# Privacy Policy — Custom Vibrator / Haptic Test

**Effective date:** 2026-09-04
**Applies to:** the "Custom Vibrator / Haptic Test" mobile application (`hannepps.tools.vibrationtest`, the "App")

## Who is responsible for your data

The App is published by Hannepps ("we", "us"). For the purposes of the EU/UK General Data Protection Regulation, the data controller is:

> _Hannes Hattenbach_
> _Handjerystr. 71_
> _12159 Berlin DE_
> Email: hannepps@h-h.win

## At a glance

- The App is **ad-supported**. Ads are served by Google AdMob.
- We have **no user accounts and no servers of our own**. We never see your name, email, or contacts.
- We do **not** collect GPS or precise location.
- Your vibration patterns, presets, and settings are stored **only on your device**.
- You can remove ads permanently with a one-time in-app purchase.

## What we do not collect

To be explicit, the App does not collect, request, or transmit:

- Precise or GPS location. The App declares no location permission.
- Your name, email address, phone number, contacts, or calendar.
- Photos, camera, microphone, or files from your device.
- Your vibration patterns, presets, favourites, or app settings. These are written to local storage on your device and are never uploaded to us. Uninstalling the App deletes them.

The App requests only two Android permissions: `VIBRATE` (to drive the vibration motor) and `WAKE_LOCK` (to keep the screen awake while a pattern plays). Once ads are enabled it additionally declares the advertising-identifier permission described below.

## What is collected, by whom, and why

We do not operate a backend. All data described here is collected directly by Google as our service provider, through SDKs embedded in the App.

### 1. Advertising — Google AdMob

To show ads, the AdMob SDK processes:

- **Your device's advertising identifier** (Google Advertising ID on Android, IDFA on iOS) — a resettable ID used to measure ad performance and, if you consent, to select relevant ads.
- **Your IP address**, from which an **approximate location** (typically country- or city-level) may be inferred to serve region-appropriate ads and comply with local law. This is not GPS data and does not identify your address.
- **Device and app information** such as device model, operating system version, language, and App version.
- **Ad interaction data** such as which ads were shown, viewed, or tapped.

Google acts as an independent controller for some of this processing. See [How Google uses information from sites or apps that use our services](https://policies.google.com/technologies/partner-sites) and the [AdMob/AdSense privacy notice](https://support.google.com/admob/answer/6128543).

### 2. Analytics — Google Analytics for Firebase

The App includes Google Analytics for Firebase to understand how features are used and where the App is failing. It automatically collects:

- A Firebase-generated **app instance ID**, and your device's advertising identifier.
- **App usage events** — sessions, screens opened, features used, first open, App updates.
- **Device and app information** — device model, operating system version, language, region, App version.
- **Your IP address**, used by Google to derive coarse (country-level) location and then discarded or shortened per Google's retention rules.

We only ever look at this in aggregate. See [Firebase's privacy and security information](https://firebase.google.com/support/privacy).

### 3. Purchases — Google Play Billing

If you buy the ad-free upgrade, the transaction is handled entirely by Google Play. **We never receive your payment details.** The App receives confirmation that the purchase succeeded and records a flag in local storage on your device so ads stay off. See [Google's Privacy Policy](https://policies.google.com/privacy).

### 4. Ratings prompt

The App may ask you to rate it. The prompt is shown by the Google Play in-app review flow; any review you write goes to Google Play, not to us, and is governed by Google's terms.

## Legal bases for processing (EEA/UK)

- **Consent** (Art. 6(1)(a) GDPR) — for personalized advertising and for analytics where consent is required. You give or withhold this in the consent dialog shown on first launch, and you can change your mind at any time (see below).
- **Legitimate interests** (Art. 6(1)(f) GDPR) — for non-personalized advertising, basic fraud and invalid-traffic prevention, and keeping the App working and secure.
- **Contract** (Art. 6(1)(b) GDPR) — for processing your in-app purchase and honouring the ad-free entitlement.

## Consent and personalized ads

If you are in the European Economic Area, the United Kingdom, or Switzerland, the App shows a consent dialog before any personalized ads or non-essential analytics are enabled, using a Google-certified consent management platform.

- If you **consent**, you may see personalized ads based on your advertising identifier.
- If you **decline**, you will still see ads, but non-personalized ones — selected using coarse context such as your country rather than your interests. Basic measurement and anti-fraud processing still occurs, as permitted by law.

You can reopen the dialog and change your choice at any time from the App's settings.

## Your choices and how to opt out

- **Change your consent** — reopen the privacy options dialog in the App's settings.
- **Turn off ad personalization system-wide** — Android: *Settings → Privacy → Ads → Delete advertising ID* (or *Opt out of Ads Personalization*). iOS: *Settings → Privacy & Security → Tracking*.
- **Reset your advertising identifier** — this breaks the link to previously collected ad data. Android: *Settings → Privacy → Ads → Reset advertising ID*.
- **Adjust Google's own ad settings** — [myadcenter.google.com](https://myadcenter.google.com).
- **Remove ads entirely** — buy the one-time ad-free upgrade in the App. Once active, the ads SDK is not initialized and no advertising data is sent.
- **Stop everything** — uninstall the App. This ends all collection and deletes all locally stored data.

## Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to withdraw consent, and to data portability. To exercise these rights, email **hannepps@h-h.win** and we will respond within the period required by law (one month under the GDPR).

Because we hold no accounts and no server-side records, we usually cannot identify you from an advertising identifier alone. For data held by Google, please also use Google's own privacy controls linked above, as Google is best placed to act on it. If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority.

### United States — California and similar state laws

We do not sell personal information for money. However, sharing your advertising identifier with Google for personalized advertising may qualify as "sharing" for cross-context behavioral advertising under the CCPA/CPRA and similar state laws. You can exercise your right to opt out of this by declining consent in the App, disabling ad personalization in your device settings, or buying the ad-free upgrade. We do not knowingly process sensitive personal information, and we do not discriminate against users who exercise their rights.

## International transfers

Google processes data in the United States and other countries outside the EEA/UK. Where required, these transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. See Google's privacy policy for details of its safeguards.

## Retention

We retain nothing ourselves, as we operate no servers or databases. Data collected by Google is retained according to Google's published retention policies — Firebase Analytics data is retained for the configured window (currently 2 months for user-level data) and advertising data per Google's ad data retention rules. Data stored locally on your device persists until you clear the App's storage or uninstall it.

## Children

The App is not directed to children under 13, and we do not knowingly collect personal information from them. The App is not enrolled in Google Play's Families programme, and ads are not served to users identified as children. If you believe a child has provided personal information through the App, contact **hannepps@h-h.win** and we will delete what we can and ask Google to do the same.

## Security

We minimise risk by design: there is no account to compromise, no server to breach, and no personal data at rest under our control. Data in transit to Google's services is encrypted using TLS. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

## Changes to this policy

We may update this policy as the App or the law changes. Material changes will be announced in the App or in the release notes, and the effective date above will be updated. Where a change requires it, we will ask for your consent again.

## Contact

Questions about this policy or about privacy in the App:

**Email:** hannepps@h-h.win