1. Controller and scope
The controller for the processing described below is Noel Tim Geldschläger, Boocord Studios, Dietrich-Bonhoeffer-Straße 6, 70794 Filderstadt, Germany. Contact: noel@boocord.com, telephone +49 (0) 151 29004766.
This policy covers the Ninja Splash app, its game server, the Boocord Music integration offered in the app and the legal and support pages at boocord.com/ninjasplash. It describes our processing. Apple's own processing and services you visit separately are also covered by their respective privacy notices.
2. Purposes and legal bases
We process personal data to provide the game features you request, respond to enquiries, protect the service and resolve faults. Where processing is necessary to perform a contract or take pre-contractual steps you request, the legal basis is Article 6(1)(b) GDPR. Necessary security measures and reliable website operation are based on Article 6(1)(f) GDPR; the respective legitimate interests are set out below. Processing required by law is based on Article 6(1)(c) GDPR.
Where processing requires separate consent, that consent will be obtained before the processing; the legal basis is then Article 6(1)(a) GDPR. This privacy policy and agreement to terms of use do not, by themselves, constitute such consent.
3. Website, language and local font files
When you visit these pages, the web server receives the access data required to deliver them. This may include your IP address, time of access, requested address, HTTP status, amount of data transferred, browser and operating system details and any referrer transmitted by your browser. These data are used to deliver, stabilise and secure the website and diagnose faults. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and functional operation of the website.
The font, images, stylesheets and language script are loaded from this same website. Loading the font does not connect to Google Fonts. On these legal pages, we do not use analytics or marketing services, tracking pixels, cookies or persistent browser storage to recognise visitors.
The language script evaluates your browser's language preferences locally and opens the German or English version. You can choose a language manually using the language links; your choice is carried in the page address and is not saved in a cookie. We do not create a language profile on our server. Like other requests, the selected page address may appear in technical access data. Without JavaScript, both versions remain accessible through their links.
4. Local play and device storage
The app stores data on your device, including saved games, progress, game currencies, unlocked characters and skins, your selected profile appearance, game statistics and audio, graphics and language settings. No separate Boocord user account is required for this. Local play does not send your local saved game to our game server.
The technically necessary storage of and access to these data enable game features you expressly request, under section 25(2), no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). To the extent that the data are personal data, the legal basis is Article 6(1)(b) GDPR. Independently of an offline round, enabled Apple synchronisation, an existing online connection or a music or code feature you use may establish network connections.
We do not integrate advertising networks, advertising identifier analysis or cross-provider marketing trackers into the app. Operating system backups you enable and Apple's own diagnostic processing are separate from this.
5. Game Center and saved game synchronisation
When you are signed in to Game Center, Apple provides the app with data including your Game Center display name, game-related identifiers and proof of identity. These data come from Apple. The display name is used in the game; Ninja Splash does not provide its own freely editable name field or a chat. We do not receive your Apple password.
When synchronisation is enabled, the app synchronises saved games, including progress, unlocks and profile data, through the private CloudKit database in your iCloud account and, where enabled and available, Game Center saved games. Apple's saved game services are separate from the online account on our game server. Turning off synchronisation does not automatically remove data already stored with Apple.
Our processing enables the sign-in and synchronisation features you request and is based on Article 6(1)(b) GDPR. Apple's own services and processing are covered by the Apple Privacy Policy and the Game Center privacy notice. Apple provides settings and deletion options for your Apple account.
6. Online play, leaderboards, friends and parties
For online features, the game server processes an internal player identifier, a friend code, a mapping derived from the game-related Game Center identifier, the display name, account administration data, trophies, wins and match counts. It also processes friendships, requests, personal blocks, party memberships, invitations, the selected character and cosmetic choices, as well as inputs, connection states and results of online rounds.
These data enable sign-in, matchmaking, leaderboards, shared parties, server-side game simulation and the correct allocation of results. The legal basis is Article 6(1)(b) GDPR. Other players receive the display names, player identifiers or friend codes and visible profile, leaderboard, party or match information provided for these features. Credentials and session tokens are not shown to other players as profile information. Party visibility controls who can find or join a group.
If a connection is lost, a bot may temporarily take over the existing character. Matchmaking, bot control and score calculation are automated game features; they do not constitute decisions producing legal or similarly significant effects within the meaning of Article 22 GDPR. We do not create advertising profiles.
7. Technical connection and abuse prevention
IP addresses and technical connection data are processed to deliver requests and game states and to limit abusive access. Authentication proofs and time-limited session authorisations allow access to be associated with the authorised account. The game server application keeps IP-based rate limits and sessions in memory. Infrastructure logs are separate from this.
Processing required for the connection is based on Article 6(1)(b) GDPR. Additional access checks and abuse prevention are based on Article 6(1)(f) GDPR; our legitimate interest is the protection of accounts, infrastructure and fair gameplay.
The website and the Boocord API requests for music, codes and server discovery use HTTPS. The current game server connection may use HTTP and UDP without transport encryption. Game, profile and session data transmitted over these connections are not protected against interception throughout their transmission. The app does not request Apple passwords or payment details for this connection. This information does not constitute consent to waive statutory data protection or security requirements.
8. Redeeming unlock codes
When you redeem a code, the app sends the entered code and a pseudonymous redemption identifier associated with the relevant saved game to the code service at api.boocord.com. IP addresses and access data are also technically involved. Processing is used to check the code, associate the unlock and prevent unauthorised repeated redemptions. The legal basis for the requested unlock is Article 6(1)(b) GDPR; abuse prevention is based on Article 6(1)(f) GDPR.
The unlock is stored in your saved game and may be synchronised with it through enabled Apple services. Redemption records held by the separate code service are not the same as the online account. Deleting the online account therefore does not automatically remove them. For an access or erasure request concerning these records, please contact the controller; we will clarify with you the information needed to identify the records.
9. Boocord Music
When you use the music library, the app requests the catalogue, categories, song information, cover art and, where applicable, audio files from music.boocord.com. The data processed include requested song or category identifiers, entered search terms, your IP address and technically necessary access data. Processing enables the search, preview, playback and storage you request and is based on Article 6(1)(b) GDPR.
Your Game Center account is not automatically signed in to Boocord Music. Downloaded music files and their local assignment to the lobby or matches are stored on your device; the music download area is excluded from device backups. You can remove downloads in music management. The app does not provide a feature that sends your own content to AI services for music generation.
Boocord Music is also operated by the controller named above. This policy describes its integration into Ninja Splash. If you visit the music website separately or use accounts or additional features there, the Boocord Music privacy notice also applies.
10. Contacting us
If you contact us by email or telephone, we process the contact details you provide, the content of your enquiry and information necessary to handle it. Please provide only information needed for your request. Processing is based on Article 6(1)(b) GDPR if the enquiry concerns a contractual relationship or pre-contractual steps you request; otherwise, it is based on Article 6(1)(f) GDPR and our interest in responding to incoming enquiries. Contact details are not used for unsolicited advertising.
11. Recipients, hosting and international processing
Web hosting and the virtual machine running the Ninja Splash game server are provided by SynHost, GERLACH SYSTEMS, Damian Gerlach, Adlerstraße 65, 14612 Falkensee, Germany. Hosting and technical infrastructure services require the provider to process the storage, connection and access data needed for those services. To the extent that the service provider processes data on our instructions, that processing is subject to Article 28 GDPR.
Other recipients include Apple when you use Apple features, other players to the extent described above and, where necessary for a specific matter, support providers, legal advisers or competent public authorities. Disclosure to authorities requires a valid legal basis. We do not sell personal data.
Apple identifies Apple Distribution International Limited in Ireland as the controller for individuals in the European Economic Area and describes possible processing by Apple companies, including in the United States. Apple identifies standard contractual clauses as a safeguard; information and a way to request copies are provided in the international transfers section of the Apple Privacy Policy. Transfers within our area of responsibility are subject to Articles 44 et seq. GDPR, in particular an applicable adequacy decision or appropriate safeguards. Information about a specific relevant transfer may be requested from the controller.
12. Retention periods and deletion criteria
Data are not retained indefinitely merely because storage is technically possible. The following purposes and deletion criteria apply:
- Local saved games and settings: until you delete the respective saved game or relevant local app data. Data in Apple backups or synchronised saved games are managed separately.
- Online account and progress: for as long as required to provide the existing account; upon an effective account deletion, as described in section 13. Match records also help prevent duplicate result credits.
- Parties, invitations and presence: for the relevant gameplay or matchmaking situation; completed or expired states are cleared.
- IP-based rate limits: in the game server application's memory until ten minutes after the last use. Session authorisations remain valid for no more than seven days and are revoked when the account is deleted. A restart removes purely transient states.
- Unlock records: to the extent necessary to establish and provide the unlock or prevent abusive repeated redemptions; erasure requests are assessed in light of those purposes.
- Music downloads: until the download or the relevant local app data are removed.
- Access and error logs: only for as long as necessary for secure operation or a specific diagnostic purpose. Relevant criteria include resolution of the fault under investigation, completion of a security investigation and the end of a specific need for evidence. Data with no continuing purpose are deleted or anonymised.
- Support correspondence: until the matter is resolved and for as long as a specific necessary evidentiary or retention purpose exists. In the absence of such a purpose, it is deleted.
Where separate operational backups exist, they are used to restore data after loss or disruption. Obsolete backups are deleted once they are no longer necessary for that purpose. Deleted accounts must not be returned to active use through restoration; deletions must be applied to the restored data. Account deletion already includes the game server data file's automatic previous backup.
Longer retention, limited to the data needed, occurs only where required by a specific legal obligation or the establishment, exercise or defence of specific legal claims. The applicable statutory retention period, or the conclusion of proceedings and relevant limitation periods, then determines retention. The data are restricted to that purpose during this period.
13. Deleting the online account and other data
You can delete the signed-in online account using “Delete Online Account” in the app settings. This removes the online profile, its social links and associated result references from the active game server data and its automatic previous backup; related sessions are revoked.
This feature does not delete your Apple account, local saved games, Apple cloud saves, music downloads or separate redemption records held by the code service. These data must be addressed through the relevant management options or a specific request. Simply uninstalling the app does not delete an existing online account either. If you cannot access your account or wish to request further erasure, please contact noel@boocord.com. We may request reasonable information to verify your entitlement, limited to what is necessary for that purpose.
14. Your data protection rights
Subject to the applicable statutory requirements, you have the right of access, including a copy of your data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability for covered automated processing based on a contract or consent (Article 20).
Right to object: You may object under Article 21 GDPR to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. We will then stop processing the affected data unless statutory overriding grounds or purposes relating to legal claims apply. You may withdraw consent at any time with effect for the future; withdrawal does not affect the lawfulness of processing before withdrawal.
You can exercise these rights using the contact details above. Statutory response deadlines and exceptions apply. You may lodge a complaint with a data protection supervisory authority independently of contacting us, particularly in the place of your habitual residence, work or the alleged infringement. The authority responsible for the provider's location is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
15. Required data, minors and decisions
Providing data is generally voluntary. However, without the information necessary for sign-in, matchmaking or a specific requested feature, that feature cannot be provided. Local play does not require a separate online account with us.
Where minors use the app, the rules on legal representation and any necessary consent must be observed. If a feature directed at a child requires data protection consent, the statutory requirements for authorisation by a person with parental responsibility apply. The App Store age rating does not replace that authorisation. Persons with parental responsibility may contact us about their child's data.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects within the meaning of Article 22 GDPR. The automated score calculation and matchmaking required for the game are described in section 6.
16. Changes to this policy
This policy will be updated if the processing described or legal requirements change. The date above identifies the published version. Where a new purpose requires additional information or consent, updating this page alone does not satisfy that requirement.