Privacy Policy
Applies to: Android
Effective date: May 30, 2026
1. Data controller
These privacy notices explain what personal data is processed when you use the Android version of No Spoiler MMA, why that happens, and what rights you have.
2. Principles of data processing
Data is processed in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG). The Android app and this website process personal data only for the purposes described in this notice; optional features and third-party providers are described separately.
Legal bases (Art. 6 GDPR)
- Art. 6(1)(a) - Consent
- Art. 6(1)(b) - Performance of a contract
- Art. 6(1)(f) - Legitimate interests
3. Website hosting & technical infrastructure
Cloudflare (hosting)
Cloudflare, Inc. · Hosting and infrastructure provider
When accessing this website, Cloudflare as hosting and infrastructure provider processes technical connection data such as IP address, browser type, operating system, time of access, and requested content to the extent necessary to deliver, keep stable, and secure the website. Legal basis: Art. 6(1)(f) GDPR. Cloudflare.
Locally hosted stylesheet
Served directly from wehlflix.com via Cloudflare Pages
This website delivers its stylesheet as a local file from the same domain (/styles.css). No additional styling request to a third-party CDN is made when you open the page. Legal basis: Art. 6(1)(f) GDPR.
4. Data processing in the Android app
Google Play download
When downloading the Android app through Google Play, data such as your Google account, download time, and device information is transmitted to Google. I have no influence over that processing. Google.
App Store purchases & restore
If you buy or restore an in-app unlock, the transaction is handled directly through Google Play Billing. Google processes your account together with transaction and purchase information. I do not receive separate payment details such as credit card information.
Local data storage
Saved settings and local content such as favorites, followed fighters, spoiler settings, reveal state, custom fight cards, reminder configuration, time-zone settings, and purchase state are stored on your Android device. These items are not transmitted to my servers.
No user accounts
The Android app does not require registration or the creation of separate user accounts. Technical connection data may still be processed when remote event data is loaded or integrated advertising services are active.
Support requests by email
If you contact me by email, I process your message, sender address, timestamps, and any details you provide voluntarily, such as event name, time zone, device, or screenshots, solely to handle the request.
External event data requests
When current event and fight card data is loaded, the Android app connects to the Wehlflix app service, which may use BALLDONTLIE MMA as a data source. Technical connection data such as IP address and device-related HTTP metadata may therefore be processed both by Wehlflix and the upstream data provider.
Local reminders
You can enable local Android notifications for events and individual fights. Reminder-related information is stored on your device and can be restored locally after reboot or app update. No remote push notifications are sent from my servers.
Calendar draft
If you use the optional calendar export, the app opens a spoiler-safe calendar draft in a calendar app on your device. This handoff happens only after your deliberate action and without a separate calendar permission in the app.
Local diagnostics
The Android app can store the latest unexpected error situation locally on the device and show it in the support area for copying. This diagnostic information is not sent automatically to my servers.
5. App permissions
The Android version requests the following device access:
| Permission | Purpose |
|---|---|
| Notifications | Local Android notifications for event reminders. Permission is requested only when you explicitly enable a reminder. Legal basis: Art. 6(1)(a) GDPR. |
| Internet / network state | Technically required to load event and fight card data through the Wehlflix app service, use Google Play Billing, and - when active - reach UMP/AdMob services. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR. |
| Start after reboot / package update | App-internal receiver used to reschedule local reminders that you created after a device reboot or app update. No remote push notifications are sent because of this. |
| Advertising ID / Android Ad Services | May appear through Google Mobile Ads / UMP in the release app and is processed only in connection with advertising, consent, fraud prevention, measurement, and Google/Android privacy settings. |
Local event times are displayed based on your device and app settings. No location data is requested.
The app does not request access to contacts, camera, microphone, precise location, or user documents.
You can disable reminder notifications at any time in the Android app settings.
6. Third parties & SDKs
External event data sources
For current event and fight card data, the Android app uses the Wehlflix app service, which may use BALLDONTLIE MMA as a data source. Technical connection data may therefore be processed both by Wehlflix and the upstream data provider. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.
Advertising & consent – Google UMP / Google AdMob
If ads are active, the Android app uses Google's consent SDK UMP together with the advertising service Google AdMob provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Depending on region, consent status, and the final ad configuration, identifiers, coarse location, diagnostics, advertising data, product interaction, IP address, device information, consent state, ad requests, and ad interactions may be transmitted to Google and processed there. The current Android configuration does not use native feed ads or app-open ads; the intended ad surface is a quiet banner for users without the ad-free store unlock.
Purpose: collecting and managing ad consent and displaying ads inside the Android app.
Legal basis: where legally required, processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Otherwise, processing occurs only within the scope of the technically integrated advertising services and your Android settings.
Withdrawal: where available, you can reopen ad and consent options inside the app. Google and Android privacy settings also apply.
Google Ireland Limited may transfer data to Google LLC servers in the USA. Google LLC states that it is certified under the EU-U.S. Data Privacy Framework. Google.
Based on the app's current functionality, neither the app nor the integrated SDKs processes special categories of personal data such as health data, precise location, financial information, political opinions, religious beliefs, or biometric data.
Analytics & crash reporting
The current Android version does not include Firebase Analytics or Firebase Crashlytics.
App-owned diagnostics remain local on the device and are transmitted only if you contact support and voluntarily include information. Google SDKs such as Play Billing, UMP, or AdMob may process their own technical diagnostics as part of their services.
Purpose: local error support and, where Google SDKs are involved, service delivery, security, billing, consent, and advertising.
The legal basis for local diagnostics is Art. 6(1)(f) GDPR. Where Google services process their own diagnostics, Google's privacy information and the applicable consent or contractual settings apply.
Local app diagnostics are not automatically transferred to Google. Google SDKs may process technical data under their own policies. Google.
7. Data retention
All data stored locally on your device, such as settings, favorites, reminder state, and purchase state, is retained until you change it, remove it, or uninstall the app. Such local content is not stored permanently on my own servers.
Data processed by Google AdMob, Google UMP, Google Play Billing, or Google Play is retained by Google according to its own privacy and retention policies. Google.
8. Your rights & data deletion
You have the following rights regarding your personal data: access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.
How to delete your data
Since No Spoiler MMA stores local content on your Android device, you can delete it completely by uninstalling the app or clearing the app data in Android. Depending on the feature, you can also remove local content such as favorites, followed fighters, custom fight cards, or reminders directly in the app. Data processed by third-party providers is subject to their own policies.
You have the right to lodge a complaint with a competent data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg or the supervisory authority of your usual place of residence within the EU. Baden-Württemberg.
9. Children's privacy
No Spoiler MMA is not specifically directed at children or teenagers. I do not knowingly collect personal data from persons under 13 years of age (under COPPA, USA) or under 16 years of age (under Art. 8 GDPR). If I become aware that a child under 13 has submitted personal data, I will delete it immediately.
10. California privacy rights (CCPA)
For users from California, the California Consumer Privacy Act (CCPA/CPRA) also applies. California consumers have the right to know which personal data is collected about them, the right to deletion, and the right to object to the sale or sharing of personal data.
To my understanding, No Spoiler MMA does not sell personal data. The use of advertising identifiers by Google AdMob may qualify as sharing under CPRA.
- If available inside the app: reopen ad and consent options
- Exercise privacy rights by email
All other CCPA/CPRA rights can be exercised by email to [email protected].
11. Changes to this policy
I reserve the right to update this Privacy Policy when the Android app or applicable law changes. The current version is available at wehlflix.com/privacy-android.html.
Data Protection Officer: No Data Protection Officer has been appointed because the statutory requirements of Art. 37 GDPR are not met.
12. Contact
Michael Wehle
Email: [email protected]