Running Christmas Calendar

Privacy policy

Last updated: November 2026
This English version is provided for convenience. In case of discrepancies, the German version prevails.

Controller

André Voltmann (Losandros Apps)
Pelargusstr. 5, 70180 Stuttgart, Germany
Email: hello [at] losandros [dot] com
Contact: contact form

Overview

This privacy policy applies to the website lauf-adventskalender.de and the “Running Christmas Calendar” app for iOS and Android. It explains which data is processed, why, and what your rights are.

  • The website sets no cookies and uses no tracking.
  • The app works without sign-up. Training progress, quiz answers and settings stay on your device.
  • Crash reports and usage statistics only run with your consent.

Website

Hosting and server log files

The website runs on Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit it, Google processes technically necessary data: IP address, date and time, page requested, referrer and browser identifier. This is needed to deliver the website and protect it from abuse.

  • Legal basis: legitimate interest in delivering the website securely and quickly (Art. 6(1)(f) GDPR).
  • Processing on our behalf: Google processes the data on our behalf.
  • Location: the Firebase project is set up in the EU. However, the content is delivered through Google’s worldwide content delivery network, usually from a server near you. Processing in the USA is therefore possible (see “Recipients and transfer to the USA”).
  • Retention: Google keeps access data only as long as needed for delivery and security. We do not analyse access logs ourselves.

No cookies, no tracking

The website sets no cookies, stores nothing in your browser and uses no analytics or advertising services. Fonts and images are delivered together with the website; no data is sent to Google Fonts or other third parties when you visit.

Contact form and email

When you submit the contact form, we store your topic, name, email address, your company (for partner requests), your message, the website language, your consent and the time in Google Firebase Firestore. The database is located in Berlin (region europe-west10). Processing is handled by a Google Cloud Function in Frankfurt am Main (region europe-west3).

  • Abuse protection: to limit spam, we store an irreversible hash of your IP address, created with a secret key, for 24 hours and use it to count messages per day. We do not store the IP address itself. The legal basis for this is our legitimate interest in a working contact form (Art. 6(1)(f) GDPR).
  • If you email us directly instead (address in the imprint), we process the details in your email.
  • Purpose: answering your request.
  • Legal basis: your consent and handling your request (Art. 6(1)(a) and (b) GDPR).
  • Deletion: once the request has been handled and no statutory retention obligations apply.
  • Withdrawal: you can withdraw your consent at any time via the contact form.

Links to the app stores

The “App Store” and “Google Play” buttons are plain links. Only when you click them does Apple’s or Google’s page open; their privacy policies apply there (see “Recipients and transfer to the USA”).

App: on your device

  • Training progress, quiz answers and settings are stored only on your device (unencrypted).
  • To delete them, clear the app data in your settings or uninstall the app.
  • Without your consent the app sends nothing, except the raffle entry you submit yourself.

App: raffle entry

  • When you enter, we store your name, email address, both confirmations (18+ and consent), the app language and the time of entry in Google Firebase Firestore. The database is located in Berlin (region europe-west10).
  • To submit, the app signs in anonymously with Firebase Authentication. This creates a random user ID that is stored with your entry and may be processed in the USA. Firebase Authentication logs your IP address to prevent abuse and keeps it for a few weeks. Firebase App Check verifies that the request comes from the genuine app to prevent misuse.
  • Giving your name and email address is voluntary but needed to take part.
  • Purpose: running the raffle and notifying the winners by email.
  • Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Deletion: we delete all entries by 01/31/2027 at the latest. Winners’ postal addresses are kept only as long as delivery requires.
  • Withdrawal: you can withdraw your consent at any time via the contact form. You then no longer take part in the drawing.
  • On your device the app keeps no name or email address, only that you have entered. Firebase Authentication keeps the random user ID on the device. Clearing the app data or uninstalling the app removes both; on iPhone the user ID can remain in the Keychain.

App: crash reports (Sentry)

  • Only if you agree (consent page or the switch in Infos). You can change your choice in Infos at any time.
  • Sent: error reports with the technical sequence (stack trace), app performance data, device type, OS and app version, and a random installation ID. No name, no email address. The app sends no IP address, and storing IP addresses is turned off in Sentry.
  • Provider: Functional Software, Inc. (Sentry), USA. The data is stored in the USA.
  • Retention: Sentry deletes reports automatically after its retention period (at most 90 days).
  • Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

App: usage statistics (Google Analytics for Firebase)

  • Only if you agree (its own switch on the consent page, “Accept all”, or the switch in Infos). You can change your choice in Infos at any time.
  • Sent: automatically collected events about active users and sessions (such as first open, session start and engagement time), device type and model, OS and app version, language, the approximate location (country, region, city) that Google derives from the IP address, and these events: door opened (day), session done (day, type), challenge done (day), quiz answered (day, right or wrong), wheel spun, raffle entry. Google Analytics does not store the IP address itself.
  • For this, Firebase assigns a random app instance ID. Never sent: name, email address, advertising ID (the permission is removed on Android and not built in on iOS), a user ID or any user properties set by the app. No personalized advertising.
  • Retention: 2 months, after which Google deletes the event data.
  • Switching it off stops collection and resets the analytics ID on your device.
  • Provider: Google Ireland Limited, Ireland, and Google LLC, USA. A transfer to the USA is possible.
  • Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

Recipients and transfer to the USA

Your rights

  • You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR).
  • Just write to us via the contact form.
  • You can lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW).
  • There is no automated decision-making or profiling.

Advertising

  • NO third-party advertising services
  • No advertising ID and no sharing of your data for advertising
  • NO in-app advertising

Partner shops

  • A voucher’s shop link opens the partner’s website in your browser. The app passes no data to the partner.
  • On the website and for any order, the partner is responsible and its own privacy policy applies.

External links

  • The website and the app may contain links to external websites.
  • We are not responsible for their privacy practices.
  • Review their policies before visiting.

Children’s privacy

  • The app is not intended for users under 18.
  • We do not knowingly collect data from minors.