Bubblewrap — Privacy Policy

Last updated: 27 August 2026 · Developer: InFlucx

The short version

Bubblewrap collects no personal data. It has no accounts, no advertising and no analytics SDK. The only outside services it touches are Google Play’s own, for the optional purchase and the ratings prompt, and neither one receives anything about you from the app. It optionally sends two things: a record of how a game round was played (the starting number of the board and which squares were tapped), so the game’s difficulty can be studied, and a note of how far a new player got through the tutorial. You can turn both off in the app.

Who is responsible

Nils Mlynarek
Konkordiastraße 85
40219 Düsseldorf
Germany
influcx@nilsmlynarek.eu

Trading as InFlucx. Contact this address for any request below.

What is collected

Only when “send anonymous run stats” is enabled in the app’s settings:

ItemWhat it isWhy
Install identifier A random identifier generated on your device when the app is first opened. It is not your advertising ID, is not derived from any device identifier, and is destroyed if you clear the app’s data or uninstall it. To tell “two hundred people played one round each” apart from “one person played two hundred rounds”. Without it the statistics are meaningless.
Round record The board’s starting number and the list of squares tapped, in order. For the one round that follows the tutorial, the starting layout of the board is sent as well. That layout is written into the game and is identical for everybody, so it describes the tutorial and not you. The game is deterministic, so this replays the round and reveals its score and length. The round’s own score is sent alongside it, and is used for one thing: the daily best figure shown on the app’s main menu. Every other number is recomputed from the replay rather than taken from what was sent.
Progress record A short fixed label naming a point the app reached: that it was opened, which page of the tutorial is on screen, that the tutorial was finished, or that a first round was played to its end. No round is attached to it. To find out where new players stop. A tutorial nobody finishes is a tutorial worth rebuilding, and a record of a finished round cannot show it, because somebody who stopped never finished one.
App version, Android API levele.g. “0.2-flow”, “34”. To avoid comparing rounds played under different versions of the game’s rules.
TimestampWhen the round was played and received. Ordering and daily totals.

What is never collected

No name, email, account, or contact details. No advertising ID or device identifier. No location. No device model. No contacts, photos, files, or microphone access. No behaviour outside the game itself. The app requests only INTERNET and VIBRATE permissions.

About IP addresses. The receiving script neither reads nor stores your IP address, and there is no column for one in the stored records. Like any web server, the hosting provider’s own system may record connection details, including IP addresses, in standard server logs kept briefly for security and operation. Those logs are the hosting provider’s and are not used to identify players or joined to any round record.

Where it goes

To a server operated by the developer at nilsmlynarek.eu, hosted in Germany by fXmedia, Inhaber Marcus Baur, Rieslingweg 7, 73235 Weilheim an der Teck, Germany, who act as a data processor. Nothing is sent anywhere else. There are no advertising networks, analytics providers, or other recipients. No data is sold or shared.

How long it is kept

Both kinds of record are kept for 24 months, after which they are deleted. Because records contain no personal data, they may be retained in aggregate form indefinitely.

Legal basis (GDPR)

Where this data is considered personal data, the legal basis is your consent (Art. 6(1)(a) GDPR), given by leaving “send anonymous run stats” enabled. You may withdraw it at any time by turning the setting off, which also deletes anything not yet sent from your device.

Your rights

You may request access to, correction of, or deletion of your data, and may complain to a supervisory authority. An honest limitation: because we store no information identifying you, we generally cannot locate “your” records unless you supply the install identifier. You can find it in the app under settings → privacy, where it is shown in full with a button to copy it. Include it in your request.

Children

Bubblewrap is not directed at children under 13 and collects no data enabling anyone to be identified, whatever their age.

Purchases

The app offers a single optional one-time purchase, which unlocks unlimited rounds and all nine colour schemes. It is handled entirely by Google Play. The developer never receives or sees your payment details, and no payment information is stored by the app or sent to the server described above.

Whether you have bought the unlock is stored only on your own device. It is never transmitted: the records described above carry no purchase, price or entitlement field.

Ratings

Very occasionally, after a round that beats your own best score, the app asks Google Play to show its standard ratings card. The card, and anything you write on it, belong to Google Play and are governed by Google’s privacy policy; a rating is published under your own Google account, exactly as it would be if you left one on the store listing.

The app sends Google nothing about you in order to ask, and it is told nothing back. It cannot see whether the card was shown, whether you rated the game, or what you said. The only thing stored is on your own device: a note that it asked, so it does not ask again for months.

Changes

Material changes will be reflected in the “last updated” date above.