Last updated: 28 September 2026
This policy explains how Coconut Island Apps handles personal data on this website and in its games and utility apps. Services and permissions differ between apps and platforms.
Operator and data controller: Coconut Island Apps, Löbtauer Str. 60, Dresden, Germany.
Email: contact@coconutisland.app.
This operator information also applies to OreScout and orescout.app. OreScout has its own app and website privacy policy.
Delivering this website involves processing technical request data, including your IP address, requested URL and browser information, by the hosting infrastructure. This supports delivery and security of the website, based on our legitimate interests under Article 6(1)(f) GDPR.
If you email us, we process your email address, message and any attachments to answer your request. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual requests, or Article 6(1)(f) for other correspondence. Please send only the information needed to handle your request.
Links to app stores, game platforms and Discord take you to services with their own privacy policies. Opening our Discord redirect takes you directly to Discord.
The following sections describe services used by our apps where the relevant feature is available. They do not mean that every app requests every permission or uses every service. For OreScout, use the separate policy linked above.
Device permissions needed for a feature are requested by the app or operating system. Declining an optional permission does not itself require you to stop using unrelated features.
Apps with Google AdMob advertising may process advertising identifiers, IP addresses, device information and ad interactions to deliver and measure ads. Where consent is required for advertising or access to information on your device, the app requests it. Consent-based processing relies on Article 6(1)(a) GDPR. You can revisit available advertising consent choices through the app's privacy settings.
Non-personalised ads are not necessarily free of personal-data processing or consent requirements. On iOS, declining Apple's App Tracking Transparency request prevents access to the IDFA; it does not create a replacement advertising identifier. Apple's tracking permission and advertising consent are separate choices.
See Google's privacy policy and Sentry's privacy policy for information about these providers. The consent interface identifies the advertising partners relevant to your choices.
Data is handled by the providers needed for the relevant feature, including hosting and email providers, Google AdMob, Sentry and the app store used for purchases. Their roles depend on the service: not every provider acts solely as our processor.
Providers may process data outside the European Economic Area, including in the United States. International transfers must have a basis under Chapter V GDPR, such as an applicable adequacy decision or appropriate contractual safeguards. You can contact us for information about the safeguards applicable to your data and how to obtain a copy.
Retention depends on the purpose and service. Support correspondence is needed while resolving your request and, where relevant, for subsequent contractual claims or statutory recordkeeping. Technical logs and diagnostics are needed to investigate faults, security incidents and recurring errors; retention also depends on the provider's configured retention period. Advertising data is subject to the relevant provider's retention rules and your consent choices.
Data is deleted or anonymised when no longer needed, unless a legal retention duty or an unresolved legal claim requires it to be kept. Withdrawing consent does not remove an independent legal duty to retain particular records.
Under the GDPR, you may request access, correction, erasure, restriction and, where applicable, data portability. You may withdraw consent at any time without affecting processing that was lawful before withdrawal. You may object to processing based on legitimate interests on grounds relating to your particular situation, and to direct marketing at any time.
Contact the email above to exercise your rights. We normally respond within one month. If a legally permitted extension is needed, we will explain it within that month. Requests are normally free of charge, subject to the exceptions allowed by law.
You may complain to a supervisory authority, including the Saxon Data Protection and Transparency Commissioner, or the authority where you live or work. We may need information sufficient to verify your request, but please do not send identity documents unless we explain why they are necessary.
We update this page when our processing changes and provide additional notice or obtain fresh consent where required. The date above identifies the latest revision.