Policy

5. Mobile App (Terra Incognita)

5.1 Registration and User Account

Using the app requires registration via Firebase Authentication. Data processed: email address, user ID (auto-generated), time of registration.

Sign-in is passwordless. Instead of a password, we send a one-time login or confirmation code to your email address. To deliver these emails we use the service Resend (see section 6.2).

Legal basis: Art. 6(1)(b) GDPR.

5.2 Health Data (Step Counter)

The app reads step count data from Apple HealthKit (iOS) or Google Health Connect (Android), used exclusively to calculate game progress.

  • Only aggregated step counts are transmitted, not detailed health profiles.
  • Processing only occurs after explicit consent through the operating system's permission prompt.
  • Consent can be revoked at any time in the device's system settings.

Legal basis: Art. 9(2)(a) GDPR (explicit consent for health data).

5.3 Game Data

We store: game progress, resources and building levels, explorations, full version status.

Legal basis: Art. 6(1)(b) GDPR.

5.4 In-App Purchases

The full version is a one-time in-app purchase, processed exclusively through Apple App Store or Google Play Store. There is no subscription. We do not receive payment data, only the information whether the full version has been purchased. Privacy policies of Apple and Google apply.

5.5 Push Notifications

If you enable notifications in the app, we send you push messages (e.g. reminders and alerts about completed in-game actions). For this we use Firebase Cloud Messaging (Google Ireland Limited). A device-specific push token is generated and stored on our server for as long as at least one notification type is enabled. If you disable all notifications, the token is deleted.

You can withdraw your consent at any time in the app or in your device's system settings. Legal basis: Art. 6(1)(a) GDPR (consent).

6. Third-Party Data Processing

6.1 Firebase / Google Cloud Platform

We use Firebase services (Google Ireland Limited): Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, Cloud Messaging. Server location: europe-west3 (Frankfurt, Germany). Firebase Privacy Policy.

6.2 Resend (Email Delivery)

To send login and confirmation codes (passwordless sign-in) we use the email service Resend (Resend, Inc., USA). Only your email address and the respective one-time code are transmitted to Resend. Processing takes place in the Ireland region (eu-west-1). Legal basis: Art. 6(1)(b) GDPR. As a US-based provider, a third-country transfer may occur, based on the EU Commission's Standard Contractual Clauses. More information: Resend Privacy Policy.

7. Data Retention

  • User account and game data: Stored as long as the account exists. Deleted within 30 days upon account deletion.
  • Server log files: Automatically deleted after 30 days.
  • localStorage: Remains until manually cleared.

8. Your Rights

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent (Art. 7(3) GDPR)

Contact: hi@the-terra-incognita.app

9. Right to Lodge a Complaint

Supervisory authority: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany. www.datenschutzzentrum.de

10. Changes

We reserve the right to update this privacy policy. The current version is always available on this page.

Last updated: September 2026