Last updated: September 17, 2026
Strike Duel ("the app", "we", "us") is developed and operated by:
Marcel Scheck
Trevor-Moore-Str. 1
85356 Freising
Germany
strike-duel@scheck.gg
We are the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR).
When you sign in with Google or Apple, we receive your display name and email address from your sign-in provider. We also generate a unique user identifier via Firebase Authentication. We do not access your sign-in password.
As you play, we store your scores, match history, friend connections, friend code, and in-game activity in our database. Your display name and game scores are visible to other players you interact with.
If you allow notifications, we store a device token provided by Firebase Cloud Messaging (FCM) to send you game-related updates (e.g., when it's your turn, when you receive a challenge).
We use Firebase Analytics to understand how the app is used and to improve the game experience. This includes:
Firebase Analytics may briefly process your IP address to derive coarse geographic data (country/region), but IP addresses are not stored or logged by Firebase Analytics.
We use Firebase Crashlytics to collect crash logs, stack traces, and device metadata (device model, operating system version) to diagnose and fix bugs. This data is associated with a Crashlytics installation identifier, not directly with your account.
We do not use advertising trackers, advertising identifiers, or tracking cookies. We do not collect location data, contacts, photos, or any data beyond what is described above.
| Processing activity | Legal basis (GDPR Art. 6) |
|---|---|
| Account creation and authentication | Contract performance — necessary to provide the game |
| Storing game data, scores, and friend connections | Contract performance — core game functionality |
| Sending push notifications about your games | Consent — you can disable notifications in your device settings at any time |
| Collecting analytics data on app usage | Legitimate interest — understanding feature usage and improving the game experience |
| Collecting crash and diagnostics data | Legitimate interest — maintaining app stability and fixing bugs |
We use Google Firebase as our backend infrastructure. Firebase processes your data on our behalf as a data processor. The Firebase services we use are:
Google's privacy policy is available at policies.google.com/privacy. Firebase's data processing terms and certifications (ISO 27001, SOC 1/2/3) are described at firebase.google.com/support/privacy.
Firebase Authentication processes data in the United States. Other Firebase services may use global Google infrastructure. These transfers are covered by Google's participation in the EU-US Data Privacy Framework and Standard Contractual Clauses, ensuring an adequate level of data protection as required by GDPR.
We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. Data is shared only with Google Firebase as described above, solely to provide the app's functionality.
Other players can see your display name and game scores during and after matches.
| Data type | Retention period |
|---|---|
| Account and game data | Until you delete your account |
| Push notification tokens | Until you delete your account or revoke notification permissions |
| Analytics data | 14 months (automatically deleted by Firebase Analytics; we use the shortest retention setting) |
| Crash logs and diagnostics | 90 days (automatically deleted by Firebase Crashlytics) |
| Authentication IP logs | A few weeks (managed by Firebase Authentication for security purposes) |
When you delete your account, your profile, game history, friend connections, and associated data are removed from our systems.
As an EU resident, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at strike-duel@scheck.gg. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection supervisory authority.
Strike Duel is not directed at children under 16 (the GDPR age of digital consent in most EU member states). We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
Your data is transmitted over encrypted connections (HTTPS/TLS) and stored in Firebase's secured infrastructure, which encrypts data at rest. While no system is perfectly secure, we take reasonable measures to protect your information.
Your use of Strike Duel is also subject to our Terms of Service.
We may update this policy to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
If you have questions about this privacy policy or your personal data, contact us at: