1. Controller

The controller responsible for data processing within the meaning of data protection laws is:

Melanie Noetzel
c/o Online-Impressum #9481
Europaring 90
53757 Sankt Augustin
Germany

E-mail: melanie.noetzel.dev@icloud.com

2. General Information on Data Processing

The app "Trophy Tracker" is used to display and manage PlayStation trophies, game statistics, personal collections, and gaming sessions.

The processing of personal data is carried out exclusively to the extent necessary to provide the app's functions.

The majority of data processed by the app is stored exclusively locally on the user's device. This particularly includes PlayStation account data, trophy data, settings, collections, and other user-related content.

For individual functions intended to improve the app, as well as for optional community features, selected information is transmitted to external services. Processing is carried out exclusively for the purposes described in this privacy policy.

3. Login with PlayStation Account

Login is performed through Sony Interactive Entertainment's OAuth authentication system.

The technology "ASWebAuthenticationSession" provided by Apple is used for this purpose. The login takes place in a separate browser window isolated from the app.

The app does not gain access to:

After successful authentication, the app only receives the authentication data provided by Sony that is required to use the app.

In particular, the following data may be processed:

Processing is carried out exclusively to provide the app's functions.

The legal basis is Art. 6(1)(b) GDPR.

4. Local Storage of Data

To provide the app's functions, various data is stored locally on the device.

This may include in particular:

Storage takes place exclusively locally on the user's device.

PlayStation account data, authentication tokens, and locally stored trophy and profile data are not transmitted to the developer.

5. Feedback, Feature Suggestions and Product Improvement

To improve the app, selected information is transmitted to a database based on Appwrite.

This particularly concerns:

To prevent duplicate entries or votes, the app generates a random installation identifier during first use and stores it locally on the device.

This identifier:

The transmitted data is used exclusively for analyzing onboarding, collecting user feedback, prioritizing new features, and further developing the app.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in improving usability, stability, and further development of the app.

6. Community Features: Trophy Group Ratings and Trophy Flags

The app offers optional community features that allow users to rate trophy groups and flag individual trophies (e.g., as "Unobtainable" or "Missable").

When using these features, the user's PlayStation Account ID is processed and stored. This is necessary to:

Unlike the PlayStation Online ID, the PlayStation Account ID is not publicly visible and cannot be changed by the user. It therefore constitutes a permanent, pseudonymous identifier that may theoretically allow conclusions to be drawn about the respective user and is treated as personal data.

Processing is carried out exclusively to provide the community features described above.

The legal basis is Art. 6(1)(b) GDPR, as the processing is necessary to provide the feature actively used by the user (submitting, editing, and deleting their own ratings and flags).

7. Use of Appwrite and Supabase

Appwrite is used for storing feedback, votes, feature suggestions, and anonymized usage events (see Section 5).

Supabase is additionally used for storing the ratings, trophy flags, and the associated PlayStation Account ID described in Section 6.

Through Appwrite and Supabase, only the data described in Sections 5 and 6 is processed.

No PlayStation login credentials, OAuth tokens, or other authentication data are transmitted to Appwrite or Supabase.

Further information about Appwrite and Supabase can be found in the privacy information provided by the respective providers.

8. Use of Unofficially Documented Interfaces

The app uses technical interfaces that have not been officially documented or publicly released by Sony Interactive Entertainment.

"Trophy Tracker" has no affiliation with Sony Interactive Entertainment and is neither supported nor officially offered by Sony.

It cannot be guaranteed that the interfaces used will remain permanently available. Changes or restrictions imposed by Sony may result in individual functions or the entire app no longer working.

9. Premium Features and In-App Purchases

The app offers optional paid premium features in the form of:

Payment processing is carried out exclusively through Apple.

The developer does not receive payment data such as credit card information, account details, or other payment information.

Apple's privacy policies also apply.

10. Third-Party Libraries

The app uses open-source libraries, including those under the MIT license.

These libraries are used exclusively for technical development purposes and, according to current knowledge, do not independently process any personal data.

Information about used libraries and their licenses can be viewed within the app.

11. Analytics and Error Diagnostic Services

The app currently does not use advertising services or cross-device tracking services.

The usage events described in Section 5, as well as the community data described in Section 6, are evaluated exclusively for improving the app and providing the community features.

If additional analytics or error diagnostic services are introduced in the future, this privacy policy will be updated accordingly.

12. Data Transfers to Third Countries

Through the use of PlayStation services, personal data may be processed outside the European Union.

The developer has no influence over data processing carried out by Sony Interactive Entertainment.

If the providers Appwrite and/or Supabase used process data outside the European Union, this will be carried out based on the applicable data protection requirements.

13. Storage Duration

Locally stored data generally remains on the user's device until:

Feedback, voting, and analytics information transmitted to Appwrite is only stored for as long as necessary for the respective purposes.

Ratings and trophy flags stored via Supabase, including the associated PlayStation Account ID, remain stored until the user deletes their rating or flag themselves, or deletion is carried out upon request.

14. Rights of Data Subjects

Users have the following rights under applicable data protection laws:

Requests can be addressed to the contact address provided above.

15. Data Security

Appropriate technical and organizational measures are taken to protect personal data against loss, manipulation, or unauthorized access.

Authentication data is stored, where possible, using the security mechanisms provided by iOS, particularly through the use of suitable protected storage areas of the operating system.

16. Changes to This Privacy Policy

This privacy policy may be updated if technical functions, legal requirements, or data processing practices change.

The current version can be accessed within the app.

Last updated: August 2026