This is a translation for convenience. The German version is the binding one.
Privacy policy
This policy covers the website konter-duell.de and the Android app KONTER! – Puzzle RPG.
1. Controller
Niklas Erichsen
Sole proprietor, trading as Moxvale Games
Ulstruper Weg 11
24960 Glücksburg
Germany
E-mail: support@konter-duell.de
2. The website
Hosting and access data. The domain and website are with IONOS. When you open a page, IONOS processes technical access data such as your IP address, the time and the page requested. This serves the operation and security of the website. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). A data processing agreement with IONOS is in place.
No cookies, no tracking. The website sets no cookies, uses no browser storage, contains no scripts or analytics and loads nothing from other servers. Fonts and images are on the same web space.
E-mail to us. If you write to support@konter-duell.de, we process your address and message to reply to you (Art. 6(1)(b) or (f) GDPR). The mailbox is with IONOS.
3. The app: your account
You need an account to play. For this we process, through Supabase (section 6):
- E-mail address and password for registration and sign-in. The password is not stored in plain text.
- Confirmation code: after registering you get a code by e-mail to confirm your address.
- Player name in your profile.
- Hero and onboarding progress: the chosen appearance, your hero's name, and whether you finished or skipped the welcome and the tutorial battle. This is kept in your account's metadata.
- Technical access data such as IP address and time, which arise when connecting to the server and are logged there.
The legal basis is providing the game and your account (Art. 6(1)(b) GDPR); logging serves the security of the service (Art. 6(1)(f) GDPR). An e-mail address and password are required to use the game.
4. The app: what stays on your device
Your game progress is kept only in the app's private storage on your device and is not sent to us: progress in the campaign, Rune Tower and trials, bag and equipment, materials, Gold and PRISMEN, missions, achievements and settings. There is no cloud backup, and Android backup is switched off. If you uninstall the app, your progress is gone.
To keep you signed in, the app stores a sign-in token on your device, encrypted with a key derived from the device identifier. The device identifier itself does not leave your device for this.
5. The app: purchases, advertising, analytics
Purchases. During the test phase, purchases run through Google Play Billing. Google is the contracting party for the payment and responsible for your payment data; we receive no payment data. The app receives a purchase record with product and identifier from Google and stores it on your device. It is not sent to our servers. See Google's privacy policy.
No advertising, no analytics. The app contains no advertising, no analytics services and no crash reporting of its own.
Google Play. If you get the app through Google Play, Google processes data for this on its own responsibility. Google may show us aggregated stability data in the Play Console.
6. Service providers
| Service | Task | Data | Basis |
|---|---|---|---|
| IONOS | Domain, website, mailbox | Website access data, e-mails to us | Data processing agreement |
| Supabase Pte. Ltd. | Sign-in, account, profile. Database in the West EU region (Paris, France) | E-mail address, password hash, player name, account metadata, access data | Data Processing Addendum, Version 1 of 1 August 2026 |
| Resend (Plus Five Five, Inc., USA) | Sending the sign-in e-mails on behalf of Supabase | E-mail address, e-mail content with the code, delivery data | Data Processing Addendum, as of 31 December 2025 |
7. Transfers outside the EU
Our database is in France. That does not mean all processing takes place in the EU.
- Supabase is based in Singapore and uses further sub-processors (current list). Where data is processed outside the EU, the EU Standard Contractual Clauses in the agreement with Supabase apply (Data Processing Addendum).
- Resend processes data mainly in the United States. The basis is the EU Standard Contractual Clauses incorporated into the agreement; the agreement also refers to the EU-US Data Privacy Framework (Data Processing Addendum).
8. Retention
- Account, player name, hero: for as long as your account exists. They are deleted when the account is deleted.
- Access and security logs, delivery data: for as long as the respective providers keep them under their own periods.
- E-mails to us: for as long as we need them for your request, and beyond that only where statutory retention duties apply.
- Data on your device: until you uninstall the app or clear its data.
9. Deleting your account
You can delete your account in the app, or without the app by e-mail. The process and what happens is described under Delete account.
10. Security
The connection between app and server is encrypted (HTTPS). On the server, players can only access their own account data.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Write to support@konter-duell.de.
You can also complain to a data protection supervisory authority. The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, Germany, datenschutzzentrum.de.
12. Age
KONTER! – Puzzle RPG is intended for people aged 14 and over. If you are younger, please do not create an account.
13. Changes
We add new features that affect further data here before they start. Last updated: 8 November 2026.