Privacy Policy
Applies to the app: SpoilerFreeMMA
Effective date: March 1, 2026
1. Data Controller
Michael Wehle
Kuntzestraße 48
73079 Süßen
Germany
Email: MichaelWehle@proton.me
Phone: +49 176 72306810
Your privacy matters. This Privacy Policy explains what data is collected when you download and use SpoilerFreeMMA, how it is used, and what rights you have.
2. Principles of Data Processing
Data is processed in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Data is only collected to the extent necessary to provide the app's features.
Legal bases (Art. 6 GDPR):
- Art. 6(1)(a)– Consent
- Art. 6(1)(b)– Performance of a contract
- Art. 6(1)(f)– Legitimate interests
3. Website Hosting & Technical Infrastructure
GitHub Pages (Hosting)
GitHub Inc. (a Microsoft company) · 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA
When accessing this website, GitHub Pages automatically collects server log data including IP address, browser type, operating system, date/time of access, and pages visited. GitHub Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). Legal basis: Art. 6(1)(f) GDPR. More information: GitHub Privacy Statement.
Tailwind CSS CDN (Stylesheet)
Vercel Inc. · 440 N Barranca Ave #4133, Covina, CA 91723, USA
This website loads the Tailwind CSS framework from the Vercel CDN (cdn.tailwindcss.com). Your IP address is transmitted to Vercel when the page loads. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). Legal basis: Art. 6(1)(f) GDPR. More information: Vercel Privacy Policy.
4. Data Processing in the App
App Store Download
When downloading the app from the Apple App Store, data (e.g. Apple ID, download time, device info) is transmitted to Apple Inc. I have no influence over this. Please refer to Apple's Privacy Policy.
Local Data Storage
All user data (settings, events) is stored exclusively on your device. This data does not leave your device and is not transmitted to external servers. Legal basis: Art. 6(1)(b) GDPR.
No User Accounts
The app does not require registration or account creation. No personal data is transmitted to my servers.
Time Zone & World Time Feature
The app reads the device's time zone automatically from iOS (TimeZone.current) to display world times (e.g. US time zones). This process takes place entirely on your device. No location data is requested and no personal data is collected or transmitted. Legal basis: Art. 6(1)(b) GDPR.
Event Reminders
You can create events in the app for which you will be reminded via push notification. Event data (title, date, time) is stored locally on your device only. To deliver the reminder, the Apple Push Notification Service (APNs) is used (see Section 6). Legal basis: Art. 6(1)(a) GDPR.
5. App Permissions
The app requests the following device access:
| Permission | Purpose |
|---|---|
| Push Notifications | Sending event reminders for upcoming appointments. Consent granted via iOS system prompt. Legal basis: Art. 6(1)(a) GDPR. |
| App Tracking Transparency (ATT) | Before using your Advertising Identifier (IDFA) for personalized ads, the app displays an iOS system prompt (App Tracking Transparency framework, ATT). Tracking only occurs after your explicit opt-in. You can change this at any time under Settings → Privacy & Security → Tracking. Legal basis: Art. 6(1)(a) GDPR. |
Time Zone: Provided automatically by iOS without any permission — no location data is collected.
You can disable push notifications at any time under Settings → Notifications → SpoilerFreeMMA.
6. Third Parties & SDKs
Apple Push Notification Service (APNs)
To deliver push notifications, the app uses the Apple Push Notification Service (APNs) by Apple Inc. A device-specific push token is transmitted to Apple. This token does not directly identify you by name, but constitutes pseudonymous personal data under the GDPR, as it uniquely identifies your device. For more information, see Apple's Privacy Policy. Legal basis: Art. 6(1)(a) GDPR.
In-App Advertising – Google AdMob
This app uses the advertising service Google AdMob provided by:
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
AdMob uses advertising identifiers (e.g. Advertising ID / IDFA) to serve ads and measure their effectiveness. Data such as your IP address, device information, and interactions with ads are transmitted to and processed by Google.
Data categories collected by AdMob:
- Advertising Identifier (IDFA) – only with ATT consent
- IP address (used to derive coarse location)
- Device information (OS version, device model, language)
- Ad interaction data (impressions, clicks, view duration)
- App usage data (session length, in-app events)
Google Ireland Limited may transfer data to Google LLC servers in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection. Legal basis for third-country transfer: Art. 46(2)(c) GDPR (Standard Contractual Clauses).
More information: Google Privacy Policy (policies.google.com)
Withdraw consent: You can withdraw or change your advertising consent at any time via Settings → Privacy within the app (if a CMP settings option is available) or via iOS Settings → Privacy & Security → Tracking.
Neither the app nor any integrated SDK collects sensitive categories of personal data such as health data, precise location, financial information, political opinions, religious beliefs, or biometric data.
7. Data Retention
All data stored locally on your device (events, settings) is retained until you uninstall the app or manually delete the data within the app. No data is stored on external servers by me.
Data processed by Google AdMob (e.g. IDFA-based advertising data) is retained by Google Ireland Limited according to their own retention policy. For details, see Google's data retention information.
8. Your Rights & Data Deletion
You have the following rights regarding your personal data:
How to Delete Your Data
Since SpoilerFreeMMA stores all data exclusively on your device, you can delete all data completely by uninstalling the app (long press the app icon → Remove App). You can also delete individual events directly within the app. For requests to delete data stored by third-party services (e.g. push tokens at Apple APNs), please contact: MichaelWehle@proton.me
Right of Access (Art. 15 GDPR)
You can request information about the data I process about you.
Right to Rectification (Art. 16 GDPR)
You can request correction of inaccurate data.
Right to Erasure (Art. 17 GDPR – "Right to be Forgotten")
You can request the deletion of your personal data, provided no legal retention obligations apply.
Right to Restriction (Art. 18 GDPR)
You can request restriction of processing.
Right to Data Portability (Art. 20 GDPR)
You can receive your data in a structured, common format.
Right to Object (Art. 21 GDPR)
You can object to the processing of your data.
Right to Withdraw Consent
You can withdraw consent (e.g. push notifications) at any time in iPhone Settings.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority — either the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de), or the supervisory authority of your country of habitual residence within the EU (Art. 77 GDPR).
9. Children's Privacy
SpoilerFreeMMA is not directed at children under the age of 13 (COPPA) or 16 (GDPR). I do not knowingly collect personal data from children under these ages.
If I become aware that a child under 13 has provided personal data, I will delete it immediately. Parents or guardians may contact MichaelWehle@proton.me for such requests.
10. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) grants you specific rights, including the right to know what personal data is collected, the right to deletion, and the right to opt out of the sale or sharing of personal data.
SpoilerFreeMMA does not sell personal data. The use of advertising identifiers (IDFA) by Google AdMob for cross-context behavioral advertising may qualify as "sharing" under CPRA. You can opt out at any time:
- iOS Settings → Privacy & Security → Tracking → disable "Allow Apps to Request to Track"
- iOS Settings → Privacy & Security → Apple Advertising → disable "Personalized Ads"
To exercise any other CCPA/CPRA rights, contact: MichaelWehle@proton.me
11. Changes to This Policy
I reserve the right to update this Privacy Policy when the app or applicable law changes. The current version is always available at wehlflix.com/privacy.html.
Data Protection Officer: No Data Protection Officer has been appointed, as the statutory requirements of Art. 37 GDPR are not met (no large-scale systematic monitoring, no large-scale processing of special categories of personal data).