Privacy Policy

Last updated: November 2026

We take the protection of your personal data seriously. This policy explains what data is processed when you use the SoapPlay app and the website soapplay.app. You can use SoapPlay without creating an account or giving your name or e-mail address.

1. Controller

The controller responsible for data processing is:

2. This website

soapplay.app is hosted by Cloudflare, Inc. (USA). When you open the website, Cloudflare processes technically necessary data such as your IP address, browser type, time of access and the requested page to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR, legitimate interest in a secure and working website). The website uses no cookies, no analytics and no advertising trackers.

3. The SoapPlay app

Progress on your device

Your progress, Tokens, unlocked episodes and settings are stored locally on your device. This data is deleted when you uninstall the app.

Video streaming

Episodes are streamed from Cloudflare R2 (Cloudflare, Inc., USA). To deliver the video, Cloudflare processes your IP address and technical request data (Art. 6(1)(b) GDPR, provision of the service).

Firebase Analytics (Google)

We use Google Firebase Analytics to understand how the app is used and to improve series and games (Art. 6(1)(f) GDPR, legitimate interest; where required, Art. 6(1)(a) GDPR, consent). The following data may be collected:

• App instance ID (pseudonymous)
• Device type, operating system and app version
• Approximate location (country/region)
• Events in the app, e.g. episodes started or finished, levels played, Tokens earned and spent
• Session duration and frequency

Advertising (Unity LevelPlay)

The app can offer optional rewarded videos: you choose to watch an ad and receive Tokens in return. Ads are delivered via Unity LevelPlay (ironSource Mobile Ltd., Israel / Unity Technologies, USA) and its mediation partners. Personalised ads are only shown with your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time in the app settings. The following data may be collected:

• Advertising ID (AAID)
• Device type, model and operating system
• IP address
• Interactions with ads
• Approximate location (country)

Android: you can reset or delete your advertising ID under Settings > Google > Ads.

Purchases

In-app purchases are processed by Google Play. We do not receive your payment details — only a confirmation that the purchase was made (Art. 6(1)(b) GDPR).

Google Play

When you download SoapPlay from Google Play, Google's privacy policy applies to the download and installation data, device information and payment data Google collects.

4. Recipients and transfers outside the EU

Data is only shared with the providers named above:

• Google LLC / Google Ireland Ltd. (Firebase, Google Play) — EU-US Data Privacy Framework / Standard Contractual Clauses
• Cloudflare, Inc. (USA) — EU-US Data Privacy Framework / Standard Contractual Clauses
• Unity Technologies (USA) and ironSource Mobile Ltd. (Israel) — Standard Contractual Clauses / adequacy decision for Israel
• Advertising partners delivering ads via LevelPlay — only with your consent

We do not sell your data or share it for any other purpose.

5. Storage period

We keep personal data only as long as needed for the purposes above. Analytics data is deleted automatically after at most 14 months. Data we must keep by law is kept until the legal retention period ends.

6. Age

SoapPlay is suitable for ages 12 and up. Users under 16 can only give consent to personalised ads with the approval of a parent (Art. 8 GDPR); without consent, only non-personalised ads are shown.

7. Your rights

You have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent at any time (Art. 7(3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

To exercise your rights, write to support@valorbyte.de.

8. Data security

We use appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access. All connections are encrypted (HTTPS).

9. Changes

We update this policy when the app or the law changes. The current version is always available on this page.