Privacy Policy

The game is developed and published by Eyad Zebdeh, an independent app developer (“we,” “our,” or “us”). For the purposes of the EU/UK General Data Protection Regulation (GDPR), Eyad Zebdeh is the data controller for any processing described in this policy. A registered business entity and postal address will be added here once an entity is formalised.

You can reach the controller by email at eyad.zebdeh@gmail.com.

We do not collect, receive, request, transmit, sell, or share any personal data through the game. We run no servers and hold no database of players. The game has no registration, no login, no messaging, no user-generated content, and no contact form.

This is enforced technically, not just by policy: the published Android package does not declare the INTERNET permission, so Android itself prevents the game from opening any network connection.

So that you do not lose your progress, the game writes two small files into its own private storage area on your device:

• •Score data — your best score, the stars you have earned, and which routes you have completed.
• •Settings — your chosen interface language (English or German).

These files live in the app’s private sandbox, which Android keeps inaccessible to other apps. They are never transmitted, they contain no identifier, no name, no email address and no device identifier, and they cannot be linked to you. They are therefore not personal data under the GDPR.

You can erase them at any time by uninstalling the game, or through Settings → Apps → Berlin Subway Simulator → Storage → Clear data on your device. The game is configured not to retain data after uninstallation.

The game requests exactly one Android permission: android.permission.VIBRATE, used for haptic feedback during driving. Vibration exposes no information about you.

The game does not request access to the internet, your location, camera, microphone, contacts, phone state, calendar, shared or external storage, or the Android advertising identifier (AD_ID).

The current version of the game contains no advertising network, no analytics or attribution SDK, no crash-reporting SDK, no social login, no in-app purchases or billing library, and no Google Play Games Services integration. It does not read or transmit the advertising identifier and it does not build a profile of you.

We do not carry out any automated decision-making or profiling within the meaning of Article 22 GDPR.

The game is distributed through Google Play. Google collects certain data as its own independent controller when you browse, download, install, or update an app — for example your Google account activity, device model, and country — and Android may send crash reports if you have enabled that option in your device settings. That processing is governed by Google’s Privacy Policy, not by us.

What we see in the Google Play Console is aggregated and anonymised statistics — install and uninstall counts, rough country breakdowns, device model breakdowns, ratings, and anonymised crash clusters. We cannot identify an individual player from it and we cannot link it to anything stored on your device. We rely on our legitimate interest in keeping the game working on real devices for this (Article 6(1)(f) GDPR).

The game is suitable for a general audience. Because it collects no data at all, it collects no data from children either. There is no advertising, no chat or other communication feature, no in-app purchasing, and no link out to third-party content from within gameplay.

We do not knowingly collect personal information from anyone, including children under 13 (US Children’s Online Privacy Protection Act) or under 16 or the applicable age of digital consent in your country (Article 8 GDPR). If you believe a child has somehow provided us with personal information, contact eyad.zebdeh@gmail.com and we will act on it.

If you are in the European Economic Area or the United Kingdom, you have the right to:

• •access the personal data we hold about you (Art. 15)
• •have inaccurate data corrected (Art. 16)
• •have your data erased (Art. 17)
• •restrict how your data is processed (Art. 18)
• •receive your data in a portable format (Art. 20)
• •object to processing based on legitimate interests (Art. 21)
• •withdraw consent at any time, where processing is based on consent (Art. 7(3))

In practice there is nothing on our side for us to look up, correct, export, or erase, because we hold no data about you. You have complete control over the only data the game creates by clearing the app’s data or uninstalling it, as described in section 3. If you nonetheless want to make a request, write to eyad.zebdeh@gmail.com and we will respond within one month (Art. 12(3)).

You also have the right to lodge a complaint with a data protection supervisory authority. In Germany, the competent authorities are listed by the Federal Commissioner for Data Protection and Freedom of Information.

Under the California Consumer Privacy Act as amended by the CPRA, we confirm that the game collects no categories of personal information, and that we have never sold or shared personal information, nor used it for cross-context behavioural advertising. No “Do Not Sell or Share My Personal Information” mechanism is required because no such activity takes place. Your rights to know, delete, and correct are addressed by section 8; we will not discriminate against you for exercising them.

The game transmits nothing, so it transfers no personal data across borders. The only cross-border processing connected with this policy is the delivery of this web page, described in section 11, and Google’s own distribution of the app, described in section 6.

This policy is published on menumasters.app, a domain operated by the same developer, and served by Vercel Inc. Vercel processes ordinary server request logs — including your IP address, browser user agent, and the page requested — in order to deliver the page and protect it against abuse. That is our legitimate interest under Article 6(1)(f) GDPR, and Vercel acts as our processor. See Vercel’s privacy policy.

This page sets no cookies, loads no analytics, and embeds no third-party trackers.

Because no data leaves your device, there is no server-side store of player data that could be breached. The files the game writes are protected by Android’s per-application sandbox and by your device’s own storage encryption and lock screen.

We retain nothing, because we receive nothing. The files described in section 3 remain on your device for as long as the game is installed and you have not cleared its data.

If a future version of the game introduces a feature that processes data — for example advertising, Google Play Games Services leaderboards and achievements, or cloud saves — we will update this policy and change the effective date at the top before that version is released, and describe the change here. Your continued use of the game after an update takes effect constitutes acceptance of the revised policy.

11 September 2026 — first publication.

Questions about this policy, about the game, or about data protection generally: eyad.zebdeh@gmail.com.