Last updated: January 2025 · Bamboule – Pétanque Companion
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
The following overview summarizes the types of data processed and the purposes of processing:
Below we inform you about the legal bases of the GDPR on which we process personal data:
To use the app, you can create an account. During registration we collect:
Authentication is handled by GoTrue, an open-source component operated on our own server in Germany (Hetzner Online GmbH, Nuremberg). Your data does not leave the European Economic Area.
Legal basis: Art. 6(1)(b) GDPR
The core function of the app — finding nearby pétanque courts — requires access to your location. We process location data exclusively:
Location data is only collected during active use of the app. No continuous background location tracking takes place. Location data is not shared with third parties and not stored permanently — only the time and location of the check-in are recorded as usage data.
Legal basis: Art. 6(1)(a) GDPR (consent via iOS system prompt)
The app offers the ability to check in anonymously at a spot. In this case, only the number of players and the expiry time are stored — without any link to your user account. Your identity is not visible to other users in this case.
When you submit a new pétanque spot, we store:
Photos are stored on our self-operated object storage (Hetzner, Germany). Please ensure that photos do not show identifiable people, or obtain their consent.
Submitted spots are publicly visible. Deletion is possible at any time via your profile or by email request.
Legal basis: Art. 6(1)(b) GDPR
With your consent, we send push notifications via Firebase Cloud Messaging (FCM) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. An anonymized device token is transmitted to Google.
Google acts as a data processor under Art. 28 GDPR. Data transfer to the USA cannot be fully excluded. Google LLC participates in the EU-US Data Privacy Framework, recognized by the EU Commission as providing adequate protection.
Push notifications can be disabled at any time in the iOS system settings.
Legal basis: Art. 6(1)(a) GDPR
To improve the app, we use PostHog, an open-source analytics platform. The instance runs exclusively on our own server at Hetzner Online GmbH in Germany. Data is not shared with third parties and does not leave the European Economic Area.
We collect anonymized usage events (e.g. which screens are viewed, how often features are used). No linkage to your identity takes place. IP addresses are anonymized before storage.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving our service)
The entire backend infrastructure of the app is operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. All personal data is stored and processed exclusively on servers within Germany.
A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.
The app uses map data from OpenStreetMap (© OpenStreetMap contributors, licensed under ODbL). Map tiles are provided by Stadia Maps (Stadia Maps LLC). When loading map tiles, your IP address may be transmitted to Stadia Maps.
You have the following rights regarding your personal data:
To exercise your rights, please contact: [your@email.de]
You also have the right to lodge a complaint with the competent data protection authority.
All data transmissions between the app and server are SSL/TLS-encrypted. Access to the server database is restricted to authorized systems. Passwords are stored exclusively as bcrypt hashes — the plaintext password is technically inaccessible to us.
The Bamboule app is not intended for children under 16 years of age. We do not knowingly collect personal data from minors under 16. If you become aware that a child under 16 has created an account without parental consent, please contact us.
We reserve the right to update this privacy policy to reflect legal changes or service modifications. The current version is always available on our website. Registered users will be informed of significant changes via push notification or email.
For data protection inquiries, please contact us at: