Privacy policy

As of November 2026. This is a courtesy translation; the German version is legally binding.

1. Scope

This privacy policy applies to all Shoal Labs offerings:

• Ultimate Scoreboard – web app at score.shoal-labs.de, apps for Android and Wear OS as well as iOS and watchOS,
• Ultimate Packing List – web app at packing.shoal-labs.de, apps for Android and iOS,
• Ultimate Jingle – web app at jingle.shoal-labs.de, apps for Android and iOS,
• Ultimate Link – apps for Android and iOS,
• Ultimate Rules – web app at rules.shoal-labs.de, apps for Android and iOS; the rules are also included in the Ultimate Scoreboard, Ultimate Jingle and Ultimate Link apps,
• the website shoal-labs.de, the imprint and this page.

2. Controller

No data protection officer has been appointed, as there is no legal obligation to do so.

3. Hosting and server log files

The websites and web apps are hosted by All-inkl.com, Hauptstraße 68, 02742 Friedersdorf, Germany. When a page is requested, the server processes the following data as technically necessary: IP address, date and time, requested file/URL, referrer URL, amount of data transferred, HTTP status code, and browser and operating system (user agent).

• Purpose: delivering the pages, stability and security (e.g. defending against attacks).
• Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in secure and functional operation.
• Recipient: the hosting provider as processor (Art. 28 GDPR). A data processing agreement has been concluded.

The connection is encrypted via TLS (HTTPS). The imprint, this privacy policy and the Ultimate Scoreboard and Ultimate Rules web apps load all their components (program code, fonts, icons) exclusively from our own server.

Content from Google servers

The start page shoal-labs.de loads fonts from Google Fonts. The Ultimate Packing List and Ultimate Jingle web apps load their rendering engine (CanvasKit) and, where needed, fallback fonts from Google servers (www.gstatic.com, fonts.gstatic.com). In doing so, your IP address is transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a transfer to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in fast and consistent rendering. More information: Google's privacy policy.

4. Storage on your device

For the apps to work, they store their data only locally on your device. This data is not transmitted to us or to third parties.

• Ultimate Scoreboard: scores, team colors, game start and end, game settings (surface, playing time, points, timeouts) and running timers. During a game, the Android app shows a locally generated notification with the score and game clock.
• Ultimate Packing List: your packing lists and settings.
• Ultimate Jingle: saved timers, settings and audio files you imported.
• Ultimate Link: your tab configuration (e.g. web addresses you added) and settings.
• Ultimate Rules: stores no data. The rules texts are included in the app and are not downloaded.

Data is stored in the private app storage (e.g. UserDefaults on iOS), and for the web apps in the browser's storage (localStorage or IndexedDB). A service worker may keep the program files in the browser cache so that a web app also starts offline.

Legal basis: § 25(2) no. 2 TDDDG (storage is strictly necessary to provide the function you requested) and, insofar as personal data is concerned, Art. 6(1)(b) or (f) GDPR.

Deletion: You can delete the data at any time by clearing the website data in your browser, or by uninstalling the app or clearing its data in the system settings.

Backups: If you have enabled device backups in your operating system (Android: Google backup; iOS: iCloud or computer backup), this local data may become part of your backup. Such backups are made by Google or Apple according to their privacy policies and your settings, not by us.

5. Scoreboard: UV index (location data, OpenUV)

The "UV index" feature shows the current UV index for your location and gives a sun protection hint at the end of a game.

Which data?

Your location (latitude and longitude) is determined by your device and sent together with your IP address directly from your device to the OpenUV service (openuv.io). OpenUV returns the UV index, the daily maximum and the ozone value. We ourselves do not receive or store your location; the app only keeps the most recently fetched UV value until it is closed. Instead of your location you can enter a postal code (see below).

When?

• when you tap "UV index" or "Current UV index" or choose "Refresh";
• automatically towards the end of a game (at most 10 minutes of playing time left, or a team at most 3 points from the end of the game), so that the hint is ready at the end of the game – only if you have already granted location access or saved a postal code. Until it succeeds, the lookup is repeated at most every 30 seconds.

Location permission

Your location is only used if you allow it. The Android and iOS apps ask for permission ("while using the app") on first launch; the web app only asks when you open the UV index. You can revoke the permission at any time in your device or browser settings; all other features remain usable. The location itself is determined by your operating system or browser (e.g. Google Play services, Apple Location Services) according to their terms and your settings there.

Postal code instead of location

In the web app at any time, and in the Android, iOS and watch apps if you have declined location access, you can enter a postal code and country instead. These are converted into coordinates: in the iOS and Apple Watch apps by Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), in the Android and web apps by the Nominatim service of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom; privacy policy). The postal code, country and your IP address are sent directly from your device to the respective provider; the EU Commission has issued an adequacy decision for the United Kingdom. The postal code, country and resulting coordinates are only stored locally on your device or in your browser, so you don't have to enter them again, and are used for the UV lookup at OpenUV. In the web app, "Use my location" deletes the saved postal code; in the apps it is removed when you clear the app data. The legal basis is Art. 6(1)(b) GDPR (providing the feature you requested).

6. External websites (Ultimate Link, Ultimate Rules)

Ultimate Link shows external websites in the app, e.g. ultiversum.com, scores.frisbeesportverband.de, dfv-turniere.de and addresses you add yourself. When they are opened, your device connects directly to these sites; among other things, your IP address and browser data are transmitted to their operators, and these sites may set their own cookies. The respective operators are responsible for this; their privacy policies apply. We do not receive any of this data.

Ultimate Rules shows the rules of the Deutscher Frisbeesport-Verband e. V. (DFV) from texts included in the app, without connecting to its servers. Only when you choose "Open original PDF" does the document open on frisbeesportverband.de in your browser; the above applies, and the DFV is responsible under its own privacy policy.

7. Download via app stores

The apps are distributed via the Google Play Store (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and the Apple App Store (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). When you download an app, these providers process data such as your account, device and payment information under their own responsibility. We have no influence on this and do not receive any personal data about you. Depending on your device settings, Google and Apple provide us with aggregated statistics and anonymized crash reports; the privacy policies of Google and Apple apply.

8. Contact by email

If you contact us by email, we process your details (email address, content) to answer your request (Art. 6(1)(b) or (f) GDPR). The data is deleted once the request has been dealt with and no statutory retention obligations apply.

9. No automated decision-making

There is no automated decision-making, including profiling (Art. 22 GDPR). Providing your data is neither required by law nor by contract; without location access, only the UV index is unavailable.

10. Your rights

You have the following rights towards us regarding your personal data:

• access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20);
• withdrawal of consent with effect for the future (Art. 7(3) GDPR);
• objection to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR);
• lodging a complaint with a data protection supervisory authority (Art. 77 GDPR), e.g. the authority responsible for us, the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

Since app data is stored only on your device, we can neither view nor delete it; you can do so yourself at any time (see section 4). For all requests, an email to the address above is sufficient.

11. Changes

We update this privacy policy when the apps or the legal situation change. The version published here applies.