Privacy Policy
Last updated · October 30, 2026
This policy explains what personal data we process when you visit superflow.games or play any of our mobile games, why we do it, and what choices you have. It applies to all games published by Superflow Games on Google Play and other app stores, unless a game shows its own notice.
1. Who is responsible
The controller under the GDPR is:
Umut Can Önel (trading as Superflow Games)
Alter Güterbahnhof 2C, 22303 Hamburg, Germany
umut@superflow.games
2. This website
The website is a static page. It uses no analytics, no advertising trackers and no cookies. All fonts and files are served from our own domain.
- Hosting: Cloudflare, Inc. delivers the site. To do so it processes your IP address, browser details and the time of your request, and may keep these in access logs for up to 30 days for security and abuse prevention.
- Email: mail sent to our address is received by Cloudflare Email Routing and forwarded to our mailbox. We keep your message and email address for as long as needed to answer you and to meet legal record-keeping duties.
Legal basis: our legitimate interest in a secure, working website and in answering your messages (Art. 6(1)(f) GDPR), or steps towards a contract (Art. 6(1)(b) GDPR).
3. Our games
Our games do not ask for your name, email address or a login. Your game progress is stored on your device. The game itself and the partners named below process the following data:
- Device data: device model, operating system and version, language, screen size, network type and an approximate location (country or region) derived from your IP address.
- Identifiers: your device's advertising ID (Google Advertising ID on Android, IDFA on iOS if you allow it), the App Set ID and IDs that the SDKs create for the app installation.
- Usage data: when and how long you play, levels reached and in-game events.
- Ad data: which ads were shown, how you interacted with them, and data used to prevent ad fraud.
- Diagnostics: crash reports and performance data.
- Purchases: if a game offers in-app purchases, they are processed by Google Play or the App Store. We receive a confirmation of what was bought, never your payment details.
Why we use it
- To run the game and deliver what you bought (Art. 6(1)(b) GDPR).
- To show ads, which keep our games free. Non-personalised ads, frequency capping and fraud prevention rely on our legitimate interest (Art. 6(1)(f) GDPR).
- To measure our advertising, for example which ad campaign led to an install, using attribution and app-event data (Art. 6(1)(a) GDPR and § 25(1) TDDDG where your consent is required; otherwise Art. 6(1)(f) GDPR).
- Personalised ads based on your interests are only shown if you agree (Art. 6(1)(a) GDPR and § 25(1) TDDDG).
- To fix bugs and improve the games using crash reports and usage statistics (Art. 6(1)(f) GDPR, or your consent where the law requires it).
Consent
If you are in the EEA, the UK or Switzerland, the game asks for your consent before personalised ads are shown or data is stored on or read from your device for that purpose. The consent dialog is provided by Google (User Messaging Platform) and follows the IAB Transparency & Consent Framework. You can change your choice at any time: in the game's Settings, tap Privacy. If you say no, you will still see ads, but they will not be personalised.
Partners
We use the following partners. Each processes data under its own privacy policy and may combine it with data from other apps that use the same service.
- Google AdMob (Google Ireland Ltd. / Google LLC) for ads and ad mediation. Privacy policy · How Google uses data from apps
- AppLovin (AppLovin Corporation) for ads and ad mediation (AppLovin MAX). Privacy policy
- Google Analytics for Firebase (Google Ireland Ltd. / Google LLC) for usage statistics and in-game events. Privacy policy · Firebase privacy
- AppsFlyer (AppsFlyer Ltd.) for install attribution, to measure which ad campaigns bring new players. Privacy policy
- Meta (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.) for app-event measurement through the Facebook SDK, and as an ad network bidding through AppLovin MAX. On iOS, data is used for ad tracking only if you allow tracking. Privacy policy
- Other ad networks that bid for ad space through AdMob or AppLovin MAX. They only receive data allowed by your consent choice. The list of networks is shown in the consent dialog and can be requested from us.
- Google Play / Apple App Store for distribution, updates and in-app purchases.
Your choices
- Change your ad consent in the game's Settings by tapping Privacy (EEA, UK and Switzerland).
- Reset or delete your advertising ID in your device settings (Android: Settings → Google → Ads / Privacy → Ads; iOS: Settings → Privacy & Security → Tracking).
- Uninstalling a game deletes the data stored on your device.
4. Children
Our games are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
5. Transfers outside the EU
Cloudflare, Google, AppLovin, AppsFlyer and Meta may process data in the United States and other countries. Where the recipient is certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission's adequacy decision. Otherwise it relies on the Commission's Standard Contractual Clauses.
6. How long we keep data
We do not run our own servers for the games and do not keep player data ourselves. Our partners keep data according to their own policies. Emails are deleted when no longer needed, unless tax or commercial law requires us to keep them longer.
7. Your rights
You have the right to access, correct, delete or restrict the processing of your personal data, to data portability, to withdraw consent at any time, and to object to processing based on legitimate interests. Because we do not hold player data linked to your name, please include your device's advertising ID or App Set ID when you write to us about a game, so we can pass your request on to our partners.
To make a request, email umut@superflow.games. We answer within one month.
You can also complain to a data protection authority. Ours is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.
If you live in a U.S. state with a privacy law, sharing data with ad partners may count as “selling” or “sharing” personal data. You can opt out by turning off tracking or deleting your advertising ID in your device settings, or by contacting us.
8. Changes
If this policy changes, we will update the date above. If a change needs new consent, the game will ask you again.
9. Contact
Umut Can Önel (Superflow Games) — umut@superflow.games · Impressum