Privacy
Privacy information for the use of the Fotanni app.
Updated: 20 October 2026
Anonymous usage statistics
So that we can see how Fotanni is used and where getting started fails, the app reports a few fixed game events without any identifier to the Fotanni backend (Cloudflare): whether the introduction was started, skipped or completed, that a deck was created, that a round was started or finished (per game mode), that an online room was opened or a guest joined, and that a result card was shared. Each report contains only the event name, where applicable the game mode as a fixed category, platform and app version, plus the rough origin of the installation (store or test) so that test traffic is counted separately; the origin is determined on the device. No account, device or installation identifiers, player names, photos, deck or room names, game progress or free text are transmitted. Events are only counted per day; the Fotanni backend deletes every daily counter after 14 days at the latest (hourly deletion run). We keep aggregated daily counts in our internal operations overview without a fixed deletion period. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving the app and finding problems when getting started. Because the reports contain no identifier, we cannot link them to a person (Art. 11 GDPR). You can object under Art. 21 GDPR at any time by emailing support@fotanni.app. If a report fails, this has no effect on the game or a purchase.
1. Controller
Christian Hermann & Martina Hermann GbR, An Rainen 3, 72525 Münsingen, Germany; email: support@fotanni.app.
2. Data processed
Local decks, selected photos, game state and settings are stored encrypted on the device. Fotanni reads the capture year and month from the image data (or the file name) on your device and stores them in the deck; location data (GPS) is never read and is removed from the photos. Deliberately created exports are encrypted, and the shareable result card contains no photos.
Private online rooms process sign-in (Apple or Google via Firebase Authentication; players can join as guests without an account), room data, aliases, participant state and the photos added to the room together with their year and month through Cloudflare (R2, EU), and show them only to players who joined. Transport is encrypted (TLS) but not end-to-end: while the room exists, the server can technically access the photos. When the room ends, or when a player is removed or leaves, access is withdrawn immediately; when a player leaves the room, the photos that player added to it are also deleted on leaving; otherwise the photo files are deleted after 24 hours at the latest in photo rooms (Timeline, “Whose photo?”) and up to 7 days in Pairs rooms with an uploaded deck. There are no push notifications and no public gallery.
Reports process the room, content and report information required for review. Photos may be shared only when the required rights and consent are in place. If you report a photo in “Whose photo?”, a report goes to our moderation: photo ID, room and participant IDs and, if you are signed in, your account ID, but without a photo attachment and without free text. We process reports to review possible rights violations, take necessary measures and send legally required notices (Art. 6(1)(c) GDPR in conjunction with Arts. 16 and 17 DSA). Beyond that, we use the report data required for this to enforce our content rules and prevent repeated abuse (Art. 6(1)(f) GDPR). Our legitimate interests are safe gameplay and the protection of the personality rights of the people shown. We delete dismissed reports 90 days after the review is completed. For confirmed violations, we remove the identifiers of those involved after 90 days and keep a brief record of the measure until 180 days after the decision. We store data for longer only where necessary in an individual case for pending proceedings or legal claims. You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests.
With “Send feedback”, your message, an optional email address for follow-up questions, and platform and operating system version go to the Fotanni backend and are forwarded to us by email from there. We store the feedback for 180 days; we also delete the forwarded email from our mailbox no later than 180 days after receipt. To prevent abuse, we store an irreversible hash of your IP address, which we remove after 1 day; the associated rate counter is deleted after 2 hours (Art. 6(1)(f) GDPR).
To protect storage from abuse, the backend counts new decks and room photos per day and source network. For this we store a hash of the source network (IPv4 address or IPv6 /64 network), formed with a secret value and not reversible, together with the daily count, never the address itself; the entry is deleted after about 2 days (Art. 6(1)(f) GDPR).
Purchase verification and secure restoration may process technical store transaction data and a non-reversible binding to the Apple or Google sign-in used.
Purchase and account-deletion diagnostics: the app reports fixed technical purchase steps and a failed account deletion with only the event name, a fixed reason, platform and app version, without identifiers, room or photo data and without purchase receipts. They are counted per day; the Fotanni backend deletes every daily counter after 14 days at the latest (hourly deletion run). Aggregate daily counters of purchase steps, restorations and account-deletion errors are kept in our internal operations overview without a fixed deletion date (Art. 6(1)(f) GDPR).
3. Purposes and legal bases
We process data to provide the app, verify purchases, deliver online features you actively use, maintain security, resolve errors and answer voluntary requests. Depending on the operation, the legal bases are Article 6(1)(b), (c), (f) or, where expressly requested, (a) GDPR.
4. Recipients and service providers
We use Cloudflare for private rooms, media and security, Firebase/Google for sign-in, and Apple and Google for store services.
5. International transfers
Some providers may process data outside the EU or EEA. Where no adequacy decision applies, transfers rely on appropriate safeguards, in particular EU Standard Contractual Clauses, or on applicable statutory exceptions.
6. Advertising and tracking
The app contains no third-party advertising. We do not create advertising profiles, sell personal data or use advertising tracking.
7. Retention and security
Local data remains on the device until it is removed in the app or through system settings. Server data is retained only for as long as required for the respective function, security and statutory evidence. Transfers are encrypted.
8. Delete data and account
Local data can be removed in the app or through the device’s system settings. Where an account or cloud data exists, deletion can be requested in the app or by emailing support@fotanni.app. Store purchases are managed separately by Apple or Google.
9. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future. You may also lodge a complaint with a data-protection authority; the LfDI Baden-Württemberg is the authority responsible for our registered office.
Privacy when visiting this website
These additional notices apply to fotanni.app; the other sections describe the app. The controller is Christian Hermann & Martina Hermann GbR, identified above (support@fotanni.app).
We use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to host and protect this website. When pages and media are requested, Cloudflare processes the IP address, time, requested URL, HTTP status and browser and device information. The purposes are content delivery, troubleshooting and attack prevention. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website.
We use Umami to measure reach. The software runs exclusively on a server we operate in Frankfurt am Main, Germany (analytics.bitbeans.de); the data is not shared with third parties and is not combined across websites. We process the page visited, the referrer, the country of origin, device type, screen size, browser and operating system. We also count clicks on the App Store and Google Play buttons; only the store and the app concerned are transmitted, nothing about you personally. Umami sets no cookies and places no identifier on your device; visits are distinguished by a daily rotating, non-reversible hash value, and the IP address itself is not stored. No user profiles are created and no link to accounts is made. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the statistical evaluation of website use in order to improve what we offer. You may object to this processing at any time at support@fotanni.app. The measurement data is deleted after 14 months.
The analytics server runs in a data center of our hosting provider OVHcloud in Frankfurt am Main, Germany. OVHcloud acts as a processor and exclusively within the EU; the measurement data is not transferred to third countries. If your browser sends the “Do Not Track” signal, the visit is not measured. Independently of that, you can object to the reach measurement informally at any time at support@fotanni.app. The measurement is not required in order to use the website and has no effect on content or features.
Links to app stores and social networks connect to the provider only when opened. Depending on security checks, Cloudflare may use technically necessary cookies to prevent bots and attacks. Access to the device that is strictly necessary for this purpose is based on Section 25(2)(2) TDDDG.
Technical access data is processed only as long as necessary for delivery, troubleshooting and security, then deleted or anonymised unless statutory retention obligations apply. Cloudflare may process data in the United States. Further information about Cloudflare, international transfers and privacy rights is provided in the other sections and the provider information linked below.
Cloudflare: Privacy Policy · Data Processing Addendum