Pocket Deduction (Android app and browser version) · Last updated: 16 September 2026
Janis Lennart Kübler, Serpent Gaming (trading as Little Lighthouse Games)
Quinckestraße 29, 69120 Heidelberg, Germany
Email: studio@littlelighthousegames.de
We are not required to appoint a data protection officer.
Survey progress, journal records, your expedition checkpoint and settings (language, appearance, sounds, vibration and your analytics choice) are saved in the app's local storage on your device. This data is not transmitted to us. Uninstalling the app, or clearing the browser's site data for the browser version, deletes it.
If you tap “Share statistics” or enable the usage-statistics switch in Settings, we use Firebase Analytics and Firebase Crashlytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how the game is played, for example which surveys are too hard and how often explanations are used.
Processed data: gameplay events (such as survey started or completed, play mode, moves, explanations used, supply use and whether a video or the Full Expedition offer was viewed), an app-instance identifier, device model, operating system and app version, language, and an approximate location derived from your IP address. We do not collect names, contact details or the layouts of your puzzles. The app does not use the Android advertising ID for analytics, and ad-personalization signals are switched off for analytics.
Crash reports: if the game crashes or a script error occurs, Crashlytics sends a report so we can fix it. It contains the error and its technical stack trace, device model, operating system and app version, the state of the app at the time (for example which clearing was open), a crash-specific installation identifier and the time of the crash. Crash reporting is switched off in the app until you allow it, and declining also deletes reports that have not been sent.
These statistics are pseudonymous rather than fully anonymous: they are linked to a random identifier for your installation, not to you as a person.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, analytics and crash collection stay disabled. You can withdraw consent at any time in Settings with effect for the future. Analytics data is retained for up to 14 months; crash reports for up to 90 days.
When your field supplies run out, you can choose to watch a short video to continue. Videos are only loaded after you tap that button. The ad provider is Google Ireland Limited (AdMob).
Before a video is shown, Google's User Messaging Platform may ask for your consent where required by law, and stores your choice on your device. If you accept personalized ads there, Google may use the Android advertising ID to select them; if you decline, the videos are non-personalized. To deliver the video, limit how often it is shown, measure it and prevent fraud, Google still processes technical data such as your IP address, device and app information and your interaction with the video.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) where required. Otherwise, our legitimate interest in offering a free way to continue playing (Art. 6(1)(f) GDPR). If you prefer, simply return to your checkpoint instead; no video is ever required.
If you buy Full Expedition, the purchase is processed entirely by Google Play. We never receive your payment details. We receive a purchase confirmation (such as an order ID and purchase token) to unlock and restore what you bought. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Google's privacy policy applies to the payment itself.
Versions that include playtest notes can record gameplay events locally on your device if you enable that option. Nothing is sent automatically. A file only leaves your device if you export it and choose to share it yourself.
This website and the browser version of the game are hosted on Google Firebase Hosting (Google Ireland Limited). When you visit, the server processes your IP address, date and time, requested page and browser information in log files to deliver the content and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). The website itself sets no cookies and uses no tracking. In the browser version, analytics follows the same opt-in described in section 4.
Google may process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and Google additionally uses the EU Standard Contractual Clauses.
The game is not directed at children under 13 (or under 16 where required by local law). We do not knowingly collect personal data from children.
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Because we do not know who you are, please include your app-instance ID if a request concerns analytics data. Contact us at the address above.
You also have the right to lodge a complaint with a supervisory authority, for example the authority in your country of residence, or the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.
We update this policy when the game or the law changes. The current version is always available at this address.