Privacy Policy

for the DRAMARAMA mobile app (iOS & Android) — Last updated: [approval date]

1. Controller

WUNDERWERK Online GmbH, Neubaugasse 4/7–9, 1070 Vienna, Austria
Phone: +43 1 361 66 77 11 · E-mail: [support e-mail]

2. The short version

• DRAMARAMA works without any user account or registration.
• The app contains no ads and no advertising or tracking SDKs.
• Settings, credits and the story archive are stored locally on your device only.
• To generate a story, the player names you enter are sent to our server and processed by an AI service.

3. AI story generation

The core of the app is a short game story written by an AI language model. For this purpose the following data is transmitted to our server (proxy) and forwarded to the AI provider:

• the player names / role aliases entered in the game,
• the selected game mode or scenario,
• the app language (so the story matches your language).

Our AI provider is Anthropic (Claude models), based in the USA; transfers rely on Standard Contractual Clauses (Art. 46 GDPR) [or the EU-US Data Privacy Framework — verify contractually]. The API key lives exclusively on our server; the app never talks to the AI provider directly.

Tip: Real names are never required — nicknames and fantasy roles work just as well. Please do not enter sensitive information as player names.

Legal basis: Art. 6(1)(b) GDPR (providing the game feature). Transmitted names are [not stored / stored for X days for abuse and error analysis — verify server-side].

4. Data stored locally

The following data stays on your device and is never read by us: language and app settings, credit balance and the time of the next free credit, and the story archive (up to the last 10 stories). Uninstalling the app deletes this data.

5. Purchases

Credits can be purchased through the Apple App Store or Google Play. Payment is handled entirely by Apple or Google; we receive no payment details, only an anonymous purchase confirmation used to credit your balance. Apple's and Google's privacy policies apply in addition.

6. App permissions

• Internet — story generation and purchases.
• Vibration (Android) — haptic feedback on the story reveal; no data processing.

The app does not access contacts, location, camera, microphone or photos.

7. Hosting

Our story server is hosted by [hosting provider + server location]. Connection data (IP address, timestamp) arises technically when the service is called and is processed to provide and secure the service (Art. 6(1)(f) GDPR) and deleted after [period].

8. Your rights

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Contact us using the details above. You may also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

9. Children

The app is intended for users aged 12 and over. We do not knowingly collect personal data from children; the app requires no account or profile information.

10. Changes

We will update this policy when the app or the legal situation changes. The current version is available in the app (Settings → Privacy) and on this page.