Privacy Policy

Date Night: Deep Talk Cards — last updated October 13, 2026

In short: The app needs no account. Your questions, answers, and evenings stay on your device. A shared card link carries its content after the #, so it is never sent to our server. What reaches us is anonymous usage statistics and what a web server records technically.

1. Controller and provider

Controller under the GDPR and provider under § 5 DDG (German Digital Services Act):

Martin Wojtaszek
Eiserfelder Str. 1
51109 Cologne
Germany
sb.deeptalkcards@alive21.com

2. What stays on your device

The app stores locally, without sending anything to us:

the answers you write, together with the question text they belong to,
which cards an evening contained and how far you got,
which decks you have unlocked.

We have no access to any of it. There is no account, no sign-in and no server holding this content. Deleting the app deletes this data.

3. Shared card links

A shared link looks like this: https://deeptalkcards.app/c#…

Everything after the # is a fragment, and browsers do not transmit fragments to the server. The card and any answer therefore never reach us, not even when the link is opened. The page at /c reads the fragment in the recipient's browser only, and the card and the answer never leave it. The page sends one message to our usage-statistics provider containing the link's identifier — not the card and not the answer. As with any request over the internet, your device transmits its IP address to deliver that message; it is not used to determine your location and is not stored as part of the event. Section 5 has the detail.

This is deliberate, but it is not encryption: anyone holding the link can read its contents. How you send it decides how private it stays — iMessage, WhatsApp, and Signal are end-to-end encrypted, SMS and email are not.

4. This website

Log files

Our web server keeps no access logs. Page visits are not recorded — no IP address, no timestamp, no requested path, including for the card page at /c.

For a page to be delivered at all, your device has to transmit its IP address; it is processed to send the response and not recorded. If something goes wrong, the server may write a technical error log that can contain the IP address of the failing request.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is being able to fix a server fault at all.
Retention: error logs are deleted after 14 days at the latest.

The site sets no cookies, loads no external fonts, no advertising and no third-party scripts. Use of the card page at /c is counted by a single request carrying only a link identifier, described in section 5.

Nothing is stored on or read from your device — no cookie, no local storage, no device identifier — so no consent is required. That is why there is no consent banner. Legal basis: Art. 6(1)(f) GDPR, as for the app's usage statistics.

Hosting

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, acting as a processor under Art. 28 GDPR on servers located in Germany.

5. Usage statistics and other services

The services in the app are active once the app is released on the App Store. Mixpanel is also used on the card page at /c — that one is active from the moment the page is published, independently of the app — which is why this section is no longer only about the app:

Service	Purpose	What is processed
Mixpanel in the app	Anonymous usage statistics	Events such as "deck opened" or "evening completed" with the deck identifier; the identifier of a shared link when one is sent or opened, and whether this was the first launch after installing; plus a randomly generated device identifier, device type and app version
Mixpanel on the card page `/c`	Counting how often a shared card is opened, and how often the App Store button is used	The identifier of the link that was opened, and nothing else from the link — not the card, not the answer. No cookie, no device identifier and nothing stored on or read from your device; the identifier of the link is also what the event is attributed to, so two people opening the same link are not told apart. As with any request, your IP address is transmitted to deliver it; we switch off the location lookup the provider would otherwise perform, and the address is not stored as part of the event
RevenueCat	Showing the purchase screen, purchases and restoring them	A randomly generated user identifier, purchase status, the receipt supplied by Apple, and which purchase screen was shown and how it was responded to

What these services explicitly do not receive: no name, no email address, no phone number, no question text and none of your answers. The identifiers are randomly generated, are not linked to a person and are not used to track you across apps or devices. The app therefore never asks for tracking permission and uses no advertising identifier.

Where the usage statistics live: Mixpanel is configured so that data is stored and processed on servers in the European Union (EU data residency). Access by the provider from the United States for maintenance and support cannot be ruled out; the safeguards named below apply to it.

Legal bases: for usage statistics and the purchase screen, Art. 6(1)(f) GDPR — our legitimate interest in understanding whether the product works and improving it. For purchases, Art. 6(1)(b) GDPR, performance of the purchase contract.

Payments

Purchases are handled by Apple. We receive no payment details, no card numbers and no billing address. Apple is the controller for the payment itself, and its privacy policy applies.

Transfers to the United States

RevenueCat is a provider based in the United States, and processing there cannot be ruled out. For Mixpanel the EU storage described above applies, though support access from the US remains possible. Such transfers rely on standard contractual clauses under Art. 46(2)(c) GDPR or, where the provider is certified, on an adequacy decision under Art. 45 GDPR (EU-US Data Privacy Framework). Despite these safeguards, access by US authorities cannot be entirely excluded.

6. Retention

Server error logs: 14 days at most. There are no access logs.
Usage statistics: as long as needed for analysis, at most 24 months.
Purchase data: for the duration of the purchase relationship and beyond it as required by statutory retention periods.
Data on your device: until you delete it or remove the app.

7. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21 GDPR). An informal message to sb.deeptalkcards@alive21.com is enough.

Because we keep no accounts, usage statistics are stored only under a randomly generated identifier that is not linked to a person. Where we cannot identify you from the data we hold, Art. 11 GDPR does not require us to collect additional data for that purpose alone. The data on your device is yours to act on directly at any time: deleting the app removes it completely.

You also have the right to lodge a complaint with a supervisory authority. Ours is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2–4, 40213 Düsseldorf, Germany.

8. Children

The app is made for adults in a relationship. The 4+ age rating describes the content — it contains nothing objectionable — not the audience. We do not knowingly collect personal data from children. If such data does come to our attention, we delete it.

9. Changes

When the app changes, this notice changes. The version published here, with the date given above, is the one that applies.