Last updated: 1 October 2026 · Deutsche Fassung
This policy explains how we handle data in the apps published by Tickwork (Ines Golub) and on this website. Each individual app also carries a privacy label on its App Store page listing the data that specific app uses.
Ines Golub (trading as Tickwork), Germany. Contact: inesgolubapps@gmail.com. Full postal details are listed in the Impressum.
Our apps do not require an account and we do not operate servers that store your personal data. Game progress, settings and similar app data stay on your device and, if you have enabled it, in your own iCloud backup — we have no access to either.
Some apps can use the camera, the microphone or your photo library — Vortis, for instance, lets the flow respond to music in the room and can turn a camera image or a photo into its colour source. All of it is analysed on your device and nowhere else. Neither sound nor image is recorded, stored, or transmitted to us or to anyone else; the microphone signal is analysed in real time and discarded immediately, and the camera image is folded frame by frame into what you see.
To pick a photo we use Apple's system picker. It runs outside the app: we receive only the image you chose yourself and never see your library. If an app records your session, that recording is produced entirely on the device and saved to your own photo library — it goes nowhere else.
Each of these needs your consent in the system dialog and can be withdrawn at any time in the iOS settings. Without consent the feature in question is simply unavailable; the rest of the app keeps working. The legal basis is your consent (Art. 6(1)(a) GDPR).
Some of our apps are financed through advertising. For this we use LevelPlay — the mediation platform formerly known as ironSource, now part of Unity Technologies. It passes ad requests on to connected advertising networks; Unity Ads is currently the connected network. In this process, the following may be processed by these providers: a device identifier (on iOS the Identifier for Advertisers, IDFA, if you have consented — otherwise an app-scoped identifier assigned by the SDK), your IP address, coarse location derived from it, device and operating system information, and data about which ads were shown, viewed, clicked or led to an install.
No personalised advertising in the EU. We do not operate a consent management platform, and we therefore permanently signal to the advertising SDK that no consent for consent-based processing is available. Within the European Economic Area and the United Kingdom you consequently receive non-personalised advertising only: the ad shown is not selected on the basis of an interest profile built across apps and websites. The data listed above is still processed for technical delivery, billing the advertiser and fraud detection.
App Tracking Transparency. On iOS, access to the IDFA requires your explicit consent through Apple's ATT dialog. If you decline, no IDFA is read; advertising still appears, simply without that identifier. You can change this decision at any time under Settings → Privacy & Security → Tracking.
SKAdNetwork. We also use Apple's SKAdNetwork. It reports to an advertising network, in aggregated and time-delayed form, that an ad led to an install — without identifying you. It works without any device identifier and independently of your ATT decision.
Legal basis for delivering non-personalised advertising is our legitimate interest in financing the app (Art. 6(1)(f) GDPR); where the IDFA is used, it is your consent (Art. 6(1)(a) GDPR), given through the ATT dialog and revocable at any time. Details on Unity's processing are set out in their Game Player and App User Privacy Policy, and details on the LevelPlay mediation layer in the ironSource privacy policy.
Some apps let you report something to us — in Lettern, for example, a missing or wrong word. The app collects such reports on your device only. They reach us only when you send them yourself by e-mail; the app shows you the finished message in your mail app first. We then receive the content of the e-mail (the reported words, the app and iOS version) and your sender address, use both only to handle the report and, where needed, to reply, and delete the e-mail once it is no longer needed for that. The legal basis is our legitimate interest in fixing errors in our apps (Art. 6(1)(f) GDPR).
When an app opens a link — such as a dictionary entry on Wiktionary — Safari loads the page outside the app. The app itself transmits nothing; the privacy policy of the site's operator applies to that page.
Purchases in our apps are processed by Apple through the App Store. We receive only aggregated, anonymised sales figures — never your payment details. Apple's own privacy policy applies to that transaction.
Some of our games submit a score — a result or a best time — to a leaderboard in Apple's Game Center. This happens only if you are signed in to Game Center on your device. The score is linked to your Game Center account and is processed by Apple under Apple's own privacy policy; we receive no personal data from it and see no more of you than the public nickname Game Center itself displays. If you are not signed in, the app keeps your best result on your device only and nothing is transmitted.
If you have enabled sharing analytics with developers in your iOS settings, Apple provides us with aggregated crash and usage reports. These do not identify you personally. Where an app uses an additional analytics or crash-reporting service, that is stated in the app's App Store privacy label.
Some apps can remind you about something, such as the end of a running process. These notifications are scheduled and delivered entirely on your device — there is no push server, no device token and no transmission to us. Whether you allow them is your choice, made in the system dialog and changeable at any time in iOS Settings.
This site is hosted on GitHub Pages, a service of GitHub, Inc. When you visit it, GitHub processes technical connection data such as your IP address, browser type and the time of the request in server log files, for the purpose of delivering the site securely (Art. 6(1)(f) GDPR). We do not set cookies, run analytics or embed third-party trackers on this site. See GitHub's privacy statement for details.
Our apps are not directed at children under 13, and we do not knowingly collect personal data from them. Accordingly, we signal to the advertising SDK that our apps are not child-directed within the meaning of the US COPPA. Should an app ever be intended for a younger audience, advertising will be configured differently and this will be stated in the app itself.
Advertising and hosting providers named above may process data in the United States and other countries outside the EU. These transfers are based on the EU standard contractual clauses or the EU–US Data Privacy Framework, depending on the provider.
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, write to inesgolubapps@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority.
Because we do not store personal data ourselves, requests concerning advertising data usually need to be directed to the provider in question; we will help you identify the right contact.
We update this policy when our apps or the services they use change. The date at the top shows the current version.