Last updated: 29 May 2026.
This privacy policy explains how SCHMUT/WEISS GmbH ("we", "us") processes personal data in connection with the website luminarypartygame.com and the mobile application "Luminary" (together, the "Service"). It applies to all interactions with the Service, including visiting the website, communicating with us by email, and using the mobile app.
SCHMUT/WEISS GmbH
Sieveringer Straße 9/13, 1190 Vienna, Austria
Email: luminary.partygame@gmail.com
"Personal data" means any information relating to an identified or identifiable natural person.
You can visit our website without providing any personal information. Each time the website is accessed, your browser automatically transmits usage data to our hosting provider, which is stored in server log files. This includes the requested page, the date and time of the request, the IP address, the amount of data transferred, and the requesting browser.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating a secure and stable website).
Retention: server log files are retained for up to 14 days for security and abuse prevention, then deleted or anonymised.
If you contact us by email, we collect the personal data you provide (such as your name, email address, and the content of your message) only to the extent necessary to handle your request.
Legal basis: if your request relates to a contract or pre-contractual measures, Art. 6(1)(b) GDPR. Otherwise, Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).
Your email address is used only for the purpose of answering your request. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing.
When you first open the app, an anonymous device identifier ("device ID") is generated on your device. This device ID is not linked to your name, email address, phone number, Apple ID, or any other personal identifier. We have no way of identifying you as a person from it.
We use the device ID to operate core functionality (for example, remembering your subscription state when offline) and to understand in aggregate how the app is used (for example, which decks are most played).
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating and improving the Service).
We do not collect your IDFA (the iOS Advertising Identifier), we do not show personalised advertising, and we do not share data with advertising networks or data brokers. The app therefore does not display an App Tracking Transparency (ATT) prompt.
Subscriptions and one-time purchases inside the app are processed by Apple via the App Store. We never see your payment details. To manage subscription state across devices and provide accurate entitlement information (for example, whether a subscription is active, renewed, or refunded), we use RevenueCat as a processor. RevenueCat receives transaction events from Apple and forwards subscription state to us, joined only via the anonymous device ID described above.
Processor: RevenueCat, Inc., 600 California St, San Francisco, CA 94108, USA. Privacy policy: revenuecat.com/privacy.
Legal basis: Art. 6(1)(b) GDPR (performance of the subscription contract).
Anonymous device-level events (for example, "a game was started", "a paywall was viewed") are sent to and stored on Supabase as our data processor. Data is stored in the European Union region.
Processor: Supabase Inc., 970 Toa Payoh North, Singapore 318992. Privacy policy: supabase.com/privacy.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in product analytics).
If you arrive at Luminary via an Apple Search Ads campaign, Apple shares anonymous campaign-level attribution data (such as the campaign and keyword that drove the install) with us via Apple's AdServices framework. This data does not identify you personally and is not used to track you across other apps or websites. Apple considers this first-party attribution and not "tracking" under its App Tracking Transparency framework.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in measuring the effectiveness of our advertising).
Aggregate analytics data is retained for as long as necessary to operate and improve the Service. Subscription transaction data is retained for as long as required by applicable tax and accounting law (in Austria, generally seven years).
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Hosting necessarily involves the processing of server log files as described above. Privacy policy: vercel.com/legal/privacy-policy.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in providing a reliable website).
The website does not set analytics or marketing cookies. Only technically necessary cookies (such as those required to operate the language switch) may be set. Because no consent-bearing cookies are used, no cookie banner is displayed.
Under the GDPR you have the right to:
Because the in-app device ID is anonymous and not linked to your identity, we may need additional information from you (for example, the device ID shown in the app, if exposed) to identify the data that relates to you.
You may exercise these rights at any time by emailing luminary.partygame@gmail.com.
You have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde): dsb.gv.at.
If you have any questions about this privacy policy or the processing of your data, please contact us at luminary.partygame@gmail.com.