Sven Carsten Nickel (ÆquiNode Studio)
Nedlitzer Str. 7, 14612 Falkensee, Germany
Email: sven.nickel@gmail.com
Blindfold Lab shows no ads and sets no cookies. Without an account, everything you configure and practise stays on your device. An account is optional: it needs only your email address and backs up your own image lists and routes as well as history and learning progress in the cloud. Anonymous usage statistics are only sent if you turn them on in the settings.
When you open the web app, Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) processes technically necessary data as a service provider: IP address, time, requested address and browser identifier, and delivers the app. No access logs are kept for analysis.
The legal basis is Art. 6(1)(f) GDPR: without this processing the page cannot be delivered or protected against attacks. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer to the USA relies on the European Commission's adequacy decision (Art. 45 GDPR). According to Cloudflare, such data is kept only briefly.
You get the apps for Android and iOS from Google Play or the App Store; Google or Apple process data for this under their own privacy policies. The app ships its content itself and does not load it from our servers. It only connects to a server for the optional account (section 5) and when you open help, privacy or legal notice – these pages open in your browser.
Settings, mnemonics, training progress and results are stored by the web app in your browser's local storage (localStorage) and by the app in its own storage on your device. Without an account they never leave your device. You can delete them at any time via your browser's site data, or by clearing the app's data or uninstalling it. If you have turned on Google device backup on Android, Android may include this app data in your own backup.
If you sign in, we process your email address to send you a sign-in code and to run your account. Stored with the account are your own image lists and routes, and a backup of history, learning progress and settings. Only you can access them.
Community (optional): If you choose a pseudonym under “Challenge” → “Community”, we store it with your account and from then on report your blind, multiblind and challenge results: pseudonym, solved or not, number of cubes, times, how you solved (smart cube, letters, virtual) and the scrambles – never your moves and never your email address. All users of the app can see this (daily list, “Others are solving”) as long as “Visible in lists” is on. The legal basis is your consent (Art. 6(1)(a) GDPR). You can turn visibility off there at any time; “Delete account” removes your pseudonym and results.
The service provider is Supabase, Inc. (970 Toa Payoh North #07-04, Singapore 318992) as processor; the data is stored in a data centre in Frankfurt am Main (AWS eu-central-1). The legal basis is Art. 6(1)(b) GDPR (providing the account you asked for). Any access from third countries is covered by the European Commission's standard contractual clauses. Your data is kept until you delete it or your account. You delete your account in the app under “Account” → “Delete account”; this removes image lists, routes, the backup, your pseudonym and your reported results. If you use the same sign-in for another of our apps, only the sign-in itself remains. Alternatively, write to sven.nickel@gmail.com.
If you connect a smart cube, this happens via Bluetooth directly between your device and the cube (in the browser via Web Bluetooth, in the app via the system's Bluetooth); moves and battery level are evaluated on your device only. To find cubes nearby the app scans for Bluetooth devices and lists only those whose name indicates a smart cube; it remembers the identifier (MAC address) of the cube you pick on your device, as it is needed to decrypt the cube's data. Android up to version 11 requires the location permission for Bluetooth scanning; the app does not determine your location with it. The clipboard is accessed only when you explicitly copy or paste.
If you turn on “Send anonymous statistics” in the settings, the app sends, in batches, which areas you open, which lessons you complete, type and result of blind solves and flashcard rounds (without content such as words, routes, memos or scrambles), plus times, app version, platform, device model and language. This is linked to a random identifier created only on your device – not to your account. It is stored with Supabase (Frankfurt, see section 5) and deleted after 14 months. The legal basis is your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time in the settings, and the app then also discards the random identifier.
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Contact sven.nickel@gmail.com. You may also lodge a complaint with a data protection supervisory authority, for example the Brandenburg Commissioner for Data Protection and Access to Information.