Legal

Alpine Rebels

Match-3 puzzle: rebuild an Alpine village

Privacy policy

Last updated: 5 September 2026

Alpine Rebels needs no account: on first launch the app generates a random device identifier and uses it to store your progress anonymously on our server so it survives a reinstall. We never ask for names, e-mail addresses or photos. Advertising exists only as reward videos you trigger yourself — for those we use Google AdMob, the only point where data flows to an advertising provider.

1. Data controller

Company
Babala Özdemir (Einzelunternehmen)
Address
Unterer Rainweg 22
4414 Füllinsdorf
Schweiz
E-mail
info@babala.ch
Phone
076 222 45 99
Company ID
CHE-322.105.560
App identifier
iOS: ch.babala.alpinerebels
Android: ch.babala.alpinerebels

We have not appointed a data protection officer or an EU representative because we do not reach the relevant thresholds. Please address all requests to the contact above.

2. What data we process

Data Purpose Stored where Retention
Random device identifier (UUID) and access token Finding your save game without an account Device and our server Until you delete the data in the app
Save game: level reached, stars, coins, lives, hammers, village build steps Continuing after a reinstall Device and our server Until you delete the data in the app
Game events with timestamp: level started, won, lost, booster or extra moves used, shop opened, reward video watched, purchase Tuning level difficulty, finding bugs Our server Until you delete the data in the app
Language, platform and app version Matching server responses, troubleshooting Our server Until you delete the data in the app
For purchases: product and Apple transaction number Crediting the purchase and preventing double booking; Apple handles the payment itself Device and our server Until you delete the data in the app
IP address, device and ad data when a reward video is loaded Serving and billing of the videos by Google AdMob At Google Per Google’s own terms

What we explicitly do not collect

3. Permissions on your device

The app requests only the following permissions. Each of them can be revoked at any time in your device settings; the app remains usable afterwards, with reduced functionality.

4. Legal bases

We process personal data under the Swiss Federal Act on Data Protection (revFADP). Where the GDPR applies, we rely on:

Advertising: Google’s ad SDK preloads a reward video in the background at launch so it is ready when you request one; in doing so Google receives your IP address and technical device data. A video is shown only when you tap for it. We do not request Apple’s App Tracking permission, so the advertising ID stays hidden and the videos are not personalised.

5. Recipients and third parties

We do not sell data and do not disclose it for advertising purposes. Data is disclosed only to the following parties, and only where required for operation:

Recipient Location Purpose
Hetzner Online GmbH Gunzenhausen (Germany), data centre inside the EU Operation of our servers. Hetzner processes data solely on our behalf and is contractually bound to confidentiality.
Google AdMob (Google Ireland Ltd.) Dublin (Ireland) Display of advertising banners that finance the free app. AdMob may process an advertising ID, IP address and device information. Personalised ads are only served with your consent.
Apple Inc. / Apple Distribution International Ltd. Cupertino (USA) / Cork (Ireland) App Store distribution, processing of in-app purchases and subscriptions, and crash reports if you have enabled them with Apple.

Authorities and courts receive data only where we are legally obliged to provide it.

Transfers abroad

Some of the recipients listed above process data outside Switzerland and the EEA, in particular in the United States. We base such transfers on the European Commission’s Standard Contractual Clauses with the Swiss adaptations recognised by the FDPIC and, where applicable, on the EU-US Data Privacy Framework. We will provide information on the safeguards in place on request.

6. Retention and deletion

Save game, events and device identifier remain on our server until you delete them in the app or ask us to. The server additionally creates technical access logs (IP address, time, requested address) that expire after 14 days. Purchase receipts are held by Apple; how long Google retains advertising data is governed by Google’s terms.

Step-by-step instructions are available at Delete data.

7. Children and young people

This app is not directed at children. We do not knowingly collect personal data from children under 16. If we learn that such data has been submitted without parental consent, we delete it without delay.

8. Data security

Wherever the app transmits data at all, connections are encrypted via HTTPS/TLS. On the server side we use access restrictions, tenant separation and regular backups. Nobody can, however, guarantee absolute security for data transmission over the internet.

9. Your rights

An informal message to info@babala.ch or a call to 076 222 45 99. We normally respond within 30 days. To verify your identity we may request suitable proof. You may also lodge a complaint with a supervisory authority (Switzerland: FDPIC; EU: your competent authority).

10. Changes to this policy

We may adapt this policy when the app or the legal framework changes. The version published on this page, with the date shown above, is the applicable one. We announce material changes inside the app.

← Back to the app overview