Privacy Policy

For the game Transmutatio · Last updated: 25 September 2026 · The German version is legally binding.

In short: Transmutatio can be played entirely without an account, sign-in or internet. Your progress stays on your device. There are no ads, no tracking and no analytics. Only if you switch on the online leaderboard or send a duel are a few, explicitly listed game data sent to our own server in Germany — without e-mail address, real name, password or IP logs.

1. Controller

Bodo Kern Medienproduktion · KernMedia
Hauptstraße 8, 38531 Rötgesbüttel, Germany
E-mail: kontakt@kernmedia.de

2. Playing without online features (default)

By default no personal data is sent to us. No registration, no user ID, no tracking, no analytics SDKs, no advertising.

3. Online leaderboard (optional, off by default)

StoredNot stored
A random player ID, your chosen nickname, the number of your avatar, optionally a country you pick (never detected), and per experiment: score, circle, win, school, seal, seed, daily flag, play time, timestamp E-mail, real name, password, phone number, location, device ID, contacts, IP address

No password: the server creates a random key that the app keeps in your device's Keychain; the server stores only a one-way hash of it.

Visible to others: nickname, avatar, country (if given) and your best result per period including seed, school and seal, so others can challenge you. Please don't use your real name as nickname.

Also public on the web: the top ten entries per period (nickname, avatar, country, score, circle, school, seed) are also shown on kerncraftapp.de/transmutatio. When you view the leaderboard there, your browser fetches it directly from our server — without cookies and without an access log; your IP address is only counted in memory for rate limiting as described below. If you delete your profile, it disappears there immediately as well.

Abuse protection: nicknames are checked for offensive words; entries can be reported (we store reporter ID, reported ID and reason; after three reports an entry is hidden until reviewed). For rate limiting your IP address is only counted in memory as a daily changing hash and never stored; the web server keeps no access log for this service.

Deletion: in the app under Settings → Online Leaderboard → “Delete profile and all entries” your profile, all results and your reports are removed immediately and completely.

Legal basis: your consent (Art. 6(1)(a) GDPR), revocable at any time; for moderation our legitimate interest in a fair leaderboard (Art. 6(1)(f) GDPR).

4. Duels

When you send a duel, our server creates a six-character code and stores the game start (seed, school, seal), your result (score, circle), the daily date if applicable and — only if you have a leaderboard profile — a reference to it so your nickname is shown. Without a profile the duel is anonymous. Anyone with the code or link can view it. Duel codes are deleted automatically after 60 days. Legal basis: providing the feature you requested (Art. 6(1)(b) GDPR).

5. Where data is stored

Leaderboard and duels run on a server operated by us at STRATO in Germany (processing under Art. 28 GDPR), over encrypted HTTPS. No transfer to third countries.

6. No sharing, no ads

We do not sell data and use no tracking, ad networks, analytics or social media plugins.

7. Your rights

You have the rights of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and may withdraw consent at any time. Contact kontakt@kernmedia.de with your nickname. You may also lodge a complaint with a supervisory authority; ours is the Data Protection Commissioner of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany.

8. Children

The game itself collects no data. The online leaderboard requires a minimum age of 16; younger players need parental consent.