Privacy policy

What data the Duelario app and this website process, what for, and what rights you have.

Controller

Daniel Tamms
Lessingstr. 16
52445 Titz
Germany

This website

The website is served by Firebase Hosting (Google Ireland Limited). When you open it, the host processes technically necessary data such as your IP address, the time and the address requested, to deliver the page and to fend off attacks (Art. 6(1)(f) GDPR). The website sets no cookies, loads no fonts or scripts from other servers and contains no tracking. The language you choose is stored in your browser only.

If you open a duel link in the browser, the game starts there. What is said about the app below applies; there are no ads and no purchases in the browser.

The app

Player account

On first start the app creates a guest account: a random identifier and a randomly generated player name. You do not have to enter anything. If you sign in with Google, we receive your account identifier and email address from Google to tie the account to you and to restore it on other devices. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

Game data

We store your duels with their results, streaks, rating and place in rankings, level and XP, coins and the cosmetics bought with them, the catalogs you wrote, and your votes, reviews and reports. Other players see your player name, level and results. The data is kept in Cloud Firestore in the Frankfurt region (europe-west3).

Notifications

If you allow notifications, we store a device token of Firebase Cloud Messaging and the language of the app to send you challenges and results. You can switch this off in your device settings at any time.

Advertising

The app shows ads through Google AdMob: one banner and optional videos. Google processes, among other things, the advertising ID of the device and the IP address. Where the law requires it, the app asks for your consent with Google's consent form on first start (Art. 6(1)(a) GDPR); without consent no personalised ads are requested. You can withdraw consent by resetting the app's data or deleting the advertising ID in your device settings.

Purchases

You buy coin packs through Google Play or the App Store; we do not receive payment details. To verify and credit purchases we use RevenueCat (RevenueCat, Inc., USA), which processes your player identifier and the purchase receipts for this.

Recipients and transfers to third countries

Our processors are Google (Firebase: sign-in, database, server functions, notifications, hosting; AdMob) and RevenueCat. Data may be transferred to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep data

We keep your data for as long as your account exists. When you delete your account, the account, profile, coins, cosmetics, device tokens, streaks and unpublished catalogs are deleted; in duels, rankings and published catalogs that also concern other players your name is replaced by "Deleted player". Your votes, reviews and reports stay counted but can no longer be traced to a person. Purchase records are kept for as long as tax law requires.

Deleting your account

In the app under Profile → Delete account, or through this page.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent. Write to kontakt@duelario.com. You may also lodge a complaint with a data protection authority.

Children

Duelario is not directed at children under 13.

Last updated: October 2026