Deutsch English

Privacy Policy

Protecting your personal data is a high priority for us, and we want you to feel confident and secure while visiting our website. This privacy policy provides comprehensive information about what personal data we collect, for what purposes, on what legal basis the processing takes place, and how long we retain your data. You will also learn what rights you have as a data subject under the GDPR and how you can exercise them. 

The individual topics are organized below in expandable sections, so you can easily find the information that's relevant to you. Simply click on a section to view the details.

Privacy Policy Website

1. Controller

Yannick Aister
Am Musikhäusle 24
78112 St. Georgen

Email: yannick.aister@aistee.de

2. Hosting with IONOS

This website is hosted on servers of IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). Access data (IP address, access time) is logged for system security. Data is deleted after 7 days at the latest.

3. Contact Form

  • Data collected: Name, email address, message (voluntary)

  • Purpose: Processing your request

  • Retention period: Max. 6 months after communication ends

  • Legal basis: Art. 6 Para. 1 lit. b GDPR (pre-contractual measures)

4. Cookies

This website uses exclusively technically necessary cookies required for the TYPO3 website to function:

  • fe_typo_user: Session cookie for frontend login (if used)

  • Session cookies: To maintain the user session

These cookies are deleted automatically when the browser is closed and do not require consent under § 25 TTDSG.

5. Your Rights

Under GDPR you have the right to:

  • Access your stored data (Art. 15 GDPR)

  • Rectification of incorrect data (Art. 16 GDPR)

  • Erasure of your data (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Objection to processing (Art. 21 GDPR)

Contact: Use the email address above to exercise your rights.

6. Disclosure to Third Parties

Your data will not be passed on to third parties, except to:

  • IONOS SE (technical hosting)

  • Service providers for website maintenance (if used)

Privacy Policy for the mobile App „Piplio“

1. Scope

This Privacy Policy applies to the mobile application "Piplio" for iOS and Android.

If additional privacy information applies to individual functions or online content, this will be provided separately.

2. Data Controller

The controller responsible for data processing in connection with the "Piplio" app is:

Yannick Aister
Am Musikhäusle 24
78112 St. Georgen
Germany

Email: yannick.aister@aistee.de
Website: aistea.me

3. General Description of the App

"Piplio" is a learning app for children with exercises primarily in mathematics and German language learning. The app can store learning progress and settings locally on the device and, if required, retrieve learning content from our backend.

4. What Data Is Processed

a) Data entered by the user or generated within the app

  • Player name
  • Selected grade level
  • Activated learning packages
  • Learning progress
  • Points, XP, stars, badges and rewards
  • App settings (e.g. sound, haptic feedback and text-to-speech)

b) Data stored locally on the device

  • Cached learning content
  • Locally stored app status information

c) Technical connection data

Whenever learning content is loaded from our backend, technically required connection data may be processed, including:

  • IP address
  • Date and time of access
  • Requested URL
  • Technical information transmitted by the device or operating system
  • Error logs and server log files required for operation

5. Purposes of Processing

The processing of data serves the following purposes:

  • Providing the app
  • Delivering learning content
  • Saving learning progress and settings locally
  • Improving usability
  • Ensuring system security and backend stability
  • Detecting and resolving misuse or technical issues

6. Legal Basis

Where personal data is processed, this is based on:

  • Article 6(1)(b) GDPR where processing is necessary to provide the app's functionality.
  • Article 6(1)(f) GDPR where processing is necessary for our legitimate interests in operating a secure, stable and reliable app and backend.

Our legitimate interest particularly includes ensuring secure operation, technical administration and troubleshooting.

7. Local Storage on the Device

The app stores certain information locally on the user's device, including:

  • Player name
  • Learning progress
  • Badges and rewards
  • Selected grade level and learning packages
  • App settings
  • Cached learning content for improved offline availability

This local storage is necessary to provide the app's functionality and improve usability.

8. Retrieval of Learning Content

The app may retrieve learning content from our backend. Technically necessary communication data is processed solely to deliver the requested content and ensure reliable operation.

9. No Registration or User Account

The app currently does not require a personal user account.

  • No registration
  • No login
  • No centrally stored user profiles
  • No community features
  • No public comment functions

10. No Advertising or Personalized Tracking

The current version of the app does not use personalized advertising.

The app also does not perform advertising tracking or marketing profiling.

11. Device Functions

The app may use device features such as audio playback, haptic feedback or text-to-speech if enabled by the user.

Where operating system or device manufacturer services are used, their respective privacy policies may additionally apply.

12. Children and Privacy

"Piplio" is intended as a learning app suitable for children.

We place particular importance on privacy-friendly operation. Personal data is primarily stored locally on the user's device and is not used for advertising purposes.

Technical connection data required for retrieving learning content is processed solely to provide, secure and maintain the service.

13. Recipients of Data

Personal data is only shared where technically necessary or legally required.

Recipients may include:

  • Hosting providers operating the backend
  • IT service providers acting as data processors
  • Public authorities where required by law

14. App Stores and Distribution Platforms

The app may be distributed via platforms such as the Apple App Store and Google Play.

Downloading, installing or using these platforms may involve processing of personal data by the respective platform providers. We have no control over such processing.

Please refer to the respective privacy policies of those providers.

15. Data Retention

Personal data is retained only as long as necessary for the respective purposes.

  • Locally stored app data remains on the user's device until deleted within the app, manually removed or the app is uninstalled.
  • Server logs and technical access logs are retained only as long as necessary to ensure secure operation, troubleshooting and system security.

16. Your Rights

Under applicable law, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise these rights, please contact:

Email: yannick.aister@aistee.de

17. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable law.

18. Obligation to Provide Data

There is generally no legal obligation to provide personal data.

However, certain information or technically necessary data may be required in order to use the app or individual features.

19. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary due to technical developments, legal changes or new app features.

The version published at the time of use shall apply.

Last updated: July 2026

Privacy Policy for the mobile App „Astrolio“

Astrolio is an app for children and families that shows which celestial objects (Moon, planets, stars and constellations) are visible at a specific location and at a specific time. Below, we explain which data is processed when using the app.

What data we process

Location (GPS coordinates). Astrolio calculates the position of the Moon, planets and stars in the sky directly on your device. For this purpose, your approximate or precise location is required.

If you grant location permission, which iOS or Android requests when the app is first used, your coordinates are:

  • used locally on your device for astronomical calculations, and
  • transmitted to the weather service Open-Meteo in order to determine the current cloud cover and, when using the manual location search, to find matching places.

Open-Meteo only receives the coordinates required for the request. No additional device or usage data and no identifier that would allow the request to be linked to you are transmitted.

The transmission takes place whenever the app's home screen is opened or refreshed and is used solely to provide the app's functionality.

Your location is not permanently stored on our servers or on Open-Meteo's servers.

The legal basis for this processing is your consent provided by granting location permission in accordance with Art. 6(1)(a) GDPR. You can revoke this permission at any time in your device settings. Astrolio will then work with limited functionality, or you can enter your location manually.

Manual location entry (optional). If you enter a place name manually instead, this place name is also transmitted to Open-Meteo in order to convert it into coordinates (geocoding). The same information described above applies.

Name or names for the greeting (optional). When using the app for the first time, you can enter one or more names so that the app can greet you or your children personally. These names are stored exclusively locally on your device and are never transmitted to us or to third parties.

Favorites & settings. Saved celestial objects, the location used for the next app launch and your settings, such as the time of the daily reminder, are stored exclusively locally on your device.

Local reminders. If you enable the daily reminder, a notification is scheduled directly by your operating system. No connection to our servers or to third-party providers is required for this purpose.

These are not server-based push notifications, but notifications scheduled locally on your device.

What we do not do

  • No user accounts and no registration
  • No advertising and no advertising networks
  • No analytics or tracking software, such as Google Analytics or Firebase Analytics – Astrolio does not contain any analytics SDK
  • No disclosure of data for marketing purposes
  • No profiling

Children

Astrolio is also intended for use by children. As described above, an optionally entered name never leaves the device.

Parents can change or remove the name at any time in the app settings. Deleting the app permanently removes all locally stored data, including names, favorites, location information and settings.

Recipients / third-party providers

ProviderPurposeData transmitted
Open-Meteo Weather forecast (cloud cover), location searchGPS coordinates or place name of the search request

Open-Meteo is an open-source weather service. Its own privacy policy applies to the processing of requests on Open-Meteo's servers.

Your rights

Apart from the temporary location request described above, which is not linked to any personal identifier, we do not store personal data from Astrolio on our servers. Therefore, most data subject rights such as access, rectification or deletion have little practical application in relation to data held by us.

All personal data stored by the app remains exclusively on your own device and can be viewed, changed or deleted there at any time, for example through the app settings or by uninstalling the app.

For general privacy-related enquiries, please contact us using the contact details provided in the legal notice or in the general privacy policy.

Privacy Policy – Aistea Kingdoms

1. Data Controller

Yannick Aister
 Email: yannick.aister@aistee.de

The person named above is the data controller within the meaning of the General Data Protection Regulation (GDPR) for the data processing on kingdoms.aistea.me.

2. What data we process

At registration: your email address and a password hash (the password itself is never stored). Optionally, a public username for the worldwide leaderboard.

When signing in with Google (optional): If you sign in with Google instead, we receive only your verified email address and an anonymous Google account identifier from Google. No further profile data is requested. An existing password account is never automatically linked to a Google account.

Game progress and save data: Your castle state, provinces, blueprints, rank, achievements and private leaderboard entries are stored with your account so you can continue playing on any device.

Worldwide leaderboard (optional): If you set a public username, your username, house colors, crest and best result per region are displayed publicly. Your email address is never shown.

Two-factor authentication (optional): If you enable 2FA, we store an encrypted authenticator secret and hashed recovery codes.

Technical log data: To prevent abuse (e.g. limiting login attempts and email sending), we temporarily process your IP address. IP addresses are not permanently logged against individual accounts.

3. Cookies and sessions

We use a technically necessary session cookie (aistea_session) to keep you signed in during your visit. It is set with HttpOnly and SameSite=Lax, and additionally Secure over HTTPS. It is used solely for authentication and protection against Cross-Site Request Forgery (CSRF) — not for analytics or advertising. The game does not function without this cookie.

Build-phase save data is additionally cached locally in your browser (local storage) to bridge brief connection interruptions, and is then synchronized with your account.

4. Purposes and legal bases

We process your data in order to

  • provide and let you sign in to your account (Art. 6(1)(b) GDPR – performance of a contract),
  • save your game progress and make it available across devices (performance of a contract),
  • detect and prevent abuse, spam and attack attempts (Art. 6(1)(f) GDPR – legitimate interest),
  • contact you by email, for example to confirm your registration or reset your password (performance of a contract).

5. Disclosure to third parties

Your data is never sold or passed on for advertising purposes. Recipients are limited to:

  • our hosting provider IONOS SE (server operation, database, email delivery), as a processor within the meaning of Art. 28 GDPR,
  • if you use Google sign-in: Google Ireland Limited, as part of the sign-in flow you chose.

Servers and database are operated within the EU (Germany) by IONOS.

6. Storage duration

Account data and save data are kept for as long as your account exists. Email confirmation and password reset tokens expire automatically after a short time. If you delete your account (see below), your account, save data, tokens and public leaderboard entries are removed irrevocably and in a single operation.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). To exercise these rights, contact yannick.aister@aistee.de.

You can request a complete export of your account data at any time yourself via My Profile in the game. You can also permanently delete your account there at any time.

You also have the right to lodge a complaint with a data protection supervisory authority.

8. Data security

Passwords are stored hashed, never in plain text. Confirmation and reset links are stored in the database only as a hash. Transmission occurs exclusively over HTTPS. Changing your password automatically signs out all other active sessions.

9. Changes to this policy

We update this privacy policy whenever the data processing described here or applicable legal requirements change. The current version can always be found at this address.

 Last updated: September 2026