Privacy, in plain language.

Controller

The controller for the processing described here is Dirk Wingenter, Im Rosengarten 10, 54550 Daun, Germany. The contact address is support@cube-league.com.

Personal practice

Solve times, dates, scrambles and their technical details, penalties (+2/DNF), input methods and practice days are initially stored on your device. Only after your explicit selection are they synced privately through Apple CloudKit between devices using the same iCloud account. This practice data is not shared with leagues.

Learning and preferences

The app stores learning progress, “Practised” and “Understood” markers, CFOP self-assessments and recently visited lesson positions. Learning progress and your colour theme initially stay local. They sync privately through CloudKit only when you enable private iCloud sync, including timestamps and technical sync identifiers. Other preferences, rehearsal competitions and recovery states are stored locally. Resetting learning progress resets the displayed state; it does not remove all sync data.

Private leagues and competitions

The app uses a display name of your choice and technical iCloud and participant identifiers. League membership, roles, invitations, competition names and dates, and competition attempts are processed through CloudKit only when you request iCloud use for leagues. Attempts include times, penalties, completion and confirmation timestamps, manual input and, where applicable, an interruption marker. This data is shared within the relevant league. Choose a display name you are comfortable sharing with its members.

Apple and iCloud

Cube League uses Apple CloudKit for private device syncing and sharing league data. It uses private and shared databases; the app does not place this data in a public CloudKit database. There is no separate app server. The app does not ask for your Apple password. Apple’s Developer Agreement, Attachment 4 Section 3.6, addresses processing CloudKit content on the developer’s behalf and the developer’s continuing responsibility for app data. Apple’s own terms and privacy notices also apply to your Apple Account and the iCloud service. For users in Germany, the iCloud provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland; other Apple entities may apply in other countries.

International processing by Apple

CloudKit is not a Germany-only hosting service. Attachment 4 Section 3.6 permits Apple to choose geographic locations for encrypted storage. For transfers from the EEA or Switzerland, that section provides for adequate protection or contractual safeguards. Apple’s Privacy Policy cites Standard Contractual Clauses for international transfers from the EEA, United Kingdom and Switzerland; processing in the United States is also possible. We therefore do not promise EU-only storage for app data. The Developer Agreement version linked in the developer account has been documented and checked for these iCloud provisions. Section 3.6(g) provides for Apple to supply the contractual transfer safeguards mentioned there on request. The actual transfer circumstances and any necessary supplementary documents still require assessment before App Store release.

Apple diagnostics and data security

In addition to app content, Apple may process technical usage and diagnostic data for the iCloud service. The statement that Cube League integrates no analytics SDKs does not exclude Apple’s processing. “Private” describes database access separation; it does not guarantee end-to-end encryption of every category of app data.

Retention, export and deletion

Individual practice attempts can be deleted in the journal; when private sync is enabled, deletions sync through iCloud. In Settings under “Data and iCloud”, you can export device data as JSON, explicitly include accessible personal iCloud data and pause processing from this installation. Ordinary league departure retains existing results and names. The separate, confirmed deletion removes your accessible league results, names and participant associations; rankings may change. Other members must not lose their data. A minimal technical deletion marker remains in iCloud so current app versions do not automatically upload old data again when reopened. Where access, technical ownership or incomplete operations prevent deletion, the app explains the obstacle and does not confirm complete deletion. For leagues you have already left, contact support so we can coordinate with you and the league owner. Close the app on other devices and update them before further use; older installations may upload retained data again. Turning off sync, pausing or uninstalling alone does not delete iCloud data. There are currently no general automatic retention periods for app data.

Website and hosting

The website and support mailbox use ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A personalised data processing agreement dated 21 March 2024 exists for the hosting contract and covers website and email hosting. Under that contractual version, web hosting uses storage in Germany. Neue Medien Münnich GmbH at the same address is listed as a subprocessor. This website uses system fonts and loads images and stylesheets from its own web server and includes no external embeds, analytics or advertising services. It sets no cookies of its own and uses no browser storage.

Connection data and logging

When a page is requested, the host processes the IP address, requested address and technical information transmitted by the browser to deliver the content. Customer log files and visitor statistics derived from them are disabled in the hosting administration. We therefore do not generate or use our own access logs or visitor statistics. The technically necessary processing of connection data remains unaffected. This setting does not determine any separate processing by ALL-INKL for its own security and operational purposes. ALL-INKL provides information about this in its privacy information linked below.

Email contact

A support enquiry involves processing your email address, message content, any name you provide and voluntary attachments to handle your request. The mailbox is set up at ALL-INKL and confirmed as active in KAS. The checked “Copy recipients” field contained no address. The separate KAS forwarding list contained no entry for cube-league.com. No automatic forwarding for this mailbox is therefore configured at KAS level. Please do not send passwords or league invitation links. Completed enquiries are deleted once no follow-up or other objective reason for retention remains. Statutory retention obligations and retention necessary to establish, exercise or defend legal claims remain unaffected; further use is restricted to these purposes.

Purposes and legal bases

Technical delivery and security of this website and handling general support enquiries rely on Article 6(1)(f) GDPR. Our legitimate interests are reliable delivery, security and answering your questions. Where necessary, contract-related enquiries rely on Article 6(1)(b), and statutory retention obligations on point (c). Point (b) is intended for each app feature you actively request. Private device syncing and league use are requested separately. Assessment against the actual user agreement and necessity for each app feature will be completed before App Store release. A choice in settings is not represented here as automatically constituting previously obtained data protection consent.

Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Where consent applies, you may withdraw it for the future. Send requests to support@cube-league.com; if necessary, we will establish the relevant account or data without your Apple password. You may complain to a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, Postfach 30 40, 55020 Mainz, Germany, email: poststelle@datenschutz.rlp.de.

No advertising or integrated tracking

No advertising, analytics or external crash reporting services are integrated in the reviewed app code. CloudKit processing for the app features described above remains necessary for those features.

Further information

• Apple Developer Agreement — Attachment 4, especially 3.5 and 3.6
• Apple Privacy Policy and international transfers
• Relevant Apple entities
• iCloud terms of service
• CloudKit: shared records
• Apple: data protection rights and CloudKit
• Contact the Rhineland-Palatinate supervisory authority