Nothing is transmitted
Five things Skygge does not do, and a sixth you can verify without believing any of the other five.
It does not register you, does not build a profile, shows no advertising, carries no measurement library and puts nobody on a list. Those are claims, and claims are free. Here is the one that is checkable: the published package declares no internet permission. What an app gets from Android is precisely the set its package requested and no more, which means one that left the network off the list cannot reach it, however its code may be written. That declaration is printed on the listing, and you can read it before you install anything.
What it does keep is your play — the grids behind you, how quickly each fell, and the board abandoned half-dark on the table. Every Android app is given a private area of storage, and all of that stays inside Skygge's. Nothing is copied to a machine at this end, which has one blunt consequence — none of it is in our custody, so there is nothing here to breach, nothing to sell, and nothing we could produce if anyone demanded it.
Ten slabs follow, set two to a course. Taken together they deal with the matters a notice of this kind is required by the General Data Protection Regulation to deal with, and the tenth gives an address for objections.
Whose name is on it
A controller is not a formality; it is a person who can be written to and held to what is written here.
ControllerArctic Eagle AS
Formaksjeselskap, registered in Norway
Signs for itEinar Jan Remøy
Registered atYstenesgata 6B, 6003 Ålesund, Norway
This page[email protected]
AppSkygge — com.skyggespill.skygge
Article 4(7) gives the title to whoever settles what a processing operation is for and the means of carrying it out, which is why a company name heads a document of this kind rather than closing it. Underneath the wording sit two commitments: nothing below is untrue, and a named individual answers for any part of it that proves otherwise.
You will find no data protection officer named. The appointment is obligatory in three situations and no others — a public authority; large-scale systematic monitoring as the core business; large-scale handling of the special categories. A single company publishing a single offline puzzle is a very long way from all three. Appointing somebody anyway would announce a safeguard with nothing behind it.
Everything stored, listed
Five entries, all of them on your phone, none of them anywhere else.
- The grids already behind you, pack by pack, so the menu knows where to put the marker.
- How quickly each one fell, so that beating yourself is possible at all.
- Whatever board is still open — the dark cells, the ones you flagged to keep, the undos remaining — so that setting the phone down does not throw away an hour of thinking.
- Hints remaining from the allowance.
- Your settings — language, wall colour, sound, the clash warning, and the rest of the tune screen.
Read that list for its omissions. Your name is not sought. Nothing resembling an address is recorded. Android's advertising identifier is left alone. Device characteristics are not assembled into anything that could work as a fingerprint. And Skygge mints no installation number for itself — the omission the others rest on, since without one nothing distinguishes your copy from the next. And wrapped around the lot, Android's sandbox bars every other installed app from looking in.
Delete the app and all five go. If you would rather keep the game and discard the record, there is a reset on the tune screen, and Android's own "clear data" does the same job.
Why no lawful basis is given
Every other notice you have read pairs each item with an Article 6 basis. This one quotes none, and owes you the reason.
Behind every lawful basis is the same question: on whose authority is this in your keeping? To answer it you need somebody keeping something, and neither half exists here. What slab 03 lists sits on hardware you own, out of reach from this end, and it names nobody — subtract identifiers that were never recorded and all that remains is a note of how one handset got on with some shaded grids. The Regulation needs both halves at once — data that identifies somebody, and a controller doing something with it. Strike out the first half and the second is left holding nothing.
Arguments live as long as their premises. The day a sign-in, an advertisement, an instrumentation library or a storefront goes in, the premise is spent — at which point this text must be rewritten and shipped in the release responsible, each addition carrying the basis that permits it. A comment at the bottom of this file holds the working notes for that.
No cookie banner appears either, by adjacent reasoning. Those rules catch storage on, or retrieval from, equipment the user owns beyond what the requested service needs, and they arrive by embedded web view, measurement pixel, or a third party's tag. Skygge contains none of the three and would have no connection for them to report over, which leaves the Norwegian implementation with nothing here to govern.
One asked for, the rest refused
The refusals are what make every other promise on this page checkable rather than merely stated.
Asked for
Just vibration — the faint tap when a cell goes dark — and that only for as long as you leave the switch on. It is granted without a prompt, and reasonably so: nothing about a person can be inferred from their phone buzzing.
Refused
The network above all; and following from that single refusal, camera, microphone, positioning, contacts, storage beyond this app's folder, telephony state, notifications.
Transmission needs a way out and no way out was built, so the question of where your data ends up stops depending on your trust in us and becomes an attribute of the build — one a stranger can establish without our help.
If a permission dialog ever surprises you, refuse it and tell us the build number at [email protected]. Only two things could be behind it: the words here no longer match what shipped, or your copy of Skygge came from somebody else. Either is worth running down at once.
The store is a separate matter
Everything above describes the app in use. How it reached you is a transaction that closed before any of that began.
What Google keeps of it — the install itself, each update since, a star rating if you left one — is filed under the account you were signed into, governed by Google's rules for its own store. We cannot see that file and could not amend it if we wanted to.
What arrives at this end is the Play Console summary, and it deals only in totals: installs counted, an approximate spread by country, faults grouped by type, a single averaged rating. It never resolves to a person. Nothing hanging off your Google account reaches us — not the address it bills to, not the card on it, not the list of phones it has been used on — and Google's controls over all that live inside the account itself. That is the only place a question about it can go.
A word of warning about the listing: a review is public the moment it is posted, under whichever name the account shows, and stays visible to everyone who looks afterwards.
Nobody downstream, nothing in transit
Two separate promises that happen to rest on the same fact: no one else receives your data, and none of it travels.
Go down the roster of parties such a notice usually names and every entry comes back empty. Nothing holds data for this game on a server. No measurement property observes it. No fault-reporting service draws anything from it. No ad marketplace is connected. No bulk-mail provider keeps addresses for it. No one handles money on its behalf. We did not interview these suppliers and send them away — their job here does not exist. Article 13(1)(e) wants the categories of recipient set out, and set out honestly the line stays blank.
Chapter V, which governs sending personal data outside the European Economic Area, comes to the same stop. Adequacy decisions, the standard contractual clauses, binding corporate rules, the short list of derogations in Article 49 — every one of those instruments presumes a shipment, and here there is none. However long a grid took you, that figure went into the phone that measured it, and was never copied out.
Putting slab 06 ahead of this one is deliberate — the store belongs in plain view as the limit of what we answer for, not hidden behind it. That exchange happens on Google's machines, under the contract Google has with you, and has already finished by the time the game first opens.
How long, and who for
A number of months would be a fiction here, because the keeping is not being done by us.
Duration. Retention clauses usually quote a period because the data sits with somebody the reader cannot instruct. Here it sits with you, so a condition is the only truthful form of the answer: it lasts exactly as long as you allow, since the reset and an ordinary uninstall each end it the moment you use either. Nothing is mirrored overnight, no earlier state is filed away, and there is no arrangement at this end by which a remainder could outlast your decision. Age alone wears none of it down — leave a record standing for three years and it is still just a record, on your own device, visible to you alone.
Age. Skygge carries a general-audience rating, and shading squares until a column of numbers stops repeating is an innocuous way for a child to pass an hour. Parents tend to test for four things: advertising directed at the child, a purchase reachable by a clumsy finger, any route in for a stranger, and user-submitted content. Not one of the four was ever built. Article 8 would be relevant too, marking the age below which a parent must stand behind a child's consent to an online service, but it has nothing to grip: consent is sought from nobody here, at any age. The Norwegian threshold is 13, recorded here while it makes no difference, precisely so that it is already in place if advertising should one day make it matter.
Eight rights, and their real outcomes
All eight stand at full strength. The oddity is that most of them have already been answered by the device you are holding.
Pushing a request through a formal channel whose only possible ending is a note saying no file on you exists would be staging rather than safeguarding, so the table skips to the outcome.
Access · 15We would write back to say there is no file to hand over. What the game itself holds is on the menu screen, which you can open whenever you like.
Rectification · 16Accuracy applies to records; there are none to correct. A saved time that flatters you too little is answered by a quicker solve.
Erasure · 17Immediate, and in your gift rather than ours: reset, or delete the app. Nothing is asked of us, which also means nothing of yours gets turned down, shelved, or returned at the end of the statutory month.
Restriction · 18It freezes an operation during a dispute. No operation on your data is running, so the freeze would apply to nothing.
Portability · 20It applies to data a person handed to a controller and now wants moved elsewhere. None was handed over, and what the game remembers already sits on your own device.
Objection · 21Something must be happening to object to. The limb admitting no refusal covers direct marketing, and none is sent from here.
Consent · 7(3)You are asked to agree to nothing, and no part of the game depends on an agreement. There has to be a permission in force before it can be taken back.
Automated decisions · 22Working out whether a line still holds a repeat is a comparison of numbers. What it decides is the state of a grid; it decides nothing about you.
There is no charge, nothing to complete, and no proof of identity to produce. Such proof exists to stop one person's records going to somebody else; where no records exist it defends nothing at all, and requesting documents from you in order to confirm as much would be mildly ridiculous.
Where to take a disagreement
A single mailbox, opened by the same person who wrote this, with no intermediary of any sort.
Send it to [email protected]. Exercise one of the eight rights, contest a line on this page, flag a permission prompt slab 05 has no account of, or ask how a piece of it works and nothing more.
Norsk går helt fint — samme adresse, og du får svar på norsk.
The General Data Protection Regulation reaches a Norwegian company through personopplysningsloven, and supervision belongs to Datatilsynet. Letters go to Postboks 458 Sentrum, 0105 Oslo; datatilsynet.no is the quicker route. Article 77 opens three doors rather than one, though: the authority where you ordinarily live, where you are employed, or where you believe the infringement happened — and no reason is owed for the choice. Nothing on this page may narrow those three, and a clause pretending to would be void. Writing here first is a suggestion carrying no obligation: a matter already lodged with Datatilsynet and a letter in this inbox proceed together without difficulty.
The version printed beneath the title advances every time a word above it changes. There is one unbending rule about when such a change is allowed to reach you. Should the rewrite be owed to the software starting to do something it did not do before — holding a new item, admitting a new party, pushing traffic abroad for the first time, acquiring an extra purpose — then the revised page is released together with the build that caused it, never trailing behind. Nothing ships with its explanation still unwritten. One useful side effect: check the version and you know at once whether this text was drafted for the build you have. Earlier editions are archived, and a copy can be sent to anyone who asks.