Privacy Policy

For Perle, the loop puzzle — com.perlesti.perle — published on Google Play by Deep River AS of Ås, Norway.

Version 1.0 · in force 14 October 2026

01

In one breath

Nothing is threaded out of the handset

Perle asks you for nothing whatever: no registration, no profile, no advertising, no measurement library travelling along, no list that anybody joins. Those are five assertions, and assertions are cheap to make. The sixth can be confirmed without relying on the first five — the published package declares no internet permission. What an app receives from Android is exactly the set its package requested, so one that left the network off that list cannot reach it, whatever its code may contain. The declaration is printed on the listing, legible before you install anything.

What it does remember is your play: the boards behind you, how quickly each closed, and the half-drawn thread you put down mid-board. Every Android app is allotted a private area of storage and the whole of that sits inside Perle's. None of it is copied to a machine at this end — which leads somewhere blunt. Your play is in nobody's keeping but your own, so there is no store here to be broken into, nothing available to sell, and nothing we could produce if a demand arrived.

Eleven pearls follow, strung in order. Between them they deal with what the General Data Protection Regulation expects of a notice like this, and the eleventh gives an address for objections.

02

Answerable

Whose name is on the page

ControllerDeep River AS

Formaksjeselskap, registered in Norway

Signs for itReidar Vestby

Registered atSagaveien 3, 1430 Ås, Norway

This page[email protected]

AppPerle — com.perlesti.perle

Article 4(7) attaches the word controller to whoever settles what a processing operation is for and the means by which it happens, which is why a company name heads a document of this sort instead of closing it. Underneath the wording lie two undertakings: that nothing written below is untrue, and that a person with a name carries it if any of it proves to be.

No data protection officer is named here. Three sets of circumstances make one mandatory and nothing else does: being a public body, monitoring people systematically at scale as the main line of work, or handling special-category data at scale. None of the three comes anywhere close to describing a one-person operation with a single offline puzzle on the store. Appointing an officer regardless would advertise a protection that had nothing to protect.

03

Held on the handset

Everything kept, set out in full

Some memory is unavoidable, or each evening would open on the first board again. This is all of it:

  • The boards already closed, pack by pack, so the board list knows where to set the marker.
  • The time each one took, without which there would be nothing to improve on.
  • The board left unfinished — segments drawn, segments rubbed out, undos remaining — so that an hour of deduction is not lost to putting the phone down.
  • Hints remaining from the allowance.
  • Your adjustments — language, sound, whether the gentle flag for a branch or a stray sub-loop is on, and the rest of the adjust screen.

Now read the list for what it leaves out. Your name is never asked for. Nothing with the function of an address is written down. Android's advertising identifier goes unread. Device characteristics are not gathered into any combination that could act as a fingerprint. And Perle issues itself no installation number, which is the omission holding up all the others, since without one nothing separates your copy from the next person's. Around the lot, the operating system's sandbox keeps every other installed app from looking in.

Removing Perle removes all five. To keep the game but lose the history, the adjust screen carries a reset; Android's "clear data" arrives at the same place by a different route.

04

A deliberate blank

Why no lawful basis is quoted

Notices of this kind generally alternate — an item collected, then the Article 6 ground that permits it, then the next item. Here the alternation breaks: no ground is ever named. That omission runs from top to bottom of the page, and anybody who spots it is entitled to the argument behind it instead of a shrug.

Behind every lawful basis is one question: on whose authority is this in your keeping? Answering it requires somebody keeping something, and neither half is present. Everything in pearl 03 lives on your equipment, where we cannot reach it, and identifies no one: take away identifiers that were never written down in the first place and the residue is an account of one phone's evening with some pearl boards. For the Regulation to bite, two conditions must coincide — data pointing at a person, and somebody processing it. Knock the first away and the second supports nothing.

An argument lasts precisely as long as its premise. Whichever comes first — a login screen, an advert, a telemetry package, a shop — spends the premise on the spot, and this document must then be redrafted and go out with the build that caused it, each new item accompanied by whatever licenses it. The instructions for doing so are kept in a comment at the end of this file.

A cookie banner is likewise absent, for reasons of the same family. What those rules reach is anything written to or read back from a user's own device over and above what the service they requested strictly requires, and such things travel by a short list of vehicles — a web view sitting inside the app, a pixel inserted to measure, a tag placed there by somebody outside. Perle holds none of the three, and were one smuggled in it would find no connection to report down. The Norwegian rules on the subject accordingly have nothing here to govern.

05

Permissions

One requested, the remainder declined

Requested

Just vibration — the faint tap as a segment is laid down — and that only for as long as the switch is left on. It is granted without a prompt, and reasonably: nothing about a person can be inferred from their phone buzzing.

Declined

First and foremost the network, and then, following from that single refusal, every one of the camera, microphone, location, contacts, storage beyond this app's folder, telephony state and notifications.

The right-hand box is what everything else here is resting on. No route out exists, and without one nothing can be sent; the destination of your data therefore ceases to be a question of credibility and becomes a property of the package, open to inspection by anybody who cares to look.

Decline any permission request you did not expect, and then send the build number to [email protected]. There are two candidate explanations and no third: this page has fallen out of step with the shipped code, or what you installed was not published by us. Both want settling quickly.

06

Earlier, elsewhere

The store is a transaction of its own

Everything so far describes Perle in use on your phone. How it got there is a separate affair, closed before any of that began, between you and Google. Google's own record of the matter — the download, the updates after it, a star rating if one was left — sits under the account that was signed in, on whatever terms govern Google's store. Neither reading nor changing that record is within our power.

Our view of it is the Play Console summary, which stays firmly at the level of totals: installs added up, countries roughly apportioned, faults bundled into categories, one rating averaged out. No row of it narrows to an individual. The contents of your Google account stay there — billing address, payment method, the devices it has been used on — and whatever control you have over those is exercised from inside the account, never from here.

One caution concerning the listing itself. Post a review and it is visible to the world from that second onward, attached to whatever name your account displays, and it remains in place for everybody who comes to the page afterwards.

07

Recipients

Nobody stands downstream

You cannot subcontract a task that is not being carried out. Run through the parties a notice of this kind normally has to name and the answer is nothing, six times over: no server keeps data for the game, no measurement account watches it, no crash service receives from it, no ad marketplace is attached, no mailing provider holds addresses, no one processes payments. These suppliers were never considered and rejected — their work simply does not exist here. Asked by Article 13(1)(e) for the categories of recipient, the only truthful response is to leave the entry empty.

Pearl 06 is strung before this one deliberately, to put the store in plain view as the limit of what is answered for here rather than to hide it behind: that exchange runs on Google's infrastructure, under Google's own contract with you, and is already finished by the time anyone opens the game.

08

Across borders

Nothing leaves the country

Moving personal data beyond the European Economic Area falls under Chapter V, around which a substantial body of machinery has accumulated — findings of adequacy for countries whose protection is held to be sufficient, model clauses drafted for the purpose, binding corporate rules, and the handful of exceptions set out in Article 49 to catch what the rest does not.

Every one of those devices assumes that something is being sent, and nothing is. Whatever a board cost you in minutes was recorded by the phone that timed it and stayed there — not on a machine in Norway, not on one in Ireland, not on one anywhere. The question Chapter V was written to answer therefore never comes up.

Keeping this separate from pearl 07 is deliberate, since the pair are usually merged and ought not to be. The first states that no other party gets your data; this one states that it stays put. The same underlying fact makes both true today, yet they remain two distinct undertakings, and whichever fails first will fail by itself.

09

Duration and age

How long it lasts, and who it suits

Duration. The reason such clauses usually name a number of months is that somebody beyond the reader's reach is doing the holding. Nobody is holding anything here except you, which makes a number empty and a condition the only honest shape for the answer. It persists while you permit it and stops the instant you do not, by reset or by uninstall, whichever you prefer. No copy is taken overnight. No prior state is kept back. We operate nothing in which a remnant could outlive what you chose. And the passage of time removes nothing by itself — a figure standing untouched for three years is still that figure, still on your device, still seen by you and no one.

Age. Perle carries a general-audience rating, and tracing a thread between pearls is about as innocuous an hour as a child could have. Four things usually get checked: whether ads are aimed at the child, whether a careless tap can spend money, whether an outsider can get word through, whether other users supply any of the content. No to each — and not because a switch was flipped, but because none of the four was built in the first place. Article 8 ought to apply as well, since it fixes the point below which a child cannot consent to an online service without a parent standing behind them. It finds no foothold: consent is asked of nobody in this game, child or adult. In Norway the figure is 13, and it is set down here at a moment when it decides nothing — so that it is already written should advertising ever give it force.

10

Your rights

Eight rights, and what each one yields

Not one of the eight is cut down here. The peculiarity is that most of them were answered before you asked — by the handset, which holds everything there is to hold and shows it to you on request. A formal procedure could end in one way only, with a letter reporting that no file on you exists, and a procedure with one possible ending is a pageant rather than a protection. What follows is the ending.

Access · 15Our reply would run to a line: there is no file to produce. Whatever the game retains is listed on the board screen, open to you without asking.

Rectification · 16A record can be wrong; none is held. If a stored time does you an injustice, the remedy is a faster board.

Erasure · 17Already yours, and instant: reset, or remove the app. Because no request is addressed to us, none of yours risks being declined, delayed, or handed back on the thirtieth day.

Restriction · 18Its purpose is to halt processing while a dispute runs. Nothing of yours is being processed, so the halt has no subject.

Portability · 20It governs material given up to a controller and now wanted elsewhere. You gave up none, and the game's memory is a file on hardware that belongs to you.

Objection · 21There must be an activity for the objection to land on. The form of it that admits no refusal concerns direct marketing, and none departs from here.

Consent · 7(3)At no point is your agreement sought, and no function rests on having obtained it. Withdrawing requires a permission that is live, and there is not one.

Automated decisions · 22Establishing that a loop closes and meets every pearl is a comparison of segments with rules. The result describes a board and nothing else.

Nothing is payable, no form is involved, and you will not be asked to establish who you are. Identity checks keep one person's material from reaching another; absent any material they protect no one, and requiring papers from you in order to demonstrate that none exists would be gently absurd.

11

Objections and changes

Where to take a disagreement

It goes to [email protected] — one box, read by whoever wrote these words, with nothing standing between. Claim a right, take issue with a sentence here, report a permission prompt that pearl 05 fails to explain, or write simply because you would like to know how some part of it operates.

Du kan skrive på norsk om du vil — samme adresse, og svaret kommer på norsk.

In Norway the General Data Protection Regulation takes effect through personopplysningsloven, and Datatilsynet is the authority that oversees how companies here apply it. The postal address is Postboks 458 Sentrum, 0105 Oslo, though datatilsynet.no gets you there faster. One thing worth knowing: Article 77 does not confine you to Oslo. A complaint may be taken to the authority covering your usual home, or your workplace, or the spot where you believe the breach occurred — three options, and the pick is yours without justification. No sentence on this page can cut that number down, and one attempting it would carry no force. Nor must you come here first; that is only advice. A case open at Datatilsynet and a letter sitting in this inbox get along perfectly well.

Below the title there is a version, and any change above it moves the number along. The timing of such changes answers to a single rule with no give in it. Where the rewrite exists because the software now does something it did not do before — keeps a new item, admits a new party, starts sending traffic abroad, takes on another purpose — the revised wording leaves with the build that caused it and with no build after that. Nothing arrives on a phone ahead of the paragraph explaining it. That has a handy effect: the version tells you at a glance whether this text was drafted for what you have installed. Previous versions are archived, and we will send one to anybody who asks.