SD LogoNightshift Studio

App Privacy Policy

Puzzle Collector – Last updated: August 2026

Puzzle Collector is designed as a local collection app. Your puzzle data, images and solving times generally remain on your device. This policy explains which data is processed locally and when external services are involved.

1. Controller

The controller under the General Data Protection Regulation (GDPR) for the “Puzzle Collector” app is SD Nightshift Studio. Full contact details are available in our Legal Notice.

2. Core principle: a local collection without an account

The app does not require registration and does not create a user account with us. You are not asked for a name, email address or login details.

Your collection content is stored locally inside the protected app area of your device. This includes, in particular, title, brand, series, artist, piece count, dimensions, article number, barcode, ownership and solving status, storage location, notes, colours, dates, images, solving times and session notes. App settings such as language, appearance and export templates are also stored locally.

We do not operate our own cloud for this content and cannot access it. Processing is necessary to provide the app function you request (Article 6(1)(b) GDPR).

3. Camera, photo library, barcode and text recognition

With your permission, Puzzle Collector uses the camera to capture puzzles, boxes, barcodes or printed details. You may also select images from your photo library. Permission is used only when you open the relevant feature.

Barcode and text recognition run directly on your device. Android uses Google ML Kit's locally bundled text model, while iOS uses Apple's Vision framework. Images, image crops, recognised text and barcodes are not uploaded to a text-recognition server. Temporary captures and crops are removed after completion or cancellation; images you choose to keep remain in the app area.

The legal basis is performance of the app function you request (Article 6(1)(b) GDPR). You can revoke camera or photo access in your system settings at any time.

4. Optional usage analytics with Firebase Analytics

Firebase Analytics is technically disabled on first launch and is enabled only if you expressly agree. The app remains fully usable if you decline. You can change your choice in Settings at any time.

When analytics is enabled, we process technical usage data and a random app-instance identifier. The app logs only these custom events: onboarding started and completed with entry method; adding a puzzle started with whether the camera opens; selected capture method; puzzle saved with image count and a broad piece-count range; purchase screen viewed; and purchase started or completed. Firebase may additionally process automatically collected device, app, session and screen-view data. IP addresses are technically processed during transmission.

Firebase does not receive puzzle titles, brands, barcodes, article numbers, notes, storage locations, images, recognised text, exact solving times or the contents of exports and backups. The app does not set its own user ID and does not use analytics data for advertising.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC and affiliated companies in third countries, particularly the United States, cannot be ruled out. Learn more at Firebase Privacy and Security and in the Google Privacy Policy.

Legal basis: your consent (Article 6(1)(a) GDPR and, where applicable, Section 25(1) of the German TDDDG). Withdrawal applies to future processing; data already processed lawfully remains until the applicable deletion period expires. Event-level user data is retained for 14 months in our Firebase configuration and then automatically deleted.

5. In-app purchase and RevenueCat

The free collection is limited to 10 of your own puzzles stored at the same time. An unlimited collection can be unlocked permanently with a one-time in-app purchase. We use RevenueCat (RevenueCat, Inc., United States) and the Apple App Store or Google Play Store to display the offer, process the entitlement and restore purchases.

RevenueCat receives an automatically generated anonymous App User ID; technical information such as device type, operating system, app and SDK version; and transaction data including store, product, purchase time, receipt or purchase token, and entitlement status. We do not send a custom account ID, email address or any puzzle-collection content. RevenueCat processes data on our behalf and may store it on servers in the United States. See the RevenueCat Privacy Policy.

Payment is handled exclusively by the relevant store. Neither we nor RevenueCat receive full payment details such as card or bank-account numbers. The privacy terms of Apple or Google also apply.

Legal basis: steps prior to entering into a contract and performance of the contract (Article 6(1)(b) GDPR), plus our legitimate interest in reliable purchase verification and preventing misuse (Article 6(1)(f) GDPR). Purchase and evidence data is retained for as long as needed to provide and restore the permanent entitlement and to satisfy statutory record-keeping obligations.

6. Exports, sharing and backups

PDF, CSV, sale and backup files are created locally on your device. Only when you use the share feature or choose a destination does the operating system pass your selected file to a recipient, another app or a cloud service.

A backup may contain puzzle metadata, images, solving sessions and app settings. You are responsible for sending files only to trusted recipients and storing them in a suitable location. Once transferred, the privacy terms of your chosen service apply. We receive neither the file nor information about its recipient.

7. Store rating prompt

After extended use, the app may request Apple's or Google's system rating prompt. The store decides whether it is displayed and whether you submit a rating. The app does not tell us whether or how you rated it.

8. Permissions

  • Camera: for puzzle photos, barcodes and printed details.
  • Photo library: to add images you select to a puzzle locally.
  • Internet access: for optional Firebase analytics, purchase offerings, purchase verification and restoration through RevenueCat and the stores.
  • Files/sharing: only for imports, exports and backups you initiate through the system picker.

9. Retention and deletion

Local puzzle data remains until you delete individual puzzles, images or solving sessions in the app, or uninstall the app. The effects of device or cloud backups provided by your operating system depend on your Apple or Google settings and are outside our control.

Files and backups you export are not automatically removed when you delete data in the app. Delete them separately at their chosen location. Data held by Firebase, RevenueCat and store operators is retained for the purposes and periods described above.

10. Recipients and international transfers

Depending on how you use the app, recipients of personal data may include Google/Firebase, RevenueCat, Apple or Google as store operators, and any apps, cloud services or people you select yourself. Where providers process data outside the European Economic Area, transfers are made under the conditions of Articles 44 et seq. GDPR, particularly an adequacy decision or the EU Standard Contractual Clauses where applicable.

11. Your rights

Where the legal conditions are met, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20) and objection (Article 21). You may withdraw consent at any time with effect for the future.

Because we do not maintain an account or receive your collection content, we cannot associate local data with you. You can view, correct, export and delete it directly in the app. For requests concerning externally processed data, contact us using the details in the Legal Notice.

You also have the right to lodge a complaint with a data-protection supervisory authority.

12. Minors

Puzzle Collector is not specifically directed at children. Users under 16 may enable optional usage analytics only with permission from a parent or guardian, unless applicable law provides a different age threshold.

13. Changes

We update this Privacy Policy when functions, services or legal requirements change. The version published here applies; the date above indicates the latest revision.