Privacy Policy – Kawaii Bakery
Last updated: 14 November 2026
This policy covers the Android game Kawaii Bakery (package name de.timhaller.kawaiibakery), distributed through Google Play. It does not cover this website – for that, see the privacy policy of rellit.de.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Tim Haller
Beethovenstraße 9
64347 Griesheim
Deutschland
Email: info@rellit.de
No data protection officer has been appointed; the statutory conditions for doing so are not met.
2. The short version
The game runs no server of its own. There is no user account of its own, no sign-up and no analytics or crash reporting SDK. Your progress, your collection and the puzzle in progress sit on your device (section 3); none of it is transmitted to me.
The game is free and funded by ads. Personal data is therefore processed in the following places – in each case at Google:
- Ads through Google AdMob (section 4)
- The “Remove ads” purchase through Google Play Billing, if you make it (section 5)
- Cloud save through Google Play Games, if you are signed in there (section 7)
- Distribution through Google Play (section 9)
These points are described in detail below.
3. Data on your device
The game stores two files in its private app storage and one key in its cache:
| What is stored | Why |
|---|---|
Setting (settings.cfg): whether the guide has been shown once | so the guide only opens by itself on the first start |
Progress and collection (savegame.cfg): which levels are solved (stored by a checksum of the puzzle, not by anything about you), your hints and sugar sprinkles, the pastries collected and the one chosen, the café furnishings, and the puzzle in progress with your entries and the hints used on it; also whether you bought “Remove ads”, today's date and how many levels you solved today and since the last in-between ad; per installation key, how many sprinkles and hints were earned and spent there; and, if you use Google Play Games, the player ID of your Play Games account (section 7) | so your progress and collection are not lost, “Continue” in the menu picks the puzzle up at the same place, even after the app was closed, in-between ads come no more often than announced and not at all after the purchase, and saves from several devices are merged correctly |
Installation key (ledger_key in the app's cache): a random number, not derived from your device | so sprinkles and hints earned or spent on several devices count exactly once when saves are merged |
In addition, Google's consent software keeps your choice in the consent dialog (section 4) on the device, so you are not asked again at every start.
The files contain no name and cannot be read by other apps; only the player ID relates to you, if you use Google Play Games. They leave your device only into your own Google account: as the cloud save (section 7) and through Android's backup (below). On the device they are deleted when you uninstall the game or clear its data in Android's settings.
The legal basis for storing them on your device is Section 25(2) No. 2 of the German TDDDG: the storage is strictly necessary for the game to keep your settings, your progress and your purchase, and to continue the puzzle you started. No consent is required for it.
Android backup: if backup to your Google account is turned on in Android's settings, Android includes settings.cfg and savegame.cfg (automatic backup, allowBackup="true") and restores them on a new device – also without Google Play Games. The backup sits in your Google account; I have no access to it. The installation key in the cache is never backed up. Whether backups happen is up to you in Android's settings.
4. Advertising (Google AdMob)
The game shows three kinds of ads:
- Optional videos: through “+” in the menu or in the game you can watch a short video and get hints or sugar sprinkles for it. None starts unless you tap.
- Ads between levels: after every third or fourth solved level, never after the first two levels of a day.
- A banner below the puzzle while you play.
They are delivered by the Google AdMob SDK, which loads the ads from Google over the internet.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data processed: in particular your device's advertising ID, your IP address, information about the device, operating system and app, your approximate location based on the IP address, and your interactions with the ads (shown, tapped, video watched to the end). Google uses this data to deliver ads, cap how often they appear, measure their performance, prevent fraud and – only with your consent – personalize ads.
Consent: on the first start a dialog from Google (User Messaging Platform) asks whether you agree to personalized ads and to information being stored on or read from your device for advertising. You can accept, decline or choose individual purposes; the game is fully playable either way. You can change or withdraw your choice at any time in the “About” dialog under “Privacy settings”.
Legal basis: for personalized ads and access to the advertising ID, your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. If you decline, the game shows non-personalized ads only; the processing needed for them (such as the IP address for delivery and fraud prevention) is based on Art. 6(1)(f) GDPR – my legitimate interest is to offer the game for free and fund it through ads.
Transfers to third countries: Google also processes data in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the basis is the European Commission's adequacy decision under Art. 45 GDPR.
Role: depending on the processing step, Google is responsible either on its own or jointly with me for processing in connection with ad delivery. I only receive aggregated reports on ad views and revenue from Google – no data that can be attributed to individuals.
What you can do:
- Decline or withdraw consent in the “About” dialog under “Privacy settings”.
- Reset or delete the advertising ID: Android settings → Privacy → Ads.
- Buy “Remove ads” (section 5): the ads between levels and the banner go away. The optional videos stay available and are only loaded when you start one.
- Play without an internet connection: the game works fully offline, and no ads are loaded.
More information: Google's privacy policy and how Google uses information from apps that use its services.
5. “Remove ads” purchase (Google Play Billing)
A one-time purchase turns off the ads between levels and the banner. Purchase and payment run entirely through Google Play; the app's terms of use apply.
Google processes your Google account, your payment details and your purchase history under its own responsibility. I never receive your payment details – neither card number nor billing address. The game only asks Google whether the purchase exists and stores the answer as a yes/no value in the save (section 3). That way it recognizes the purchase after a reinstall or on another device with the same Google account.
In the Play Console I see the order number, date, price and country of each purchase. I need these to handle withdrawals, refunds and questions and to book my income properly. If you write to me about a purchase, I also process your message and email address.
Legal basis: Art. 6(1)(b) GDPR (performance of the purchase contract) and, for keeping the accounting records, Art. 6(1)(c) GDPR together with the retention duties of German commercial and tax law.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
6. Permissions
| Permission | Why |
|---|---|
INTERNET, ACCESS_NETWORK_STATE | solely so AdMob can load ads (section 4) |
AD_ID | access to the advertising ID for ads (section 4) |
BILLING | the “Remove ads” purchase through Google Play (section 5) |
The game requests no other permissions – in particular not location, contacts, camera, microphone, phone state, notifications or storage access beyond its own app storage. The cloud save is synced by Google Play services, not by the game (section 7). You can verify this yourself: in your phone's app details under “Permissions” and in the Play Store listing under “About this game”.
7. Google Play Games and cloud save
The game includes Google Play Games services. If you have a Play Games profile on your phone, Google Play Games signs you in when the game starts; otherwise you can sign in from the “About” dialog. Without signing in, everything stays as described in section 3.
When you are signed in:
- The game receives the player ID and display name of your Play Games profile from Google. The name is shown in the “About” dialog; the ID is noted in the save so the game notices when a different account signs in on the same device – it then asks you which progress to keep.
- A copy of
savegame.cfg(contents as in section 3, compressed) is kept as a saved game in your Play Games account and merged with the save on the device when the game starts and whenever you return to it. That lets you carry on on another device or after reinstalling.settings.cfgand the installation key are not uploaded.
The connection is made not by the game itself but by Google Play services on your phone. The copy sits in your Google account; I have no access to it and receive no data from it. Google processes the data under its own responsibility; Google's privacy terms apply.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
The legal basis is Art. 6(1)(b) GDPR: saving and syncing your progress is the feature you use by signing in to Google Play Games. You can sign out at any time in the Google Play Games app or your Play Games profile settings, where you can also delete this game's saved data.
8. The links in the “About” dialog
The “About” dialog in the menu contains links to kawaiibakery.rellit.de, to this privacy policy and to the terms of use, and the legal notice inside it a link to rellit.de/impressum and an e-mail address. If you tap one of them, Android hands the address to your browser or e-mail app, and only that app opens a connection – the game itself transmits nothing. Visiting the website is covered by the website's privacy policy, in particular its information on server log files.
9. Distribution through Google Play
The game is distributed through Google Play. When you download, update and use the store, Google processes data under its own responsibility – such as your Google account, installation data and, if you have allowed this in Android's settings, the system's crash and diagnostic reports. I have no influence over that; Google's privacy terms apply.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Otherwise I only see aggregated statistics in the Play Console, such as installations per country or device type and the number of crashes. I cannot draw conclusions about individual people from them. Reviews you post in the store are public and visible to me, as to everyone else, under your Google profile name.
10. What the game does not do
For clarity, because apps are often assumed to do otherwise:
- No analytics tool is used – no Firebase Analytics, no Google Analytics, no comparable SDK.
- No crash reporting service such as Crashlytics is integrated.
- There is no user account of the game's own and no registration; signing in to Google Play Games is optional (section 7).
- There is no online leaderboard, no chat and no network play.
- How often, how long or how well you play is not transmitted to me.
- Sprinkles, hints and pastries cannot be bought with real money; the only purchase is “Remove ads”.
- No data is sold, and none is passed on to third parties – except to Google to the extent described above.
11. Retention
The setting, progress, collection, purchase status and puzzle in progress remain on your device until you uninstall the game or clear its data; the puzzle in progress is also overwritten whenever you start a new one. The cloud save stays in your Play Games account until you delete the game's data there. I keep purchase details from the Play Console and emails about a purchase for as long as commercial and tax law requires (usually up to ten years); other emails I delete once the request is settled. For data arising at Google in connection with ads, purchases, the store, Google Play Games and Android's backup, Google's own retention periods apply.
12. Your rights
Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21) – in particular to processing based on legitimate interest. You can withdraw consent you have given at any time with effect for the future (Art. 7(3)), in the game under “Privacy settings”.
One practical note: apart from the purchase details in section 5, I hold no data about you that I could provide information on or delete. You delete the settings, progress and saved puzzle by uninstalling the game or clearing its data, and the cloud save in your Play Games profile. For data arising at Google, please address your request to Google directly.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority of your place of residence is competent, as is the one responsible for me:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de
Web: datenschutz.hessen.de
13. Children
The game is not specifically aimed at children and is not classified as a children's app in the store. Under Art. 8 GDPR, only people aged 16 or over can consent to the personalized ads in section 4 themselves (the age may be lower in your country); anyone younger should decline in the consent dialog or ask their parents. The game then stays fully playable, with non-personalized ads.
14. Changes to this policy
This policy is updated whenever the game or the legal situation changes – for a new feature that processes data, before that version reaches the store. The current version is always available at this address. The “last updated” date above shows when something last changed.
15. Contact
For questions about privacy in this game: info@rellit.de