The short answer: nothing about you is gathered, and nothing can be
Billedgåte has no sign-up, no profile, no online score table, no advertising, no measurement library and no mailing list. Beyond those absences there is a structural one that makes the rest checkable: the published package does not declare Android's internet permission. An application without it cannot open a connection, whatever its code might attempt, because the operating system refuses. That is visible in the listing before you install, and it is the reason this page can make claims rather than promises.
The things the puzzle keeps in mind — pictures finished, times set, the half-solved board you walked away from — live in the storage area Android reserves for this app alone, and go no further. No copy of it exists on any machine of ours, so there is nothing of yours for us to protect, lose, sell or be asked to hand over.
What follows breaks that into ten cards, numbered the way the puzzle numbers things — count the filled tiles above each heading. Between them they cover what the General Data Protection Regulation requires a notice of this kind to cover.
1 · Who stands behind this page
ControllerDeja Wood AS
Responsible personTore Bjørnstad
Registered addressBamrudvegen 118, 2093 Feiring, Norway
Address for this pagerute@dejawood.pics
ApplicationBilledgåte — com.pikselgate.billedgate
Article 4(7) reserves the word "controller" for the party that settles why data is processed and by what means. In this instance the title comes with one real duty: to have written these paragraphs truthfully and to answer for any of them that turns out not to be.
No data protection officer is named. The designation becomes compulsory under Article 37 in three circumstances — a public authority, large-scale systematic monitoring, large-scale special-category data — and a small company publishing an offline puzzle meets none of them.
2 · The two things kept on your handset
Progress and preference. That is the whole of it, and here it is itemised:
- Pictures completed, and in which pack, so the level list can show what has been done.
- Best times for boards finished, kept so a later attempt has a mark to beat.
- The board in progress — filled cells, cells marked blank, the undo history for this sitting — so closing the app does not discard the reasoning.
- Hints remaining in the allowance.
- Settings: sound, haptics, whether the mistake marker is on or off for a stricter game, reduced motion.
Absent from that list, deliberately: any name, any address, the Android advertising identifier, any gathering of device properties into a fingerprint, and any installation number that would tell your copy apart from the next person's. Android additionally keeps one application's private area out of reach of every other application on the telephone.
Delete the app and the lot goes with it. Prefer to keep the app and start the collection over? The settings screen has a control for that, and Android offers the same thing from its own app settings.
3 · Why no Article 6 ground appears anywhere on this page
Notices of this kind normally attach a lawful ground to each item collected. This one attaches none to anything, and the omission deserves an argument rather than a silence.
What the Regulation covers
A controller processing personal data. The entries in card 2 sit on equipment that belongs to you, and no operation of ours is performed on them. First reason.
What those entries are
Times and completions with no identifier attached. They amount to a log of one telephone's puzzle-solving, which identifies nobody and could not be made to. Second reason.
Third: a ground exists in order to justify holding something, and we hold nothing. Asking which basis entitles us to your best time on the fox picture is like asking which basis entitles us to the crossword you left on a train.
The argument holds only while its premise does, so the premise is worth watching. Introduce a login screen into a later build, or an advert, or a library that counts things, or a till, and the argument collapses — at which point this text has to be redrafted in that same release, each addition carrying its own stated ground. The comment block at the end of this file sets out how.
Cookie-style consent is absent for the same reason. Those rules bite on storing or reading information on a user's device for purposes beyond delivering the service — typically through a web view, a tracking pixel or an identifier written by a third-party component. Billedgåte contains none of the three, and has no connection over which such a thing could report, so Norway's implementation of the ePrivacy rules finds nothing here to govern.
4 · One permission requested, eight declined
Requested
Vibration, for the brief confirming tick when a cell is filled, and only while the switch stays on. Android grants it silently; a motor reveals nothing about anybody.
Never requested
Nothing else at all: no network, and therefore no camera, microphone, position, address book, shared files, telephone state or notifications either.
That first refusal is what the rest of this document stands on. An app cut off from the network cannot send anything anywhere, so claims about destinations stop being assurances and become properties a reader can confirm by inspecting the package.
A permission request you did not expect is worth refusing and worth reporting: send the version number to rute@dejawood.pics. Two explanations are possible — this page is behind the build, or the build is not ours — and we would want to know which.
5 · What happens before the app opens
Every card so far has described the app in use. Acquiring it is a separate transaction, conducted earlier, through Google Play, between Google and you. Google writes the download, every later update and any rating into its own record of your account, under the policy it publishes for its own services. That arrangement is between the two of you; we neither see it nor influence what it keeps.
On our side the Play Console shows numbers Google has already aggregated: installs, countries, crash clusters, average rating. Not one line of that is a person, and not one is a device. Your account, the mail address behind it, saved payment methods and the list of telephones signed into it are all invisible from here, and whatever controls Google offers over its own retention live in that account rather than in this app, so that is where such a question has to be put.
One caution about the listing itself: a review becomes public the moment it is posted, under whichever display name your account carries, readable by anyone for as long as the listing exists.
6 · Nobody is on the recipient list
An empty row still has to be declared, and this is the empty row. Nothing is hosted for us, nothing measured, nothing reported onward when the app crashes, nothing advertised, nothing mailed out and nothing charged — so there is no firm, anywhere, holding data on our behalf. Article 13(1)(e) wants the categories of recipient written down. Written down, the category count is zero.
Cross-border transfer resolves itself the same way. Adequacy decisions, standard contractual clauses and the Article 49 derogations are all instruments for authorising a movement; here there is no movement to authorise. Your time on the sailboat picture was written on your handset and that is where it stayed.
7 · How long it lasts, and whom it suits
Retention. Durations belong in retention clauses where somebody other than the reader controls the clock. Here you control it: what is stored lasts exactly as long as you leave it there, and clearing the record or deleting the app ends it immediately. Nothing is duplicated to a backup overnight, nothing older is filed away, and no server of ours holds a version that could outlast what you did.
Children. Billedgåte carries a general-audience rating, and counting squares against numbers is a wholesome enough way for a child to spend twenty minutes. The list a parent normally has to work through runs roughly: advertising pointed at the child, purchases a stray tap could reach, strangers able to send messages, pictures or words contributed by other users. Not one of the four exists in this app. As for Article 8, which fixes when a child may consent on their own to an information-society service, the question cannot arise: consent is never requested here from anyone of any age, so there is none for a parent to supplement. The Norwegian threshold is 13, noted as a landmark for whoever eventually introduces advertising and finds the question suddenly real.
8 · Eight rights, and what each one actually produces
All of them are yours in full. What varies is where they are exercised — for this app, nearly always on your own telephone rather than through our correspondence. Setting out a formal request path that ends in a letter saying "we have nothing" would make this card look busier and help nobody, so the table records the actual outcome instead.
Access · 15A short letter confirming an empty hand. Everything the app knows is already on the level list, visible without asking anyone.
Rectification · 16There is no record of ours that could be inaccurate. A completion time that flatters you too little is corrected by playing that picture once more.
Erasure · 17Exercised by you directly and at once — clear the record, or delete the app. Nothing passes through us, so nothing can be declined, lost in a queue, or stretched to the statutory month.
Restriction · 18Restriction suspends an activity while a dispute is resolved. We run no activity on your data, so suspension has no object.
Portability · 20Applies to data a person handed over to a controller. Nothing was handed over, and what exists is already sitting in the app's own storage on your device.
Objection · 21Needs something to object against. The absolute form of this right covers direct marketing, and there is no marketing here to stop.
Withdraw consent · 7(3)Nothing here was built on your agreement, because your agreement was never requested. There is accordingly no permission outstanding.
Automated decisions · 22Checking a row against its clue is arithmetic on run lengths. It colours squares on a screen and settles nothing about you, legally or otherwise.
Exercising any of them is free and needs no paperwork, and at no point will you be asked for proof of identity. There is nothing on our side for a passport to be checked against — and demanding one would collect from you precisely the sort of information this entire page exists to say we do not collect.
9 · Taking a complaint further
The company is registered in Norway, which places it under the General Data Protection Regulation as brought into Norwegian law by personopplysningsloven. Supervision falls to Datatilsynet, whose address is Postboks 458 Sentrum, 0105 Oslo, and whose site is datatilsynet.no.
You need not write to Oslo at all. Under Article 77 the authority in the country where you usually live will take the complaint, as will the one where you are employed and the one covering the place the problem arose. Pick whichever is easiest to deal with; nothing on this page may narrow that choice, and a term purporting to would have no effect.
Purely as practical advice: writing here tends to produce an answer the next morning, whereas a supervisory authority works through a caseload. That is a reason to try, not an obligation, and there is nothing improper about having a complaint open with Datatilsynet while the correspondence with us continues.
10 · Writing in, and how this page is revised
There is one address, rute@dejawood.pics, and it takes everything: a right you mean to exercise, a statement on this page you doubt, a permission dialogue that card 4 did not predict, or simple curiosity about how the thing is put together. Write in Norwegian or English as you prefer.
Du kan skrive til oss på norsk — samme adresse, og du får svar på norsk.
The version line beneath the heading is the marker, and it moves whenever a word under it does. The rule we hold ourselves to on timing is this: a revision that changes what actually happens — some new kind of information retained, an outside party brought in, a transfer abroad, an additional purpose — ships alongside the update that causes it. It does not appear a fortnight later once the behaviour is already live. Checking the line therefore settles whether this text matches the version installed on your telephone. Earlier versions are archived and sent on request.