Legal information
Last updated: 17 September 2026
Last updated: 17 September 2026 · ZaRaster
1. Provider and scope
This policy applies to the Android app ZaRaster (package name de.zaraster.app) and its Google Play Store listing. The controller is Mannibest GmbH, An der Talle 97, 33102 Paderborn, Germany. Contact: telephone 05252 940600, email [email protected].
2. Puzzles and local profiles
The puzzles can be played without a separate online account. Profile names, optionally selected profile pictures, settings, saved games, achievements and game statistics are processed in app storage. The app does not upload this content to a Mannibest server or pass it to the advertising service as profile data. A profile picture is imported only after you select it through the Android file dialog. Android backup is described in section 8.
This processing provides the game features you request (Article 6(1)(b) GDPR). Storage on the device that is strictly necessary for these features takes place under section 25(2), no. 2 TDDDG. Advertising, consent management and Google Play purchases require a connection to Google.
3. Advertising with Google AdMob
The free version uses Google AdMob to display banners and occasional full-screen advertisements between game rounds. For users in the European Economic Area, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is a contact for data processing by Google. Google LLC in the USA, affiliated companies and advertising partners named in the consent dialog may participate in processing.
The Google Mobile Ads SDK processes, in particular, IP addresses (including to infer an approximate location), device and app identifiers, information about app and advertising interactions, and diagnostic and performance data. Processing serves advertising delivery, measurement, analysis and fraud prevention. Personalised advertising is disabled in ZaRaster for all users. The app does not request GPS location. Data collected by the advertising SDK is transmitted in encrypted form.
The identifiers and advertising formats used depend, among other things, on your choices, device settings and treatment as a minor. Non-personalised or limited advertising does not mean use without data processing. Mannibest may receive reports on advertising performance and revenue through AdMob.
4. Consent and privacy options
The app uses Google’s User Messaging Platform (UMP) to manage advertising choices. Technical information such as the IP address and consent status is processed to connect to Google and determine the notices required. Your choice is stored on the device. Where required, a dialog displays purposes, providers and choices. Advertisements are requested only when consent management permits this.
Device access and advertising processing requiring consent are based on section 25(1) TDDDG and Article 6(1)(a) GDPR. Necessary management of and compliance with your privacy decision serve the fulfilment of data protection obligations (Article 6(1)(c) GDPR). For other processing described in the dialog, the legal bases and objection options explained there apply.
You may withdraw consent with effect for the future or change your choice. Use “Datenschutzauswahl ändern” (change privacy choices) in settings if this option is provided for your region. Withdrawal does not affect the lawfulness of previous processing. The puzzles do not require consent to personalised advertising. You can also reset or delete the advertising ID in Android settings; this does not replace withdrawal through the consent dialog.
5. Purchasing ad-free use
The optional purchase of ad-free use is handled through Google Play Billing. Google processes account and transaction data needed for payment and purchase management. The app receives purchase status, product ID and a signed purchase receipt including a purchase token. It checks and stores the receipt locally, acknowledges the purchase to Google Play and queries purchase status for restoration. Payment data such as credit card numbers is not requested in the app.
This processing serves the fulfilment and restoration of the purchase (Article 6(1)(b) GDPR). Once the app recognises ad-free use, it loads no further advertisements and removes existing advertisements. Purchase status queries to Google Play remain possible; purchasing does not automatically delete data previously stored by Google.
6. Children and young people
Local player profiles do not ask for age and are not Google accounts. Advertising requests for all users are marked as directed at children and users below the age of consent; personalised advertising is excluded. Advertising content rated G is requested. The app has no permission to access the Android advertising ID. It does not transmit local profile pictures or names to Google to determine age. Parents can additionally restrict purchases through device and Google Play settings.
7. Recipients and international processing
Google processes data for the advertising, consent and purchase services described. Other recipients for advertising are identified in the consent dialog shown. No additional analytics or social media services are integrated into the app; measurement and diagnostic features of Google services are unaffected.
Data may also be processed outside the EEA, particularly in the USA. Google describes applicable adequacy decisions and standard contractual clauses, among other safeguards. Details and information about safeguards: https://policies.google.com/privacy/frameworks?hl=en.
8. Retention, deletion and Android backup
Local app data remains until deleted. You can clear app storage through Android settings or uninstall the app. This also removes locally stored consent information and purchase receipts, but does not delete a Google Play purchase or data Google has already processed. A valid purchase can be restored through Google Play.
Depending on your device settings, Android may back up and restore local app data. The purchase receipt stored by the app is located in a directory excluded from Android backup. You manage backups through your device or Google account settings.
For data stored by Google, retention periods depend on the data type, purpose, account settings and statutory retention requirements. There is no single deletion period for all advertising and purchase data. Google explains retention and deletion options at https://policies.google.com/technologies/retention?hl=en. Mannibest cannot remotely delete profiles and saved games stored only on your device.
9. Contacting us and your rights
If you contact us, we process your contact details and message to handle the request (Article 6(1)(b) GDPR for contractual enquiries, otherwise Article 6(1)(f) GDPR; the legitimate interest is responding to your request). We delete this information once processing is complete unless statutory retention requirements or necessary retention for legal defence apply.
Where the legal requirements are met, you have rights of access, rectification, erasure, restriction, data portability and objection to processing based on legitimate interests, and the right to withdraw consent. For processing by Mannibest, contact [email protected]; for processing under Google’s responsibility, Google’s contact and privacy tools are also available.
You may complain to a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, [email protected], www.ldi.nrw.de.
10. Further information from Google
Google privacy policy: https://policies.google.com/privacy?hl=en
Data use in apps with Google services: https://policies.google.com/technologies/partner-sites?hl=en
This policy describes the app. When visiting the website on which this policy is published, the privacy notices of the respective website operator also apply.
11. Updates to this policy
We update this policy when app features, integrated services or data protection requirements change. The date of the version is stated at the beginning of this page.