This Privacy Policy applies to the Scratch a Saying mobile app (Skrapelykke). The app does not require account creation, and I do not ask you to submit personal information directly inside the app.

1. Controller

This app is provided by Runar Ovesen Hjerpbakk (runar@hjerpbakk.com).

2. Data Stored on Your Device

Some information is kept on your device so the app remembers your choices:

• your saved favorite sayings
• your category, theme, and foil preferences
• app settings and small progress flags, such as whether you have seen the welcome screen or the latest what’s new

This data stays on your device. I do not collect it, and it is not sent to me or to any server. If you delete the app, this data is removed with it.

When you share a saying, the app creates an image card and hands it to the iOS share sheet. You choose where it goes, and it is sent directly from your device to whatever app or contact you pick. I do not receive a copy.

3. Analytics

I use first-party analytics to understand which screens and features are used, so I know what to improve. The app sends static screen names (such as welcome, settings, favorites, saying-detail, and whats-new) and event names for actions like drawing a card, revealing or sharing a saying, saving a favorite, requesting an ad, or tapping the rate, feedback, and all-apps buttons. It does not send the saying text, its author, your favorites, your category or language choices, or any other content, value, or detail of what you do.

If a handled error or a crash happens, the app also sends a static error name (such as ad_load_failed or app_crashed) together with the error’s type, domain, and numeric code. It never sends error messages, stack traces, file contents, or anything you typed.

Along with each event, the analytics system also receives:

• a random visitor identifier that changes at least daily and is never stored on your device, so your usage cannot be linked from one day to the next
• basic app and device information: app version and build, operating system version, device model, language, and screen size
• an approximate location, such as country or region, derived from the network request. The raw IP address is not stored.

This analytics is operated by me using Umami, hosted on Fly.io with a Supabase database. The data is not used for advertising, is not sold, and is not used to track you across other apps or websites.

Analytics data is kept until it is deleted as part of routine maintenance. Deleting the app stops any future collection. For privacy questions, contact me at runar@hjerpbakk.com.

4. Data Processed for Advertising

This app uses Google AdMob to display advertisements. When ads are requested, loaded, or shown, Google and its partners may process personal data such as:

• device and app information
• advertising identifiers and similar identifiers, where available
• IP address
• approximate location derived from IP address
• diagnostics, performance, fraud-prevention, and ad interaction data
• consent choices related to advertising

5. Purposes of Processing

Personal data is processed for the following purposes:

• displaying ads and funding the app
• measuring ad performance
• preventing fraud, abuse, and invalid traffic
• complying with legal obligations

6. Legal Basis in the EU/EEA

If you are in the EU/EEA, the legal basis for processing is:

• consent, where required, for personalized advertising and the use of advertising-related identifiers or local storage
• legitimate interests and/or legal obligations, where applicable, for security, fraud prevention, and compliance

You can refuse or withdraw consent at any time through the app’s privacy choices or your device settings, where applicable. If you do not consent, ads may be non-personalized or limited.

7. Recipients

I use Google AdMob as an advertising provider. Google and its advertising partners may receive and process the data described above. Google may act as an independent controller for some ad-related processing. I do not set the retention period for data processed by Google AdMob; Google retains data according to its own policies. More information is available here:

• Google Privacy Policy
• Google Ads Settings

8. International Transfers

Because Google operates globally, personal data may be processed outside the EU/EEA. Google states that it applies safeguards for international data transfers in accordance with applicable law. Please see Google’s privacy documentation for more information.

9. Your Rights

If you are in the EU/EEA, you may have the right to:

• access your personal data
• request rectification of inaccurate data
• request deletion of your data
• request restriction of processing
• object to certain processing
• request data portability where applicable
• withdraw consent at any time
• lodge a complaint with your local data protection authority

These rights apply to the advertising data that Google processes as the controller, so you exercise them through Google using the links above. The analytics I run cannot be linked to you, so there is nothing on my side to access, correct, or delete.

10. Children

This app is intended for a general audience. If you are a parent or guardian and have a privacy concern about a child’s use of the app, please contact me.

11. Contact

For privacy questions or to exercise your rights, contact: Runar Ovesen Hjerpbakk (runar@hjerpbakk.com).

12. Changes

I may update this Privacy Policy from time to time. The updated version will be made available at the same location and will show the new “Last updated” date.

Last updated: 20 July 2026