Privacy Policy

The data controller responsible for the processing of your personal data in connection with Mercy is: Daniel Sogl Email: me@danielsogl.de As we are a small-scale operation (Freiberufler), we are not required to appoint a Data Protection Officer. However, you can contact us directly at the email address above for any data protection inquiries.

We collect and process the following categories of data: Locally Stored Data (on your device): - BattleTag (your Overwatch username, if entered) - Searched and followed players - Cached hero and map information - Cached player statistics - App settings (theme, language preferences) Technical Data: - Device platform (iOS or Android) - App version - Network connectivity status Analytics & Crash Data: - App usage events (screen views, feature interactions) - Crash reports and error logs - Performance metrics (app startup time, network latency) - Device information (OS version, device model) We do NOT collect: - Advertising identifiers (the app shows no ads and does not read the IDFA or Android Advertising ID) - Email addresses or passwords (no account registration required) - Location data - Contact lists - Health data - Browsing history outside the App

We process your data based on the following legal grounds under GDPR Article 6 and the German TDDDG: Contract Performance (Art. 6(1)(b) GDPR): - Providing app functionality (player tracking, statistics display) - Local data storage for app functionality Consent (Art. 6(1)(a) GDPR, § 25 TDDDG): - Analytics, performance monitoring and crash reporting (Firebase) - Storing and reading information on your device beyond what the app strictly needs Legitimate Interests (Art. 6(1)(f) GDPR): - Improving our services - Technical security measures Note on § 25 TDDDG (formerly TTDSG): Under German law, storing or accessing information on your device requires your prior consent unless it is strictly necessary for the service you requested. We obtain this consent through an in-app consent prompt shown in the EEA. On iOS, Apple's App Tracking Transparency prompt is shown as well. The App shows no advertisements, never reads your advertising identifier and does not track you across other companies' apps or websites, so whichever answer you give, nothing additional is collected about you.

We use your data for the following purposes: Service Provision: - Displaying Overwatch player statistics - Tracking your favorite players - Providing hero and map information - Storing your app preferences Service Improvement: - Understanding how users interact with the app - Identifying and fixing technical issues

All your data is stored locally on your device and follows these retention periods: App Data: - Retained while the app is installed - Deleted immediately upon app uninstallation Cached Data: - Automatically refreshed based on API cache policies - Can be manually cleared via "Clear Cache" in Settings We do NOT transfer or store any of your personal data on our servers.

We use the following third-party service providers who may process your data: Mercy Game Data API - Provider: Daniel Sogl, self-hosted at https://api.mercy-stats.app - Software: OverFast API (https://github.com/TeKrop/overfast-api) - Purpose: Providing Overwatch player statistics, hero information, and game data - Data processed: BattleTags you search for in the app - Note: BattleTags are publicly available player identifiers - Note: This service is operated by us, not by a third party. It forwards requests to Blizzard Entertainment's public profile pages. - Rate limits: 30 requests per second per IP Firebase (Analytics, Performance, Crashlytics) - Provider: Google Ireland Limited (for EEA users) - Purpose: App analytics, performance monitoring, crash reporting - Data processed: Usage events, crash logs, performance traces, device info - Note: Collection is switched off on every app launch and is only enabled after you consent in the app - Legal basis: Consent (Art. 6(1)(a) GDPR, § 25 TDDDG) - Privacy Policy: https://firebase.google.com/support/privacy - DPA: https://firebase.google.com/terms/data-processing-terms RevenueCat (Subscription Management) - Provider: RevenueCat, Inc., USA - Purpose: Validating and restoring Mercy Pro purchases - Data processed: A pseudonymous app user ID, store receipt data, subscription status - Legal basis: Contract performance (Art. 6(1)(b) GDPR) for users who purchase Mercy Pro - Privacy Policy: https://www.revenuecat.com/privacy

Some of our service providers are located outside the European Economic Area (EEA): Firebase (Google): - Data transfers to the US are made under the EU-US Data Privacy Framework - Google Ireland Limited acts as data processor for EEA users RevenueCat: - Transfers to the US are covered by EU Standard Contractual Clauses Mercy Game Data API: - Hosted in Germany; requests are forwarded to Blizzard Entertainment servers, which may be located outside the EEA - Only publicly available player data (BattleTags) is transmitted

Under the General Data Protection Regulation (GDPR), you have the following rights: Right of Access (Art. 15): Since all data is stored locally on your device, you have direct access to your data through the app. Right to Rectification (Art. 16): You can edit your BattleTag and followed players directly in the app. Right to Erasure (Art. 17): You can delete all your data by: - Using "Clear Cache" in Settings - Uninstalling the app Right to Restriction (Art. 18): You can restrict data processing by not using specific features. Right to Data Portability (Art. 20): Your locally stored data is on your device and can be transferred via the platform backup features (iCloud Backup, Android Backup). Right to Object (Art. 21): You can object to processing by uninstalling the app or not using specific features. Right to Withdraw Consent (Art. 7): You can withdraw your consent at any time in the app under Settings > Privacy. For questions, contact us at: me@danielsogl.de

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority. For Germany, the relevant authority depends on your state (Bundesland). The lead authority is: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) Graurheindorfer Str. 153 53117 Bonn Germany Email: poststelle@bfdi.bund.de Website: https://www.bfdi.bund.de You also have the right to lodge a complaint with the supervisory authority in your EU member state of residence.

We implement appropriate technical measures to protect your data: Technical Measures: - All data is stored locally on your device - API requests are made over encrypted HTTPS connections - No server-side storage of personal data - App data is protected by the platform's security features (iOS Data Protection, Android app sandbox) Third-Party Security: - Firebase follows Google's comprehensive security standards - The Mercy Game Data API uses HTTPS for all communications

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. How we notify you: - Significant changes will be announced via app update - The "Last Updated" date will be revised - Continued use after changes constitutes acceptance We recommend reviewing this policy periodically.

For any questions about this Privacy Policy or our data practices, please contact us: Daniel Sogl Email: me@danielsogl.de We aim to respond to all inquiries within 5 business days. For GDPR-related requests, we will respond within the legally required timeframe of one month. This Privacy Policy is governed by German law and the General Data Protection Regulation (GDPR).