Numora2048 — Privacy notice
Android · Version 1.3 · Updated:
Numora2048 is an Android number puzzle for children, teenagers and adults. From app version 1.0.6, you can start without providing your age. Without age information, the same advertising safeguards apply as for minors. An optional date of birth entered in the privacy settings is evaluated only on your device. You play without a Numora account. Your game save stays on your device. The app uses Google Play for age information and approvals. Google receives data when advertising, consent management or Google Play purchases are used.
Who is responsible?
Digital-e UG (haftungsbeschränkt), represented by managing director Kurt Laabs, Norderstraße 47, 25436 Tornesch, Germany, is responsible for the processing described here. Email: anfrage@digital-e.org. Commercial register: Amtsgericht Pinneberg, HRB 18836 Pi.
This notice covers the Android app. It does not cover a browser or YouTube Playables version. German and English versions contain the same information; mandatory rights under applicable law remain unaffected.
Game data on your device
The app stores your 15 mode/difficulty runs, boards, scores, progress, statistics and settings in private app storage. A local backup helps recover a damaged save. Your language, audio and display choices, run identifiers, bonus-undo counters, ad timing and frequency counters are also stored locally.
Free unlock codes are checked on the device. The app saves the resulting entitlement and a hash, without contacting a code or account server. Numora does not provide cloud saves, a chat or public profiles. Its own game statistics are not sent to a Digital-e server.
Processing needed to run the game and remember the settings you choose is based on Article 6(1)(b) GDPR, insofar as personal data are involved. Necessary device storage relies on § 25(2)(2) TDDDG. Without local storage, progress and settings cannot be preserved. The app excludes its data from Android cloud backup and device-transfer backup.
Earned stars, unlocked constellations and the tracked or untracked constellation goal also stay on your device. These game data are not sent to Digital-e, Google or another service.
Age choice and young players
You do not need to provide your age to play. Without age information, the same advertising safeguards apply as for minors. We do not operate user accounts or require Google sign-in for age information.
Under Options → Comfort → Privacy & publisher → Age information, you can optionally enter your date of birth in three empty fields. The app evaluates the date only on your device and saves only whether you are under 18 or at least 18. The date of birth is never saved to persistent storage, logged or transmitted. The date fields are cleared when you save, close or leave the form. An invalid or cancelled entry does not change the existing safeguards.
Without age information and for everyone under 18, the Google Mobile Ads SDK requests ads with CHILD treatment and content rating G: no personalised advertising, no remarketing and no transmission of the Android advertising ID by the advertising SDK configured this way. Google UMP receives the under-age-of-consent flag and does not request advertising consent from the user. Only an independent birthday entry in Numora can set the local adult group; the consent management described below then also applies. Google Play age signals are not used for this classification.
Missing age information or being a minor does not grant free ad removal or paid products. Protected ads and optional purchases at the regular price remain possible after required approvals. Existing purchase rights are preserved. Missing approval or unavailable ads do not unlock paid products.
You can correct the entry under “Age information” or remove it with “Clear age information”. Clearing it restores the safeguards for unknown age. Answers from the previous “Under 18 / 18+” selection are discarded when updating to 1.0.6; child protections remain active unless you voluntarily provide a new answer. Only the age group is saved until you change or clear it or delete app data. The purpose is to protect young players while processing as little data as possible, based on our legitimate interest under Article 6(1)(f) GDPR.
Age information and approvals from Google Play
Numora2048 uses Google Play Age Signals to protect young players and account for regional age and parental approval requirements. Google Play may provide the app with an age range and the status of parental approval required for significant changes. Numora does not receive an exact date of birth from Google Play. Availability depends on the region and the settings and approvals in Google Play or Family Link. Google Play may display its own sharing prompt.
The app evaluates these signals only on your device. They can only further restrict online features, never switch the local advertising safeguards to the adult setting. While a necessary check is pending, required age verification or parental approval is missing, or a check fails, purchase queries, new purchases and advertising remain disabled. The free game remains available, and previously confirmed local purchase entitlements are retained.
If Google Play reports that no age information is shared, local safeguards continue to apply: child protections without optional age information, otherwise the age group determined independently in Numora. Voluntarily declining to share does not trigger further automatic sharing prompts during the same running app session. This differs from required verification or parental approval that has not been completed, which keeps the features described above disabled.
We use the signals only for these access restrictions. They are not used to select or personalise ads, create advertising profiles, perform analytics or track users, and are not sent to advertising providers or a Digital-e server. The age bounds and approval status received are not saved to persistent storage or written to logs. For supervised users, the app also briefly evaluates the effective date of the most recently approved significant change. This checks whether approval covers the current change and its effective date has been reached; an older approval is insufficient. This date is not saved to persistent storage, logged or used for advertising. Numora does not read an installation identifier supplied by Play or the source of the age information.
The resulting permission state is held only in the running app’s memory. It is checked again on later starts and, where applicable, on returning to the app. Only an age group you voluntarily provide in Numora remains stored locally as described above.
Our local evaluation is based on Article 6(1)(f) GDPR. Our legitimate interest is protecting young players through age-appropriate access restrictions while processing as little data as possible. Processing within Google Play and Family Link is governed by Google’s own privacy information. Google states that the Age Signals library itself collects no data; this is separate from processing by the Google Play service.
You or your parents can manage age-range sharing and parental approvals in Google Play or Family Link. You can correct your local entry under “Age information” or remove it using “Clear age information”. Under Options → Comfort → Privacy & publisher → Recheck Play permissions, you can run the check again, for example after correcting information or granting approval with Google. Contact anfrage@digital-e.org if you have a question about a restriction in Numora.
Advertising and your choices
Even without age information, you may receive optional reward videos for extra undo moves in Classic or Flow and automatic full-screen ads after a round. Following the age and privacy checks, the app may preload ads. Local counters limit frequency. Buying “Remove automatic ads” permanently removes automatic ad breaks; separately chosen reward videos remain optional.
AdMob uses the Google Mobile Ads SDK; no additional ad-network SDK is included. When active, Google can receive your IP address and the approximate region derived from it, available device identifiers, app and ad interactions, and technical performance or diagnostic data. For adults, this may include the Android advertising ID. The CHILD safeguards described above apply without age information and under 18, excluding that advertising ID and personalised advertising. Non-personalised ads still need technical connection information and data for delivery, measurement and fraud prevention. The app does not ask for GPS access.
After an optional age entry of at least 18, Google UMP obtains consent where regionally required before ad requests are allowed. UMP also needs connection and app information, including your IP address. Depending on region and choices, ads may be personalised, non-personalised or limited. Refusal is not treated as consent and does not prevent you from playing. Without age information and under 18, the under-age-of-consent protection described above applies.
Limited Ads may appear after refusal where permitted by Google and regional requirements. For programmatic Limited Ads, Google may use local storage to detect invalid traffic and prevent fraud. This does not replace legally required consent or parental approval. An ad may be unavailable without a connection, required permission or suitable inventory.
Open Options → Comfort → Privacy & publisher → Manage ad consent to change or withdraw consent when Google provides a privacy form for your region. The form shows purposes and providers. A reward-video button is not, by itself, consent to tracking. Android’s advertising-ID controls offer an additional way to reset or delete the ID.
Google Play purchases
Two optional permanent purchases are available: removal of automatic ads and additional colour worlds. There are no subscriptions. Google Play displays the applicable price and handles payment. We do not receive your full card number or banking login.
The app receives product identifiers, signed purchase receipts, purchase tokens, order/time/status information and purchase entitlements from Google Play. Signatures are checked on your device. Receipts and signatures remain in private app storage; the app acknowledges purchases directly with Google Play. No Digital-e receipt server is involved.
When the age and Play checks allow purchasing features, the app checks purchases at startup, on returning to the app and periodically while open, so that restored or refunded purchases can be recognised. Previously verified receipts can keep entitlements available offline, including when the age check blocks new purchases. Restore purchases requires purchasing features to be permitted and uses the same Google Play account; that account is managed by Google, not Numora.
Age selection changes neither prices nor purchase rights. Required parental approvals still apply. No paid product is unlocked free of charge because of an age choice.
Purposes and legal bases
The following bases refer to processing for which we are responsible. Google explains the bases for its own processing in its privacy terms. Where consent is required for storing or reading non-essential information on your device, § 25(1) TDDDG applies in addition to the GDPR; necessary storage is covered by § 25(2)(2) TDDDG.
| Purpose | Legal basis |
|---|---|
| Providing the game, purchases and restoration | Article 6(1)(b) GDPR — performance of the game or purchase contract. Purchase data are needed only for the purchase features; no purchase is required to play. |
| Local age choice and evaluation of Play age information and approvals | Article 6(1)(f) GDPR — protecting young players through age-appropriate access restrictions while processing as little data as possible. |
| Purchase verification and limited technical security processing | Article 6(1)(f) GDPR — preventing abuse and maintaining reliable purchase handling. |
| Managing consent | Article 6(1)(c) GDPR in conjunction with Article 7 GDPR and § 25 TDDDG — recording and respecting privacy choices. |
| Personalised ads and optional advertising measurement | Article 6(1)(a) GDPR — consent for the purposes and providers selected in the privacy form. |
| Limited contextual ad delivery without consent | Article 6(1)(f) GDPR — funding the free game, only where no consent is legally required and your rights and choices permit the processing. This does not replace consent required for device access. |
| Statutory accounting and rights requests | Article 6(1)(c) GDPR with § 257 HGB / § 147 AO or Articles 12–22 GDPR, as applicable. |
Diagnostics and security
Numora has no separate Firebase, analytics or attribution SDK. Unity Analytics, engine insights and cloud crash reporting are disabled. This does not disable Google Mobile Ads diagnostics or the reports provided by Google Play.
Game files are stored in app-specific storage. Google states that data sent by its Mobile Ads SDK are encrypted in transit with TLS. Local storage and signature verification do not prevent access by someone who controls your unlocked or compromised device.
Support, external links and store reports
Contacting support opens your email app. Nothing is sent until you send the message. We then receive your email address, message, any name you provide and any attachments. Only send information needed for your Numora2048 question; do not send passwords or full payment card details.
We use messages about purchases or the game contract to deal with that contract (Article 6(1)(b) GDPR). We answer other enquiries on the basis of our legitimate interest in providing support (Article 6(1)(f) GDPR). Our email and IT service providers assist with delivery and storage. Disclosures to advisers or authorities occur where needed to fulfil legal duties or pursue or defend legal claims.
Google Play can provide us with order and settlement reports containing product, order reference, date, amount, country and purchase/refund status. The source is Google Play. We use these for purchase support, accounting and preventing duplicate delivery. Google Play may also provide technical crash or performance reports, depending on the platform and device settings.
Opening the privacy notice, legal notice or another external link connects your browser to that website. The recipient receives connection data such as your IP address. This website uses Firebase Hosting (Google); its separate website privacy notice explains that processing.
Google and other recipients
Google provides AdMob, its User Messaging Platform (UMP) and Google Play, including Age Signals. Numora receives age information and approvals from Google Play; the related settings can also be managed through Family Link. For users in the EEA or Switzerland, Google names Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the controller for its services, subject to any service-specific terms. Google Play sales and payments can also involve Google Commerce Limited and the payment provider identified during checkout. Outside these regions, the Google entity depends on the service and your location.
Google processes advertising, platform and payment data under its own privacy terms as well as the terms applicable to the service. Additional advertising technology providers may receive ad requests or measurement data according to the choices and purposes shown in the consent message. You can inspect the relevant providers and their privacy information there. An app without extra mediation SDKs is not necessarily limited to Google as its only advertising recipient.
We do not operate a server for your game saves or purchase-receipt verification. A supplier receiving data directly through its SDK is still a recipient, even if we cannot view those individual records.
Processing outside the EEA
Google processes data internationally, including in the United States. Its published transfer safeguards include the EU–US Data Privacy Framework for transfers to certified Google LLC entities (Article 45 GDPR) and the European Commission’s Standard Contractual Clauses where applicable (Article 46 GDPR). Processing is not limited to Germany or the EU.
The linked provider documents explain the safeguards. You can also contact us for information or a copy of the safeguards relevant to your data.
How long data are kept
| Data | Period or deletion rule |
|---|---|
| Optional date of birth | Only in memory during entry and local evaluation. The fields are cleared when saving or leaving; only the age group is saved locally. No transmission or logging. |
| Game saves, settings and optional local age information | Until you change or delete the data, clear app storage or uninstall the app. Local backups are replaced as the game is saved. Separately retained device backups need to be managed separately. |
| Play age information and resulting permission state | Age bounds, approval status and the date of the approved change are evaluated only during the check, without persistent storage or logging. The resulting permission state is held only in the running app’s memory and is checked again on later starts. Google’s own data and settings are subject to its retention rules. |
| Local purchase receipts and entitlements | While needed to recognise the purchase on your device, until replaced by a store reconciliation or deleted with app data. Google Play keeps its own purchase records. |
| Consent preferences and advertising data | Consent choices remain on the device until changed, reset or deleted. Google’s storage periods depend on the data and purpose: some data are removed or anonymised automatically, some remain until deletion, and security, legal or financial records may be retained longer. See Google’s retention explanation. |
| Support messages | Until the issue and follow-up questions are resolved, unless specific legal claims or a statutory retention duty require continued storage. |
| Business and accounting records, where held by us | Normally 6 years for commercial correspondence, 8 years for accounting vouchers and 10 years for books and annual accounts, starting at the end of the relevant calendar year (§ 257 HGB, § 147 AO). Statutory extensions, for example during a tax proceeding, can apply. These periods do not mean that every game save or support email is retained for that long. |
Deleting data
In Android Settings, open Apps → Numora2048 → Storage (or Storage & cache) → Clear storage / Clear data. Uninstalling also removes the app’s local data. This deletes saved runs, progress, preferences, age selection, counters, unlock codes and cached purchase receipts. The exact menu names depend on your device.
There is no Numora account to delete. Clearing app data does not erase Google’s purchase, advertising or payment records and does not request a refund. Permanent purchases can be restored through Google Play once the age and Play checks permit purchasing features. Contact us for deletion of support messages or other data we hold; use Google’s privacy controls for data Google holds under its own responsibility.
Numora does not keep a persistent copy of Play age information or the resulting permission state. Clearing app data removes the local age choice but does not change age information, approvals or settings in Google Play or Family Link. You or your parents manage those with Google.
Your privacy rights
Subject to the legal conditions, you can request access and a copy of your data, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). You can withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before it.
Contact anfrage@digital-e.org or write to the address above. Tell us the game and the processing your request concerns. We ask for additional identification only where proportionate and necessary; we do not require an identity-document copy as a standard step. We cannot identify or remotely retrieve a save stored only on your device.
We normally respond within one month. If the law permits an extension because a request is complex or there are many requests, we explain the reason within that month. Requests are generally free of charge.
You can complain to a data protection authority, including in your place of residence or work. Our local authority is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.
We do not make solely automated decisions with legal or similarly significant effects on you under Article 22 GDPR. Personalised advertising, where chosen, can involve profiling of interests by advertising providers; this does not determine your game progress or purchase entitlement.
Your right to object
You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims.
Where your data are processed for direct marketing, you may object at any time without giving a reason. This also applies to profiling connected with such direct marketing. Use the advertising privacy choices or contact anfrage@digital-e.org.
Changes to this notice
The date above identifies this version. We update the notice when the app’s data processing changes. If a new purpose or a new consent is required, we provide the relevant information or request consent before starting that processing.
Version 1.3 describes starting without an age prompt from Android 1.0.6, child protections for unknown age and the optional birthday entry evaluated only on your device. Google account data are not used to classify advertising. Older app versions may restrict online features more narrowly.