Privacy policy for Shoutaroo

Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Philipp Reimann
In der Stöck 22
71566 Althütte
Germany
Email: info@farusone.com

FARUSONE is the brand name under which the operator publishes apps and games.

In short

• The app works without an account.
• Content you create stays on your device.
• The app shows ads (see "Ads").
• The app uses no analytics service.
• The app sends no crash reports.
• You can buy items or features in the app through Google Play. There is no subscription.
• Nothing you create is shown to other users.
• The app has no private messages between users.
• The app has no dating features.
• The app is not directed at children.

What data the app processes

Data on your device

Data marked "On your device" stays on your phone. We cannot see it and do not receive it.

Sharing and opening decks

Nothing leaves your phone unless you share it. When you share, the content goes to the app or the person you choose, and their own privacy rules apply there.

A shared deck link (https://farusone.com/apps/shoutaroo/deck#d=…) contains the deck itself: its name, its words, its colour and, if you typed it, your name as the sender. Never your records, your other decks or anything about the ads. The deck sits in the part after "#". Browsers do not send this part to a server, so our website does not receive the deck when someone opens the link: the page shows only the deck's name, the sender, the number of words and the first three words, in that person's browser, sets no cookies and offers to open the deck in Shoutaroo. Anyone who has the link can read all words of the deck, so share it only with people who may see them, and do not put anything private into a deck.

For smaller decks, the QR code with the same link is made on your phone. A score shared as a picture is also made on your phone, kept in the app cache until your next shared picture and handed to the Android share menu; after a Team Battle or a Tournament it can show the names of the teams or players.

To open a friend's deck, open the link, or paste the link or the whole message in Shoutaroo under "My decks" with "Paste a deck link"; the app reads the clipboard only when you tap it. Shoutaroo shows the deck's name, the sender and the first words and adds the deck only after you tap "Add to my decks" or "Add and play now". The words of a friend's deck are written by your friend, not by us; they are shown only on your phone.

Motion sensor

While you hold the phone to your forehead, Shoutaroo reads the phone's motion sensor to notice when you nod down (got it) or tilt your head back (pass). The sensor needs no permission. The app reads it only while a round, the ready screen before it or the tilt practice is on the screen, uses each value at once and stores or sends none of it. If you prefer, switch the controls to tap zones in the settings (right hand: got it, left hand: pass); then the sensor is not used for the answers.

Shoutaroo uses no camera, no microphone, no location and no contacts. The sounds of the game are short sounds that come with the app.

Permissions

Export and backups

Shoutaroo has no export to a file. When you choose, you can share an own deck as a link or, for smaller decks, as a QR code, and a score as a picture (story or square) with a short text. This goes through the Android share menu, or you copy the link yourself; the app or person you pick receives the content (see "Sharing and opening decks").

Android backup is switched on for your own decks, records, Daily Rush results, the words already played, temporary unlocks, your group for the reward offer, your name for shared decks and your settings (the app files shoutaroo-game.json and datastore/shoutaroo.preferences_pb). They are copied into your own backup in your Google account and move with a transfer to a new phone. The purchase check, the ad counters, your ad choices, the data for Pro offers and shared pictures are not part of it. We have no access to your backup. You can switch it off in the Android settings.

External services

Appodeal (Appodeal, Inc. and BidMachine, Inc. (USA)): Mediation of the ads in the free version: Appodeal asks its own campaigns and the ad partners (Meta Audience Network, BidMachine and DT Exchange) for an ad, picks the best offer and shows it. Appodeal also shows the consent form where the law requires it (Appodeal's own form, IAB TCF 2.2, CMP ID 432) and passes your choice on. To do this it sends a request to Appodeal before you choose (app, app version, SDK version, the choices stored so far). Appodeal uses the data to deliver and measure ads and to prevent fraud, and with your consent to personalise ads.

• Data: Advertising ID, app set ID and other device identifiers, IP address (from which an approximate location can be derived), mobile network code, technical data about the device, the app and the network (model, system version, memory, user agent, connection type), interactions with the ads (impressions, clicks) and how the ads perform, technical and diagnostic data
• Processed in: USA and other countries
• Transfer outside the EU based on: EU standard contractual clauses (Art. 46 (2) (c) GDPR) as agreed in the Appodeal and BidMachine terms
• Privacy policy of the provider: https://appodeal.com/privacy-policy

Meta Audience Network (Meta Platforms Ireland Limited): Ad partner in the Appodeal auction (bidding). Receives the ad request and, if it wins, delivers the ad. Meta uses the data to deliver and measure ads and to prevent fraud, and with your consent to personalise ads.

• Data: Device identifiers, device attributes (model, screen size, operating system, SDK versions), ad performance (impressions, clicks, placement, visibility), IP address
• Processed in: Ireland; Meta may also process data in the USA and other countries
• Transfer outside the EU based on: To Meta Platforms, Inc. (USA): EU-US Data Privacy Framework (Art. 45 GDPR); to other countries: EU standard contractual clauses (Art. 46 GDPR)
• Privacy policy of the provider: https://www.facebook.com/privacy/policy

BidMachine (BidMachine, Inc. (USA)): Ad exchange of the Appodeal group and partner in the Appodeal auction (bidding). Uses the data to deliver and measure ads and to prevent fraud, and with your consent to personalise ads.

• Data: Advertising ID and advertising data, technical device data, network data, IP address
• Processed in: USA and other countries
• Transfer outside the EU based on: EU standard contractual clauses, module 1 (Art. 46 (2) (c) GDPR), in BidMachine's data protection addendum
• Privacy policy of the provider: https://bidmachine.io/privacy-policy

DT Exchange (Digital Turbine) (Digital Turbine (IL) Ltd. and affiliated companies of Digital Turbine, Inc.): Ad partner in the Appodeal auction (bidding). Uses the data to deliver and measure ads and to prevent fraud, and with your consent to personalise ads.

• Data: Device identifiers, approximate location derived from the IP address, technical device and app data, interactions with the ads
• Processed in: Israel, USA and other countries
• Transfer outside the EU based on: Israel: adequacy decision of the EU Commission (Art. 45 GDPR); USA and other countries: EU standard contractual clauses (Art. 46 GDPR)
• Privacy policy of the provider: https://www.digitalturbine.com/privacy-policy

Google Play Billing Library (Google Ireland Limited): Handles the one-time purchase "Pro" through Google Play (no subscription). Google processes your payment details under its own privacy policy. The library can also send technical diagnostic data about purchases to Google. Discounts come as price offers from Google Play; the app shows the price from Google Play.

• Data: Purchase details, payment details (entered at Google), technical diagnostic data
• Processed in: Ireland; Google may also process data in the USA
• Transfer outside the EU based on: Google Ireland Limited handles Google Play in the EU; transfers to Google LLC (USA) are covered by the EU-US Data Privacy Framework (Art. 45 GDPR), transfers to other countries by EU standard contractual clauses (Art. 46 GDPR), as described in Google's privacy policy
• Privacy policy of the provider: https://policies.google.com/privacy

ALL-INKL.COM (Neue Medien Münnich): Receives and stores e-mails you send to info@farusone.com. The app itself sends no e-mail; your mail app does.

• Data: E-mail address, content of the e-mail
• Processed in: Germany
• Privacy policy of the provider: https://all-inkl.com/datenschutzinformationen

Ads

The ads are delivered by the ad services listed under "External services".

Ads appear only in the free version and never before you have finished your first round. There is never an ad during a round: not on the forehead screen, not while the timer runs, not on the countdown and not between two cards. Banners labelled "Ad" appear only under "Decks", "Your records" and "My decks", always after the content of the list. A full-screen ad (image or video) can only come at a natural pause between rounds: when you leave a round summary with "Next player" (while the phone is handed on, before the ready screen of the next player), with "Other deck", "Done" or the cross, or when you tap "Done" after a Team Battle or a Tournament. It comes after every second finished round (the 2nd, 4th, 6th ...), also in your first session, and at least 60 seconds after the previous full-screen ad; there is no limit per session or per day. There is never one on "Continue" during a Team Battle or a Tournament, never after "Ready", never within 60 seconds after a Pro offer and never right after "Not now" in the Pro window.

After a full-screen ad the app can show a small card with the Pro offer. In a test group the app shows its own full-screen Pro offer instead of the ad at every third such pause. After "Not now" that offer pauses for 24 hours.

Reward videos play only when you ask for one. Each offer names the reward first: a premium deck free for 2 hours, the Mystery Deck (a surprise premium deck for 2 hours), one more round in a Tournament, or one more Daily Rush try with other words, which never changes your score of the day. The video starts only when you tap the offer, and you get the reward only when the video has played to the end. A reward video counts like a full-screen ad, so no full-screen ad follows right after it.

The ads are delivered through Appodeal. For each ad, Appodeal asks its own campaigns and its partners Meta Audience Network, BidMachine and DT Exchange and shows the best offer. Until you have finished your first round and leave its summary (for example with "Next player" or "Other deck"), Shoutaroo loads no ad SDK, asks no consent question and sends nothing for ads. After that, ads can start in the same session, also in your first one, and at every later start they start right when the app starts.

In the EU/EEA, the UK and Switzerland the app asks for your consent right at that moment (at later starts right when the app starts, as long as no choice is stored), before the first ad loads, with Appodeal's consent form (IAB TCF 2.2). In the form you can consent, refuse or choose single purposes and partners. Already to show the form, the app sends a request to Appodeal (see "External services"). As long as no choice is stored, Shoutaroo shows no ads there.

If you refuse, Shoutaroo shows only non-personalised ads, in the same places and as often: they are chosen by the app and the context, not by a profile about you. Even these ads need technical data (IP address, device type, system and app version), and the ad services may read the advertising ID and keep small technical caches on your phone, for example to limit how often an ad appears and to detect fraud. They may not use this data for personalised ads.

Outside these countries the app asks no consent and the ads can be personalised. You can stop this at any time by deleting the advertising ID in the Android settings, or with Pro.

You can change or withdraw your choice at any time in the app under Settings > "Privacy choices for ads". After a withdrawal the app stops all ads at once and drops ads that were already loaded; the new choice applies from then on. Withdrawing does not affect processing that happened before.

Pro removes all ads. After the purchase the app no longer starts the ad SDK, so no more data is sent for ads.

Shoutaroo is made for people aged 16 and over who play with their group. The Kids deck is a set of easy words for family rounds; the app itself is not directed at children.

Purchases

Purchases are processed by Google Play. We do not receive your payment details.

Google Play tells the app what you bought (for example an order number and the item), so the app can unlock it.

How long we keep data and how to delete it

How long each kind of data is kept is listed in the table above.

How to remove the data from your device: Delete data in Shoutaroo.

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21).

Where processing is based on your consent, you can withdraw it at any time with effect for the future. To use your rights, email info@farusone.com.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority where you live.

Changes

We update this policy when the app or the way it processes data changes. The version and date at the top show the current version.