Privacy Policy

Plate I

There is nothing to collect

Oppdag asks you for nothing. It has no registration step, no player profile, no online ranking, no advertisement slots, no measurement library and no mailing list. More than that: the published package carries no internet permission at all, so Android will not let it open a connection even if some component inside it tried. That is a property of the build rather than an intention on our part, and it can be checked on the store listing before you install.

What the game remembers — the scenes you have finished, the stars on them, how you like the controls — is kept in the app's own private storage on your telephone. It is yours, it is local, and it is invisible to us. This page is therefore not a pledge to look after your information carefully. It is the plainer statement that none of it is ours to look after.

The plates hung along this wall work through that position at the length the General Data Protection Regulation asks for, and the final one tells you where to take a disagreement.

Plate II

Who is answerable

There is no data protection officer, and the omission is deliberate rather than an oversight: that role becomes compulsory under Article 37 only where monitoring is regular and systematic on a large scale, or where special categories of data are involved, and neither describes a picture puzzle that transmits nothing. Letters and mail sent to the addresses above arrive with the person named in them, not in a support queue.

Plate III

Everything the app writes down

A puzzle game has to remember a little or it would start from nothing each time. This is the complete list:

• Which scene pairs you have completed, and at which tier, so the gallery can show you where you have been.
• Stars earned per scene, derived from your speed and your accuracy on that scene.
• Best times, where you played a scene against the optional timer.
• How many hints remain in the hint allowance, and when it last refilled.
• Settings — language, whether the timer is on, zoom behaviour, sound, reduced motion.
• The scene you were part-way through, so closing the app mid-hunt does not throw the hunt away.

Read it again and notice what is missing. Nothing in those six items points at a person: no name is asked for, no address of any kind is stored, no advertising identifier is read, no characteristics of the handset are assembled into a fingerprint, and no installation number exists that would let anybody tell one copy of the game from another. Android fences each application's private storage off from every other application, so the list is not merely unsent — it is unreadable from outside the game.

Uninstalling takes the whole of it away. Should you prefer to begin again while keeping the game, the settings screen offers a control that empties it, and Android's own application settings offer the same thing under "clear data"; both return Oppdag to the state it was in when first opened.

Plate IV

Why no lawful basis is named

You will be used to notices that set a lawful ground beside every item they gather. This one sets none beside anything, and the absence is worth explaining instead of leaving as a blank space for you to interpret.

What the Regulation governs is a controller processing personal data. The entries listed on the previous plate never leave equipment you own, cannot be reached by the publisher, and single out nobody — in our hands they have the same standing as the saved position of a jigsaw sitting on somebody's kitchen table. A ground under Article 6 answers the question "what entitles you to hold this?", and the honest answer here is that we hold none of it, so the question does not arise.

That reasoning is conditional, and the condition is worth watching. The day a build gains a sign-in, an advertisement, a measurement library or a shop, the page must be rewritten in the same release and every new item given its ground by name. The instructions for doing so are set out at the foot of this file for whoever edits it next.

The same emptiness explains the missing consent banner. There is no web view in Oppdag, no measurement pixel, no component that writes an identifier and no traffic of any kind, so the ePrivacy rules as implemented in Norwegian law find nothing here to ask your permission about.

Plate V

What the app asks Android for

If Oppdag ever asks for a permission not named here, refuse it and write to finn@woodnorapps.site with the version number: either this page has fallen out of date or the package in your hands is not ours.

Plate VI

The store is a separate room

Oppdag reaches you through Google Play, and the store does its own processing before the app is ever opened. Installing, updating or rating it is recorded by Google against your Google account under Google's own privacy policy, and we have no say in what is kept or for how long. What our Play Console shows us is aggregate figures Google produces — installs, countries, crash clusters, ratings — never an individual person or an individual device.

Your Google account, the address attached to it, the cards saved against it and the handsets registered to it are all invisible from where we sit. The settings that govern what Google keeps about your installs and your ratings live inside that account, which means questions of that kind have to be put to Google, and putting them to us would achieve nothing but delay.

One thing worth saying out loud: a review written on the listing is published by design, under whatever name your account shows, for anyone at all to read. Write it as you would write a postcard rather than a letter, and leave anything personal out.

Plate VII

The list of recipients is empty

Processing can only be handed to somebody else if it exists in the first place. Oppdag keeps nothing on a server, measures nothing, reports no faults onward, sells no attention, runs no mailing list and takes no money, so no processor has been appointed for any of it. Article 13(1)(e) asks a controller to name the categories of recipient; the honest reply is that the category list has no entries.

Transfers follow the same logic. There is no adequacy decision to rely on, no set of standard contractual clauses signed, no derogation invoked, because nothing travels. A star awarded on a scene stays on the telephone that awarded it, and a thing that never moves cannot leave a jurisdiction.

Set down here so that it reads as a boundary rather than a gap: Plate VI describes Google's distribution of the app, which happens on Google's own equipment and under Google's own relationship with you, before and apart from anything this software does once installed.

Plate VIII

How long, and who for

Retention. Ordinarily this is where a notice quotes a number of months. There is no number to quote, because the period is set by you and nobody else: the stored items last until you empty them or remove the app, whereupon they are gone the same second. No nightly backup carries a copy elsewhere, no archive holds an older version, and nothing of ours outlives your decision.

Children. The store rating puts Oppdag before a general audience, and a quiet picture puzzle is a reasonable thing for a child to be given. The hazards usually worth warning a parent about — adverts aimed at the player, things to buy mid-game, messaging with strangers, content other players have uploaded — are simply not built into it. Article 8 GDPR concerns consent given by a child for information-society services; since nothing is gathered from anyone of any age, no such consent is sought and none would be valid if it were. Norway sets that age at 13, which matters here only as a marker for the day a build carrying advertising makes the question real.

Plate IX

Your rights, each with its honest answer

Every right below belongs to you in full. What differs is where each one is exercised: for this app, nearly all of them are already in your hands, and describing a formal procedure that leads nowhere would be a worse answer than the true one.

None of this costs anything, none of it needs a form, and none of it asks you to prove who you are. Demanding identification before answering a person we hold no record of would be an odd request to make and an odder one to comply with.

Plate X

Complaining, in Norway or where you live

The publisher is a Norwegian company, so the General Data Protection Regulation applies as it is incorporated into Norwegian law by personopplysningsloven, and the supervisory authority is Datatilsynet, Postboks 458 Sentrum, 0105 Oslo — datatilsynet.no.

Oslo is not your only option. Article 77 opens the door of whichever supervisory authority is nearest to your own life — the country you live in, the country you work in, or the country where you believe something went wrong — and you may choose on convenience alone. No sentence here limits that choice, and none could.

A note on order, offered rather than imposed: most questions about this text are settled by an email the same day, while a regulator necessarily takes longer. You are under no obligation to come here first, and whatever we might reply leaves your route to Datatilsynet exactly as wide as it was.

Plate XI

Writing in, and how this page changes

One address carries all of it: finn@woodnorapps.site. Use it for a right you want to exercise, for a line here you think is untrue, or for a permission request that does not match what Plate V promised. Either language below is welcome.

Skriv gjerne på norsk — det er samme adresse, og svaret kommer på norsk.

Revisions announce themselves in the version line inside the entrance frame, which moves whenever this text does. Any change with substance behind it — a fresh category of information, somebody new receiving it, a border crossed, a purpose added — travels in the same release as the behaviour that caused it, not in a quiet update afterwards. One glance at that line therefore tells you whether what you are reading applies to the copy installed on your telephone. Superseded versions are kept, and a request will get you one.