Privacy policy

Last updated: 15 November 2026

1. Controller

Lukas Müllner, StackTeam, Unterer Winkel 11, 7546 Moschendorf, Austria
E-mail: hello@stackteam.at

2. In short

• No tracking, no analytics, no ads, no third-party content (fonts and images are served by us).
• Without an account your quests stay on your device – nothing is sent to us.
• With an account we only store what sync, friends, raids and guilds need.
• No cookies. The app uses the local storage of your device or browser – hence no cookie banner.
• You can export and delete your data right in the app (Profile).

3. Hosting

Website and app server run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (processor, data centre in the EU). To deliver the pages the server necessarily processes your IP address. The SIDEQUESTR application itself writes no access logs. To prevent abuse (e.g. mass sign-in attempts) IP addresses are counted briefly in memory and not stored. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

4. Using the app without an account (offline)

Without an account no data is sent to us. Your hero name, quests, tasks, journal entries, achievements, statistics and settings (language, sound, vibration) are stored only on your device – in the app's database or your browser's storage. You can delete them at any time via the app data or your browser settings.

5. Account (guest or Google)

When you link an account we store:

• a random account ID, your hero name with a 4-character tag (e.g. Koala#AB12), your chosen hero, level and total XP, the app language (for notifications),
• when signing in with Google, also your Google account identifier and your verified e-mail address. Google verifies your sign-in; Google's privacy policy applies to that as well. We never store a password.
• sign-in sessions (hashed only) with an expiry date (at most 90 days),
• to sync your devices: quests (including due dates and repeats), tasks and journal entries,
• friendships, friend requests and blocks, raids with their tasks and members, guild memberships, promises to a friend (quest title, deadline, witness, kept or broken), your game state (unlocked achievements, items, claimed rewards, today's plan, focus and streak-freeze days),
• notifications to you (e.g. invites) for 30 days.

Visible to others: anyone who knows your full hero tag can find you. Friends see your hero name, hero, level and total XP; raid and guild members also see your raid progress and your quest XP of the current week and whether you finished something today; guild mates can nudge you once a day. When you promise a friend to finish a quest, that friend sees the quest title, the deadline and whether you kept it. Blocked players can no longer find you.

Legal basis is Art. 6(1)(b) GDPR (providing the features you asked for). You can create an account from the age of 14, younger only with your parents' consent.

6. Notifications

Reminders (due dates, streak, quiet quests) are created locally on your device – no data is sent for them.

Web push in the browser: when you enable notifications, your browser creates a push address with its vendor's push service (e.g. Google, Mozilla or Apple). We store this address and its keys to send you invites and raid news. The content is end-to-end encrypted; the push service only sees that a message is delivered. You can turn this off at any time in your browser settings.

Android: when you enable notifications, the app asks our server for new notifications about every 15 minutes. No Google service is used for this.

7. Retention and backups

We keep account data until you delete your account. Notifications are deleted after 30 days, expired sessions are removed automatically. To protect against data loss we make a daily backup of the database that is kept for 7 days; deleted data therefore also disappears from the backups at the latest 7 days after deletion.

8. Recipients

We do not share or sell data. The only recipients are the host (see 3) and – only if you use them – Google when signing in with Google and your browser's push service (see 6).

9. Your rights

You can export your data in the app (Profile → “Export my data”) and delete your account with all its data (Profile → “Delete account”). You also have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to hello@stackteam.at and include your hero tag. You can also lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

10. Changes

When the app changes, we update this policy. The version published here applies.

Legal notice