Slingshot App Privacy Policy

This is a translation. The legally binding version is the Spanish original, Política de Privacidad de la app Slingshot. In the event of any discrepancy, the Spanish text prevails.

Last updated: 29 October 2026

This policy explains what personal data we process when you use Slingshot, our Android game (app id yatoday.slingshot.game), for what purpose, for how long, and what you can require of us. It is written to comply with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Data of people who visit this website is covered by our general Privacy Policy.

1. Data controller

OwnerTetiana Alokhina
Trading asYatoday
Tax ID (NIF)Y9632444N
AddressCalle Sidi Ifni, 7, 03014 Alicante (España)
Legal formSole trader (autónoma), not entered in the Companies Register
Email[email protected]
Websiteyatoday.es

2. Summary

QuestionShort answer
What is Slingshot?A single-player game that works offline. It has no accounts, sign-up, chat, purchases, ads or analytics.
What data leaves the phone?Only error reports: what failed, where in the app’s code, and the device’s technical characteristics.
What for?To find and fix the app’s faults.
On what basis?Our legitimate interest in the app working properly.
Who receives it?Our server provider in the European Union (Hetzner, Germany). We do not sell it.
For how long?Error reports are deleted after 90 days.
What can I do?Access, rectify, erase, object to, restrict and port your data, and lodge a complaint with the AEPD.

3. What data we process

a) Error reports. When the app hits an error, closes unexpectedly or stops responding, it sends a report to our own error tracker (GlitchTip, on our servers at Hetzner in Germany): the error message and where in the app’s code it happened, the app version and the device’s technical characteristics at that moment (manufacturer and model, processor, graphics chip, memory and storage - total and free, screen, battery level and whether it is charging, connection type, language, time zone, operating system version and time since boot), plus a random identifier of that installation of the app, created by the reporting tool to count how many installations an error affects. That identifier is not linked to your name or any account, and the report carries no IP address and no device name. The report of an unexpected close is kept on the device and sent the next time you open the app.

b) Data kept only on your device. Your progress in the game (the stars of each level) and your choice of the day or night theme are stored in the app’s own storage and are not sent to us. They are deleted when you uninstall the app. If Android backup is on, the system may keep those two items in your Google account’s backup; nothing else of the app is part of that backup.

c) What the app does not process. It asks for no sign-up or login, has no chat or text fields, shows no ads, uses no advertising identifier and no analytics tools, and does not access your location, camera, microphone, contacts or files. It asks only for the internet access and network state permissions, which it uses solely to send error reports.

PurposeLegal basis (Art. 6 GDPR)Retention
Finding, diagnosing and fixing the app’s faults (error reports)Legitimate interest in the app working properly and without faults (Art. 6(1)(f))90 days from receipt of the report
Handling rights requests and evidencing that they were handledCompliance with a legal obligation (Art. 6(1)(c))3 years from the reply

We have balanced our legitimate interest against your rights: the reports contain only technical data, do not reveal who you are and are deleted after 90 days.

5. Recipients

We do not sell or disclose your data for commercial purposes.

RecipientRoleLocationStatus
Hetzner Online GmbHServers running our error trackerGermany and Finland (EU)Processor (Art. 28 GDPR)
Google Ireland LimitedDistributing the app through Google Play and, if you have it on, Android backupPer its own policyIndependent controller, under its own privacy policy

We may also disclose data to judges, courts and public authorities where we are under a legal obligation to do so.

6. International transfers

Error reports are processed in the European Union. We make no transfers of that data outside the European Economic Area. Google processes Google Play and Android backup data as an independent controller, under its own policy.

7. Automated decision-making

We make no automated decisions producing legal effects concerning you, and we do not carry out profiling (Art. 22 GDPR).

8. Minors

The game collects no data that identifies the person playing: there are no accounts, names or text entered by the user. The only data that leaves the device is the technical error reports described in section 3, which do not reveal who uses the app.

9. Security

Reports are sent encrypted (TLS) to servers located in the European Union, access to the error tracker is restricted to our team, and reports are deleted after 90 days.

10. Your rights

You may exercise the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21) by writing to [email protected]. It is free of charge and we will reply within one month.

Because the reports’ identifier is random and not linked to any person, we may not be able to tell which reports come from your device unless you give us that identifier.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, C/ Jorge Juan 6, 28001 Madrid - www.aepd.es).

11. Changes to this policy

We may update this policy if the data the app processes changes. The version in force is always the one published on this page, with the date shown at the top.

12. Language of this document

This document is published in Spanish, English and Russian. The Spanish version is the only prevailing version; the English and Russian versions are translations and, in case of any discrepancy, the Spanish text prevails.

Español (prevailing) · English · Русский