Last updated: 3 October 2026
This privacy policy explains which personal data the app Merlins Adventure – Room Escape (iOS and Android, “the App”) processes, for what purposes, and which rights you have. The App works without an account and without registration: you do not need to provide your name or email address to play.
1. Controller
InnoMobile GmbH
Schlehenweg 20
18069 Lambrechtshagen
Germany
Amtsgericht Rostock, HRB 15811
Managing Director: Paul Stelzer
Email: support@innomobile.de
2. Summary
- The App creates a random player ID on your device. Reports to our server are only linked to this ID, not to your name or email address.
- To compare your room results with other players, the App sends your results in the story rooms to our server in Germany. Other players only see aggregated values.
- If you share a room you built in the room editor, the room and the player name you entered are stored on our server.
- Purchases are handled by Apple or Google; we use RevenueCat to manage them.
- The App shows ads from Google AdMob. Personalised advertising only takes place with your consent. The purchase “Remove ads” switches the ads off.
- To fix crashes and errors, we use the error reporting service Sentry.
3. Player ID
On first use, the App creates a random player ID on your device. It is not derived from your name, email address or device identifiers. The App sends it with its reports to our server (room results, purchases, opened links, sections 4 to 6) so that these reports can be grouped per installation. The ID remains when you reset your progress and is deleted when you uninstall the App; a new installation gets a new ID. Newer versions of the App show it under Settings → Legal.
Legal basis: Art. 6(1)(b) GDPR (providing the App).
4. Room results and comparison
When you solve or skip a room of the story or a level pack, the App sends to our server: player ID, chapter and room, solved or skipped, whether it was your first time, number of deaths, time in seconds, emeralds collected, app version and time played.
From these results the server calculates how you did compared to others (“Compared to others”). Other players only ever receive aggregated values (number of players, percentages, medians), and only once at least five other players have played the room. Your individual results are never shown to other players.
Legal basis: Art. 6(1)(b) GDPR (comparison feature of the App).
5. Purchase statistics
After a purchase, the App reports to our server: player ID, what was bought (remove ads, story pack or level pack), where in the App the purchase was started, the furthest room reached, the number of rooms finished, the room started last, the date of the first start and the days since then, the origin from a shared link (section 6), platform and app version. We do not receive payment or store transaction data. We use this to understand at which point in the game players decide to buy.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in improving the game and the offers).
6. Shared links
When you share the game, a chapter, a room or one of your own rooms, the text contains a link to capybara-fly.paul-stelzer.de/share/… . If someone opens such a link and the App is installed, the App reports to our server: player ID, the link type (e.g. “share/room”, without the room itself), whether it is a new installation, platform, app version and time. If this happens within 24 hours after the first start, the App keeps the link type as the origin of the installation; it is passed to RevenueCat (section 8) and included in purchase statistics. On the website, the link redirects to the App Store or Google Play depending on the device; the store receives the link type as campaign name.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding how the App is recommended).
7. Sharing your own rooms
If you share a room from the room editor, the App uploads the room (name, content, deaths and time of your test run, app version) and – if you entered one – your player name (up to 24 characters). The server creates a password for the room and stores only a hash of it; with this password only your App can change or delete the shared room. Shared rooms are not linked to your player ID.
Anyone who has the link can open and import the room and sees its name and your player name. There is no public list of shared rooms; we can view them in an internal list and may take over suitable rooms as a copy into the game. If you delete a shared room in the App, others can no longer open it; we keep a copy internally for reference (for example in case of reports) until you ask us to delete it (section 16). Please do not use your real name as player name if you do not want it to be visible.
Legal basis: Art. 6(1)(b) GDPR (sharing feature of the App).
8. Purchases
In-app purchases are processed by Apple (App Store) or Google (Google Play). We do not receive your payment details. The privacy policies of Apple and Google apply.
To manage purchases we use RevenueCat (RevenueCat, Inc., USA). RevenueCat assigns its own anonymous ID; the App passes RevenueCat the purchase receipts from Apple/Google, device and app information and the origin from a shared link (section 6). We do not pass your player ID or player name to RevenueCat. More information: RevenueCat privacy policy.
Legal basis: Art. 6(1)(b) GDPR (fulfilling the purchase) and Art. 6(1)(c) GDPR (statutory retention obligations).
9. Advertising (Google AdMob)
The App shows ads: optional reward videos with which you can skip a room, and an ad after every fourth solved room (never in the middle of a room). After the purchase “Remove ads”, the App shows no ads at all, and skipping a room works without a video. Ads are delivered by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
The App asks for your consent via Google’s consent form; on iOS, Apple’s tracking request is also shown. Only with your consent may Google use the advertising ID (IDFA or Google Advertising ID) and other data to show personalised ads. Without consent, Google only shows non-personalised ads; even then Google processes data such as IP address, device information and interactions with the ad to deliver ads, prevent fraud and measure ads. You can change your choice in the device settings (tracking/advertising ID). More information: How Google uses data from apps, Google privacy policy.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent) for personalised ads, otherwise Art. 6(1)(f) GDPR (financing the free version).
10. Error reports (Sentry)
If the App or our server encounters an error, an error report is sent to Sentry (Functional Software, Inc., USA). It contains the technical error description, the app version, platform, operating system and device type and, for server errors, the requested address. We do not send names, nicknames or profile details. We use the reports exclusively to find and fix errors. More information: Sentry privacy policy.
Legal basis: Art. 6(1)(f) GDPR (stable and secure operation of the App).
11. Server, hosting and log files
The App communicates with our server api.capybara-fly.paul-stelzer.de. Server and database run at IONOS SE (Elgendorfer Str. 57, 56410 Montabaur) in a data centre in Germany; IONOS processes the data on our behalf (Art. 28 GDPR). When the App accesses the server, the web server records technical access data (IP address, time, requested address, status code, app/browser identifier) in log files. These log files are rotated automatically and deleted after a short time. In addition, we use the IP address briefly in memory to limit excessive requests (rate limiting); it is not stored in our database.
Legal basis: Art. 6(1)(f) GDPR (security and operation of the server).
12. Data on your device
The App stores your progress, your settings (including your player name), your own rooms from the room editor, your player ID and reports not yet sent locally on your device so that it also works offline. This data is deleted when you uninstall the App. The App also uses the device functions for sharing (system share dialog), store ratings (rating dialog of Apple/Google) and checking for updates (query of the store version).
13. Contact
If you contact us by email or via the support page, we process your message and your contact details to answer your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
14. Storage period
- Room results, purchase statistics and opened links: as long as we need them for the comparison and the statistics; there is currently no fixed deletion period. On request we delete all data stored for your player ID (section 16).
- Shared rooms: until you ask us to delete them; deleting in the App only hides them from others.
- Data on your device: until you reset your progress (progress only) or uninstall the App.
15. Recipients and transfers to third countries
We only pass data to the service providers named in this policy (IONOS, RevenueCat, Sentry, Apple, Google). RevenueCat and Sentry are based in the USA. Transfers take place on the basis of the EU Standard Contractual Clauses or, where the provider is certified, the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). We do not sell data.
16. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time for reasons arising from your particular situation.
To exercise your rights, write to support@innomobile.de. Please include your player ID (App → Settings → Legal). As your data is not linked to anything else, we can only find it with this ID; we will then delete all room results, purchase statistics and opened links stored for it. For a shared room, please include its link.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin, Germany.
17. Changes
We adapt this privacy policy when the App or the legal situation changes. The current version is always available on this page.
