Fantasy Walk
Privacy policy
& legal notice.
This page provides an English version of the legal and privacy information for the Fantasy Walk Android app.
Provider information
Legal notice
Information pursuant to Section 5 of the German Digital Services Act (DDG):
Melanie Siekmöller
32791 Lage
Germany
Contact
Email: earlyowlsoftware@gmail.com
Notice regarding AI-generated content
Some graphics, illustrations, and game assets used in the app were created with the assistance of AI-powered image-generation tools.
Your data
Privacy policy
Protecting your personal data is important to us. The following information explains how data is handled when you use the Fantasy Walk app.
The general game state is primarily processed and stored on your device. Optional guild and subscription features use cloud services for selected profile, leaderboard, and voluntarily shared fantasy-world position data.
1. Data controller
The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:
Melanie Siekmöller
32791 Lage
Email: earlyowlsoftware@gmail.com
3. Firebase Authentication and Cloud Firestore
For the optional guild and subscription features, Fantasy Walk uses Firebase Authentication and Cloud Firestore, provided by Google. The service may process your Firebase user ID, display name, character class, gender, level, guild and activity timestamps, leaderboard values, and—if enabled—your fantasy-world location ID or route (including origin, destination, progress, and timestamps).
This is not GPS or real-world location data. Combined with a user ID and timestamps, however, it may constitute personal data. Other guild members may see shared profiles and positions according to your visibility settings. You can disable position sharing in the guild settings. Firebase may process data globally depending on the service and configuration; Firebase Authentication is operated from US data centres according to Google.
4. Purchases through Google Play and RevenueCat
Fantasy Walk uses RevenueCat, Inc. to manage and verify the Guild Pass subscription and the one-time Discovery Pack purchase. If an account is linked, the Firebase user ID is sent to RevenueCat as the App User ID. RevenueCat may also process purchase, subscription, device, and technical information required to manage and verify access, including subscription status and term. Payment and billing are handled by Google Play; RevenueCat provides technical purchase and entitlement management. This processing is based on Article 6(1)(b) GDPR. See also RevenueCat's privacy policy.
2. Access to Google Health Connect
To provide the app's core functions, including progress along virtual routes and the validation of monster encounters, Fantasy Walk requests access to the Google Health Connect interface on your Android device. The following data types are requested:
- Steps (StepsRecord): Used to calculate progress along routes.
- Heart rate (HeartRateRecord): Used to verify conditions during active game challenges such as monster battles.
Strict purpose limitation and local processing: Fitness and heart-rate data is read exclusively on your smartphone and used to calculate game progress. This data is never transmitted to external servers, shared with third parties, or evaluated for advertising or profiling.
5. Website analytics
On fantasy-walk.app, we use web analytics services to understand visitor interest, traffic sources, and improve our website.
a) Google Analytics (consent required)
Google Analytics 4 is used only after you select Accept analytics in our consent banner. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Purpose and data: Analytics helps me understand page views and selected interactions, such as clicks leading to the Google Play beta, feedback, or roadmap voting. Google may process technical device and browser information, the referring page, approximate location derived from the IP address, and identifiers stored by Analytics. No health data, feedback text, or email content is sent.
- Legal basis: Processing is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Advertising storage and ad-personalisation signals remain disabled.
- Withdrawal: You can change your choice at any time using in the footer. Withdrawing consent does not affect the lawfulness of previous processing.
- Further information: Details about Google's processing are available in Google's privacy policy.
b) Ahrefs Web Analytics (cookieless)
We also use Ahrefs Web Analytics, provided by Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581.
- Purpose and data: Ahrefs Web Analytics helps us understand website traffic trends, popular pages, and performance in an aggregated form to optimize our website.
- No cookies: Ahrefs Web Analytics operates without cookies or persistent identifiers stored on your device. It does not track individuals across devices or create personal user profiles.
- Legal basis: Processing is based on our legitimate interest in analyzing and improving our website under Article 6(1)(f) GDPR.
- Further information: For details on data processing, please visit the Ahrefs Privacy Policy.
6. App telemetry and usage analytics
To improve app stability and usability, Fantasy Walk uses PostHog Cloud EU, provided by PostHog Inc. and hosted in the European Union at eu.i.posthog.com.
- Data collected: Pseudonymous interaction events, such as started and completed routes, defeated monsters, quest and purchase actions, reached and completed onboarding steps, and viewed app screens, as well as technical app, device, and operating-system information, error logs, and campaign parameters supplied by Google Play for install attribution. Once a game profile has been created, a technical user ID, the freely chosen username, and selected profile attributes (character ID, class, gender, and premium status) are also processed. Gameplay events may include internal route, fictional location, monster, item, and shop IDs, route duration, and the number of progress steps lost because of hunger.
- No raw Health Connect data: Individual step records, daily or total step counts, heart-rate readings, and real-world location data are not sent to PostHog. The value for progress steps lost because of hunger is derived solely from in-game route progress and does not contain a Health Connect measurement series.
- Legal basis: Processing is based on our legitimate interest in providing and improving a reliable app under Article 6(1)(f) GDPR.
- Opt-out: Analytics and telemetry can be disabled at any time for future use in the app under Privacy & Analytics → Allow analytics.
7. Local game data
In addition to fitness data, the following information is primarily stored on your device:
- Your selected character and username.
- Your current level, virtual inventory, and route progress.
- Local app settings, such as notification preferences.
8. Legal bases for app processing
Processing is generally based on fulfilment of the user agreement under Article 6(1)(b) GDPR. Where a voluntary visibility choice is structured as consent, Article 6(1)(a) GDPR applies. Access to Google Health Connect is based on your explicit operating-system consent under Article 6(1)(a) GDPR and, for health data, Article 9(2)(a) GDPR.
9. Your rights
Under applicable law, you have the following rights regarding your data:
- Deletion: The app's Delete data function removes the local game state, but does not automatically delete server-side guild, Firebase, or RevenueCat data. To request access, correction, or deletion of server-side data, email earlyowlsoftware@gmail.com and include the Support ID shown in the app. Shared presence data is removed from the presence collection when sharing is disabled.
- Withdrawal of consent: You can revoke access to Google Health Connect at any time through Android's privacy or permission settings.
- Access and objection: Questions or objections concerning telemetry data can be submitted to the email address above.
10. Retention and data security
Data is retained only as long as needed for the stated purposes, unless legal obligations or the establishment, exercise, or defence of legal claims require longer retention. Transfers use encrypted connections. Firestore access is restricted through Firebase Authentication and Firestore Security Rules.
11. Changes to this policy
This privacy policy may be updated when new features are added to the app or the legal framework changes.
Last updated: September 2026
The German legal and privacy text remains available separately.
