Skip to content

Legal

Privacy

For the game Tiki Ranch and the website tiki.tbak.org.

1. Controller

Tobias Bak
Im Oberdorf 13a
36399 Freiensteinau
Germany
E-mail: info@tbak.org

2. The essentials

  • Tiki Ranch asks for no personal details: no name, no e-mail address, no date of birth, no location, no contacts.
  • No ads, no trackers: neither the game nor this website contains ads or analytics and tracking tools; the game uses no advertising ID.
  • Your island lives on our own server in Germany.
  • We store the game’s error reports without a player number.
  • This website sets no cookies and loads nothing from third parties.

3. Where the data is kept

The game server, the website and the backups run at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR). The game talks to the server only over an encrypted connection (HTTPS).

4. The website

When you open a page, your browser necessarily transmits data such as your IP address, the requested address, date and time and the browser type. We process it only to deliver the page; the legal basis is our legitimate interest in a working and secure website (Art. 6(1)(f) GDPR). We do not keep access logs. The website contains no forms and no scripts.

5. The game

5.1 Signing in without personal details

On first launch the app creates a random identifier and stores it on your device. The app uses it to sign in to our server; it is not a manufacturer’s device number. The server then creates an account with a player number. We store the player number, the random identifier and the time the account was created. With every connection your device necessarily transmits its IP address.

5.2 Your game progress

Everything that happens on your island is calculated and stored by our server: fields, animals, buildings, supplies, coins, experience and level, orders, the times of your actions by the server’s clock, and the looks you have earned or bought. Your progress is linked to your player number.

Purpose: to provide the game to you and to prevent cheating with the device clock. The legal basis is Art. 6(1)(b) GDPR (providing the game you use). We keep your progress until you delete your account.

5.3 Error reports

If an error occurs in the game, the app sends a report to our server: the kind and text of the error, the place in the program, the game version, the platform and the device model. The app does not put identifiers or names into it. The server stores reports without a player number and without an identifier and counts identical reports together. So that nobody can flood the server, it counts per account and day how many reports arrived; this counter is linked to your player number and disappears with the account.

Purpose: finding and fixing bugs. The legal basis is our legitimate interest in a working game (Art. 6(1)(f) GDPR). How long we keep reports: [to be added].

5.4 Game server logs

The game server writes technical logs to find faults and fend off abuse. They may contain your IP address, the time and kind of a request, and your player number. The logs are limited in size: the oldest entries disappear as new ones arrive. There is no fixed period in days; entries remain after an account is deleted until they are overwritten. The legal basis is Art. 6(1)(f) GDPR.

5.5 Backups

We back up the game’s database every day, on the server and on backup storage at Hetzner in Germany. We keep 14 daily and 8 weekly copies, so deleted data, including a deleted account, remains in these backups for up to eight weeks. In addition, Hetzner backs up the whole server; these images are continuously replaced by newer ones. We restore a backup only after a failure. The legal basis is Art. 6(1)(f) GDPR.

5.6 What the game does not do

  • no ads and no advertising, analytics or tracking libraries,
  • no advertising ID, no location, no access to contacts, camera or microphone,
  • no chat and no free text between players.

6. Purchases in the boutique

The boutique is not open yet. Until then the game collects no purchase data.

Once the boutique opens, it will only sell items for looks. You pay through the App Store or Google Play; payment details never reach us. After a purchase the app sends the store’s receipt to our server, which checks it with the store and gives you the item.

We store the item on your progress and a purchase marker: a checksum of the transaction number, the purchased items, the player numbers the purchase grants them to, the platform, and the time of the purchase and of any refund. The marker prevents the same receipt from being redeemed twice and allows purchases to be restored on a new account. That is why it stays when you delete your account. For how long: [to be added]. The legal basis is Art. 6(1)(b) GDPR (fulfilling the purchase) and (f) (protection against double redemption).

7. App Store and Google Play

When you download Tiki Ranch from the App Store or Google Play or buy something there, Apple or Google process data under their own responsibility, for example your store account and your payment. We have no influence on this; the store’s own privacy notices apply.

8. Contact by e-mail

If you write to us, we process your address and the content of your message to answer your request (Art. 6(1)(b) GDPR for requests about a contract, otherwise (f)). We keep business correspondence for as long as commercial and tax law requires (§ 257 HGB, § 147 AO); otherwise we delete it once the matter is settled.

We process our e-mail on our own mail server, also at Hetzner Online GmbH.

9. Children

Tiki Ranch is a friendly game that children play too. It asks for no personal details and has no chat. Purchases only go through the store’s purchase dialog, so that parental purchase locks and approvals apply.

10. Deleting your account

You can delete your account at any time in the game under Settings, or ask us to delete it by e-mail. What disappears and what remains is described on the page Delete account. Because we store neither names nor e-mail addresses, we need your player number (in the game under Settings) for any request about your data; without it we cannot link anything to an account (Art. 11 GDPR).

11. Your rights

You have the right to

  • access the data we hold about you (Art. 15 GDPR),
  • rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interests (Art. 21),
  • lodge a complaint with a data protection supervisory authority (Art. 77).

An informal e-mail to info@tbak.org with your player number is enough.

Last updated: October 2026