Last updated: 9 October 2026
This privacy policy explains which personal data the app Cat Burglar – Room Escape (iOS and Android, “the App”) processes, for what purposes, and which rights you have. The App works without an account and without registration: you do not need to provide your name or email address to play. The App has no server of its own; your progress stays on your device.
1. Controller
InnoMobile GmbH
Schlehenweg 20
18069 Lambrechtshagen
Germany
Amtsgericht Rostock, HRB 15811
Managing Director: Paul Stelzer
Email: support@innomobile.de
2. Summary
- The App has no account and no server of its own. Your progress, your collection and your settings are only stored on your device.
- Some puzzles use the microphone (blowing out candles) or the motion sensor (tilting, shaking). Both are evaluated only on your device; nothing is recorded, stored or transmitted.
- When you share a room or a result, the App creates the link or image on your device and hands it to the share dialog of your system.
- Purchases are handled by Apple or Google; we use RevenueCat to manage them.
- The App shows ads from Google AdMob. Personalised advertising only takes place with your consent.
- To fix crashes and errors, we use the error reporting service Sentry.
3. Microphone and motion sensor
In some rooms you blow out candles by blowing into the microphone. Only while such a puzzle is open, the App measures the volume level on your device to detect the blowing. The audio is not recorded, not stored and not transmitted. The App asks for access to the microphone the first time; if you decline, you hold your finger on the candles instead.
Other puzzles (a ball maze, shaking a shelf) use the motion sensor of your device. The App evaluates tilt and movement only on your device while the puzzle is open and does not store or transmit them. On iOS the App asks for access first; without it, these puzzles work by dragging or tapping.
Legal basis: Art. 6(1)(b) GDPR (providing the game functions you use).
4. Sharing rooms and results
After a room you can share a picture of your result, and you can send a room as a link. The App creates the picture and the link on your device: the link contains the room itself (chapter and room, or the content of the room) but no information about you. The App hands picture and link to the share dialog of your system; what happens next is up to the app you choose there. We do not receive anything.
If someone opens such a link, the website of the App forwards to the App, or to the App Store or Google Play if the App is not installed. Like any web server, our website logs technical access data (IP address, time, address called) in log files that are deleted after a short time.
Legal basis: Art. 6(1)(b) GDPR (sharing feature of the App) and Art. 6(1)(f) GDPR (secure operation of the website).
5. Purchases
In-app purchases are processed by Apple (App Store) or Google (Google Play). We do not receive your payment details. The privacy policies of Apple and Google apply.
To manage purchases we use RevenueCat (RevenueCat, Inc., USA). The App offers one purchase that unlocks all buildings from chapter 6 on. RevenueCat assigns its own anonymous ID; the App passes RevenueCat the purchase receipts from Apple/Google and device and app information. We do not pass any other data about you to RevenueCat. More information: RevenueCat privacy policy.
Legal basis: Art. 6(1)(b) GDPR (fulfilling the purchase) and Art. 6(1)(c) GDPR (statutory retention obligations).
6. Advertising (Google AdMob)
The App shows ads: optional reward videos with which you unlock further hints for a room, and an ad between rooms from time to time (never in the middle of a room). Ads are delivered by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
The App asks for your consent via Google’s consent form; on iOS, Apple’s tracking request is also shown. Only with your consent may Google use the advertising ID (IDFA or Google Advertising ID) and other data to show personalised ads. Without consent, Google only shows non-personalised ads; even then Google processes data such as IP address, device information and interactions with the ad to deliver ads, prevent fraud and measure ads. You can change your choice in the device settings (tracking/advertising ID). More information: How Google uses data from apps, Google privacy policy.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent) for personalised ads, otherwise Art. 6(1)(f) GDPR (financing the free version).
7. Error reports (Sentry)
If the App or our server encounters an error, an error report is sent to Sentry (Functional Software, Inc., USA). It contains the technical error description, the app version, platform, operating system and device type and, for server errors, the requested address. We do not send names, nicknames or profile details. We use the reports exclusively to find and fix errors. More information: Sentry privacy policy.
Legal basis: Art. 6(1)(f) GDPR (stable and secure operation of the App).
8. Data on your device
The App stores your progress, your stars and best times, your album and the hats of the cat, your photos taken in the game, your results in the room of the night and your settings locally on your device. This data is deleted when you uninstall the App. The App also uses the device functions for sharing (system share dialog), store ratings (rating dialog of Apple/Google) and checking for updates (query of the store version).
9. Contact
If you contact us by email or via the support page, we process your message and your contact details to answer your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
10. Storage period
- Data on your device: until you reset your progress (progress only) or uninstall the App.
- Microphone and motion sensor: not stored; the values are only used for the moment of the puzzle.
- Log files of the website: deleted automatically after a short time.
11. Recipients and transfers to third countries
We only pass data to the service providers named in this policy (RevenueCat, Sentry, Apple, Google). RevenueCat and Sentry are based in the USA. Transfers take place on the basis of the EU Standard Contractual Clauses or, where the provider is certified, the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). We do not sell data.
12. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time for reasons arising from your particular situation.
To exercise your rights, write to support@innomobile.de. As the App has no account and no server of its own, we do not hold any game data about you; you can delete everything stored on your device yourself by uninstalling the App. For purchases, please contact Apple or Google; for data at RevenueCat, AdMob or Sentry, we will help you with your request.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin, Germany.
13. Changes
We adapt this privacy policy when the App or the legal situation changes. The current version is always available on this page.
