Privacy Policy – CineQuick Histories

Last updated: 15 November 2026 · Deutsche Fassung

This policy explains which data the CineQuick Histories app (Android and iOS) processes, why, and for how long. In short:

• The app has no accounts and no login and does not ask for personal details.
• We use no analytics or tracking software of our own and send no user-specific identifiers to our content server.
• The app is free and shows ads from Google AdMob. Personalized ads are shown only with your consent.
• Error reports (Sentry) help us fix crashes; you can turn them off in the settings.
• Settings, bookmarks and reading progress are stored locally on your device; system backups may include them.

1. Controller

JW Software
c/o AutorenServices.de
Birkenallee 24
36037 Fulda
Germany
Email: cinequickhistories@gmail.com

No separate data protection officer has been appointed. You can send privacy enquiries to the email address above.

2. Loading content and images

To show stories, images and current notices, the app fetches them over the internet from our servers (api.histapp.de for content, img.histapp.de for images). This necessarily transmits:

• your IP address,
• the time and the requested address (e.g. which day in which language),
• the program identifier (user agent) and the selected language,
• app version and platform (Android or iOS), so we can detect outdated versions and ask you to update.

The app also sends an access key that is the same for every installation; it does not identify you.

Purpose: delivering content, keeping the service running, preventing abuse and overload. Legal basis: Art. 6(1)(b) GDPR (providing the app you want to use) and Art. 6(1)(f) GDPR (our legitimate interest in secure, stable operation).

2.1 Cloudflare

All requests to api.histapp.de and img.histapp.de pass through the network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Cloudflare protects the server from attacks and overload, limits the number of requests and delivers the images from its storage. For this, Cloudflare processes your full IP address and the request data in data centers worldwide, including the EU.

• We have turned off Cloudflare's logging of image delivery. We only turn it on temporarily to investigate problems; entries are then deleted after 7 days at most.
• If a request is blocked for security reasons (e.g. too many requests in a short time), Cloudflare stores the IP address and request data of that event for up to 30 days.

Cloudflare is our processor (Art. 28 GDPR). Transfers to the US are based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, under which Cloudflare is certified.

2.2 Our server and server log

The server is located in a data center in Vienna, Austria (EU) and operated on our behalf by netcup GmbH (Daimlerstraße 25, 76185 Karlsruhe, Germany) as our processor (Art. 28 GDPR).

For each request the server writes a log entry with the time, requested address, response status, size, duration, approximate country, user agent, language, app version and platform. The IP address is stored only in shortened form (IPv4 without the last part, IPv6 only the first 48 bits), so it can no longer be linked to an individual connection. The full IP address, access keys and cookies are not stored.

Purpose: troubleshooting and security. Retention: 30 days at most, then deleted automatically. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, error-free operation).

A monitoring service (healthchecks.io) receives only figures about the server's state from us, no personal data.

3. Advertising (Google AdMob)

The app is funded by ads delivered by Google AdMob, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or Google LLC (USA).

Consent: On first launch in the EU, the EEA and the United Kingdom, the app uses Google's consent platform (User Messaging Platform) to ask whether Google and its advertising partners may store and access information on your device and show you personalized ads. On iPhone and iPad, the system then also asks (App Tracking Transparency) whether the app may use your device's advertising identifier.

Data processed: the device's advertising ID (Android: Google advertising ID; iOS: IDFA only with your permission), IP address, device and app information (e.g. model, operating system, language), interactions with ads (shown, tapped). Your consent choice is stored on the device.

• With consent, Google shows ads matching your interests and measures their performance. Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act).
• Without consent, non-personalized or limited ads may be delivered. Technical data such as an IP address may still be processed for delivery, security checks and measurement. Additional legal requirements may apply depending on the type of ad delivery.

Withdrawal: You can change or withdraw your consent at any time in the app under Settings › Help & legal › Privacy options. On iOS you can revoke access to the advertising ID under Settings › Privacy & Security › Tracking; on Android you can reset or delete the advertising ID under Settings › Google › Ads.

Responsibility and transfers: Google processes some of this data under its own responsibility and also in the US. Google is certified under the EU-U.S. Data Privacy Framework. More: How Google uses information from apps, Google Privacy Policy.

The app is intended for users aged 16 and over. See also section 9.

4. Error reports (Sentry)

If the app crashes or receives unreadable data from the server, it sends an error report to Sentry (Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA). Reports are stored in the EU (Frankfurt).

Contents: Error description and code location, app version, device model, operating system, device state (for example free memory, battery level, connection type, language and time zone) and technical diagnostic information. The app does not include a separate user identifier or the device identifier (device.id) in error events. Names, bookmarks, settings and historical story content are not deliberately attached to these reports. Sentry may technically process the IP address when a report is transmitted.

Purpose: Detecting and fixing errors.
Retention: Error events are retained for 30 days under the plan in use.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a functioning app); where information on the device is accessed, Section 25 TDDDG may also apply.
Turn off: Settings › General › Send error reports.

Sentry acts as our processor under a data processing agreement (Art. 28 GDPR). Our Sentry organization is configured for the European Union data region. Processing by the provider outside the EU cannot be entirely ruled out in the course of service provision.

5. Contact by email

Under Settings › Help & legal › Contact and feedback you can write to us. The app only opens your email program with a template; you send it yourself. The “Report a bug in the app” template contains app version, operating system, device model and language, which you can see and delete before sending.

We process your email address and message to answer your request. The mailbox is hosted by Google (Gmail). Retention: We generally delete email conversations 90 days after the last message. Final removal from trash and backups may follow the email provider’s retention rules. Legal basis: Art. 6(1)(f) GDPR; for questions about using the app, Art. 6(1)(b) GDPR.

6. Data stored only on your device

The following is stored only on your device and is not sent to us:

• settings (language, text size, data saver, load only on Wi-Fi, reminder, error reports),
• bookmarks, stories read and the last position viewed,
• which notices and tutorials you have seen, times of the rating prompt,
• cached content and images so you can read offline.

This local storage supports the features you use. Data generally remains until you clear the app data or uninstall the app. Depending on your operating system and settings, it may also be included in system backups (for example iCloud or Android backup).

The app also checks on the device whether a connection exists and whether it is Wi-Fi or mobile (for “data saver”); this information does not leave the device.

7. Other features

• Read aloud: On Android, the app uses Google Text-to-Speech remote voices. The historical texts retrieved from our Strapi backend are passed to Google's speech engine; no user-entered texts, bookmarks or profiles are passed for synthesis. Technical connection and device data may also be processed. On iOS, the app uses Apple's system speech synthesis; processing may depend on the selected voice and system settings. Google's and Apple's respective privacy information applies.
• Daily reminder: The reminder is a notification your device shows itself at the chosen time. There is no push service; no data is transmitted. You can turn it off in the app or in the system settings.
• Rating: Occasionally the app asks for a rating via the Google Play or App Store dialog. The system shows the dialog; the app receives no data.
• External links: Image credits link to Wikimedia Commons or Wikipedia. The page opens only after you confirm; the Wikimedia Foundation's privacy policy then applies.
• This page is hosted on Cloudflare Pages. It sets no cookies, loads no third-party content and uses no tracking.

8. Permissions

Android: Internet access and network state (loading content and data saver), notifications and startup after a reboot (daily reminder). Integrated advertising SDKs may use additional permissions and identifiers for ad delivery (see section 3). The app can discover installed text-to-speech services. iOS: notifications (daily reminder) and, only with your permission, tracking (advertising ID, see section 3).

9. Children and teenagers

The app is intended for people aged 16 and over. We do not offer user accounts or ask users to provide their age. Privacy and advertising settings follow applicable rules and device settings.

10. Recipients at a glance

Disclosures take place only as described for these features and service providers. We do not sell data for monetary consideration; see section 12 for how certain advertising disclosures may be classified under US state laws.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): Where we process data based on our legitimate interest (Art. 6(1)(f)), you may object at any time on grounds relating to your particular situation.

Because the app has no accounts, we usually cannot link data to a person. For any request, email cinequickhistories@gmail.com.

Right to lodge a complaint: You can complain to a data protection supervisory authority, e.g. the one responsible for us: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany, https://datenschutz.hessen.de.

You are not obliged to provide data to us. Without the technical data in section 2, however, the app cannot load content. We do not use automated decision-making within the meaning of Art. 22 GDPR.

12. Notice for users in the United States

We do not give personal information to third parties for money.

To fund the app, we use Google AdMob. Personal information such as device information and advertising identifiers may be processed for personalized advertising and disclosed to advertising partners. Under the privacy laws of certain US states, in particular California, this may be considered a “sale” or “sharing” of personal information.

Where these laws apply, you can opt out of this processing in the app under Settings › Help & legal › Privacy options. Your choice is taken into account when ads are delivered. On iPhone and iPad you can also decline tracking (Settings › Privacy & Security › Tracking).

Under these laws you also have the right to know what personal information is processed and to request its deletion or correction (see section 11). You will not be discriminated against for exercising these rights.

For more information on processing by Google, see section 3.

For privacy requests, contact us at cinequickhistories@gmail.com.

13. Changes

We update this policy when the app or the law changes. The version published here applies.