Privacy Policy

Last updated 12 September 2026

Themely is a word puzzle. It keeps your progress on your phone and sends it nowhere. The only time anything leaves your device is when you buy something, and this page says exactly what happens then.

What Themely stores on your phone

All of it is game state, and none of it leaves the device. There is no account, no analytics, no crash reporter, and no advertising identifier.

Your results for each level: best stars, best moves, best time, how many times you played it, and whether you solved it, all grouped by the language you played it in.
Your coin balance and your lifetime XP.
Counters: solves, perfect solves, solves with no help, solves under par, your fastest solve, coins earned and spent, chapters finished, days played, and your current and longest daily streak.
Which achievements you have unlocked, and when.
The level you last opened, so the home screen can offer to carry on.
Your settings: sound, vibration, colour scheme, and your chosen language if you picked one.

This lives in the app's own storage area, which only Themely can read. Uninstalling the app deletes it. So does Settings → Start over, which clears everything above and cannot be undone.

None of it is a name, an email address, a contact detail, a location or an identifier. It is a record of a puzzle game, and it stays on your phone.

What happens when you buy something

Coin packs and the one-off that removes the banner go through RevenueCat, which checks the receipt your app store issued and remembers what you own so it comes back if you reinstall. This is the only network call Themely makes.

What is sent

An anonymous id: Generated by RevenueCat and kept in your device's keychain. We never set one of our own, because that would mean having accounts, which Themely deliberately does not.
The store receipt: Plus the product id, the price, and the country your store account is in.
Your platform and the app version: Sent with each call, so a receipt can be checked against the right store.
The IP address of the request: As with any connection to any server.

What is not sent

No name, no email address, no contact detail, no advertising identifier, no location, and none of your game progress. Your board, your coins and your save never leave the phone. We never see a card number. Your app store takes the money and we are never shown a payment detail.

The legal basis, and where it goes

Art. 6(1)(b) GDPR, performance of a contract. You asked to buy something, and checking the receipt is how it gets delivered. There is no consent to give and nothing to withdraw: declining means not buying.

RevenueCat, Inc. is a processor in the United States, acting under a data processing agreement and the European Commission's standard contractual clauses. A receipt bought in Germany is therefore checked on infrastructure outside the EU.

RevenueCat keeps the purchase history against that anonymous id for as long as the entitlement exists, because that is the thing that lets a purchase come back on a new phone. Coins are the exception: they are spent from the save on your device, so a reinstall does not bring them back.

Advertising

Themely shows a banner at the bottom of some screens, and a video only when you tap to earn coins. Both are served by Google AdMob.

Google is not the only company involved. Each ad is bought in an auction, and the bidders are advertising partners on a list Google maintains and keeps current. We do not put that list together, and it changes, so a number here would be out of date almost as soon as you read it. The current list is in the consent form itself, which you can open any time from Settings → Privacy choices. Every partner is named there, with what it wants to do and a switch for it.

Nothing is requested before you have answered. The first time you open the game you are asked whether ads may use your device's advertising identifier. Until you answer, no ad is requested at all.

Saying no means ads that leave your device alone. You still see a banner, and the video is still there if you want it, but they become limited ads, which are served without reading or writing anything on your device. That is precisely the thing you declined, and declining it works.

They are not "non-personalised" ads, and the difference matters: those would still read your device's identifier to cap how often you see something and to catch fraud, so they would still need the permission you just withheld. We do not use them.

One exception, because it would be dishonest to leave it out. Even when you decline, Google still stores a small amount of data on your device to detect fraudulent ad clicks. It is used for nothing else. We rely on this being strictly necessary to run an ad-funded game rather than on your consent, which is why it happens despite a no.

What saying no does not do is remove the ads. Ads are how Themely is paid for. Removing them is a one-off purchase in the shop, and that is the only route to it. Nothing else about the game changes either way, and you keep every level, every hint and every coin.

You can change your mind at any time in Settings → Privacy choices, the same place that shows you who the advertising partners currently are. Withdrawing your consent makes the ads limited again from the next launch, and if you paid to remove the banner, it stays removed regardless.

Who receives your data

For ad serving, Google is a controller in its own right rather than acting only on our instructions: Google decides what it does with the data in an ad request. What Google collects and how long it keeps it is governed by Google's privacy policy, and requests about ad data are answered by Google rather than by us. You can manage what Google uses at My Ad Center.

An ad request carries the advertising identifier your device provides, your full IP address, not a shortened one, and coarse information about the device and the app.

There are two legal bases, and the consent form shows you which is which. Your consent, Art. 6(1)(a) GDPR and § 25 TDDDG, covers everything that reads or writes on your device and everything that personalises an ad, and it is gathered through Google's User Messaging Platform before any request is made. Legitimate interest, Art. 6(1)(f) GDPR, covers a narrower set: measuring how an ad performed, market research, improving the service, and detecting fraud. Those start switched on, and you can object to them in the same form. Personalised ads are never on that footing.

On iOS you are also asked separately, by the system, whether Themely may track you across other companies' apps. That is Apple's prompt and it is a different question: declining it means ads are chosen without that identifier, not that ads stop.

When it ships: delete these two markers here and the matching pair in site/datenschutz/index.html, and flip the assertion in test/policy_test.dart, which currently checks the markers are still here.

Game Center, if you sign in

Themely can save your progress to Game Center so that it survives deleting the app or moving to a new phone. This only happens if you sign in to Game Center. If you do not, nothing on this page changes: your progress stays on your phone and goes nowhere.

Signing in is an iOS prompt from Apple, not from us. You can decline it, and on a phone with no Apple Account it never appears at all. Declining costs you nothing but the backup. The game is the same either way, and no level, feature or purchase is held behind it.

What is sent

Your save, as listed at the top of this page: the levels you solved, your best results, your coin balance, your hint credits, your achievements and the record of what you have bought. It is stored by Apple against your Game Center player ID, which Apple gives us for you and which cannot be matched to you anywhere outside our apps.

What is not sent

The words on a board, which puzzle you have open, what language you play in, your settings, and anything at all about advertising. We do not run a server and we keep no copy: the save goes to Apple, and that is the whole journey.

The legal basis

Art. 6(1)(b) GDPR, performance of a contract. By signing in to Game Center you have asked for your progress to follow you, and the sync is the thing you asked for rather than a second use of something collected for another reason.

Getting rid of it

Sign out of Game Center and Themely stops sending and reading anything; your progress on the phone is untouched. You can delete the saved game itself from Game Center, which is Apple's control over Apple's storage. Deleting the app still clears the copy on your phone. How long Apple keeps it is Apple's to say, because we hold nothing to delete.

Children

Themely is a general-audience game. It is not directed at children, it is not listed in any children's category, and it does not knowingly collect anything from a child.

Your rights

Under the GDPR you may ask for access to your data (Art. 15), correction (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and you may object to processing (Art. 21). Write to the address above.

In practice there is very little for us to hand over: your progress is on your phone and we cannot read it, and a purchase is held against an anonymous id we cannot connect to you unless you tell us what it is. Deleting everything we could possibly hold is uninstalling the app, which removes the local save, and, where ads are running, withdrawing consent, which stops any further ad request.

You also have the right to complain to a data protection supervisory authority.

Changes

If what the app does changes, this page changes with it, and the date at the top is the date it last did.