As of 26 October 2026
Principle
Your progress stays on your device. The game shows no ads, uses no trackers and shares nothing with third parties. There are no in-game purchases and no account to create. What it sends to our game server is described below: the canton contest and anonymous gameplay statistics, both without a name and without an account, and, only when you press the button, the ghost run.
App Store (iPhone and iPad)
The app runs on the device; no account is needed. The personal leaderboard runs via Apple’s Game Center, only if you are signed in there. The number of shadows per run, level and character is reported, and the abbreviation of your home canton is used for the canton leaderboard. Apple’s privacy policy applies to Game Center. For the canton contest, at the end of each run the game sends to the MASS-VOLL! game server: a random device identifier (no name, no advertising ID; it changes as soon as you delete the app data), your home canton, the number of shadows, the duration and the game mode. The server adds up the shadows per canton and stores per month only the canton, the shadows and a shortened, salted hash of the identifier; it deletes monthly rankings after 13 months, the overall ranking holds only sums and hashes. Without a network the result waits on the device (seven days at most) and is sent once the connection is back. For operations it briefly logs the IP address.
Google Play (Android)
The app runs on the device; no account is needed. On Android there is no personal leaderboard. For the canton contest, at the end of each run the game sends to the MASS-VOLL! game server: a random device identifier (no name, no advertising ID; it changes as soon as you delete the app data), your home canton, the number of shadows, the duration and the game mode. The server adds up the shadows per canton and stores per month only the canton, the shadows and a shortened, salted hash of the identifier; it deletes monthly rankings after 13 months, the overall ranking holds only sums and hashes. Without a network the result waits on the device (seven days at most) and is sent once the connection is back. For operations it briefly logs the IP address.
Steam
The personal leaderboard runs via Valve’s Steam, only if you are signed in there. The same details as for Game Center are reported. Valve’s privacy policy applies to Steam. As in the app, the canton contest runs via the MASS-VOLL! game server (random device identifier, home canton, number of shadows, duration, game mode).
Gameplay statistics
To see how long runs last and whether the game holds up, at the end of each run the game sends to the MASS-VOLL! game server: duration, outcome (win, defeat, quit), level, location, character, chosen cards, time of the first evolution, game mode, platform, language, home canton, number of your runs so far, game version, input type (touch or computer), a direction variant chosen via link, if any, and the random device identifier from the canton contest (no name, no advertising ID). The server keeps only a shortened, salted hash of the identifier; without a network the report waits on the device and is sent later and deletes the data after 180 days. Can be switched off in the settings under “Gameplay statistics”.
Ghost run
Only if you press “Share as a ghost” at the end of a run does the game send to the MASS-VOLL! game server: the path of that run (position twice per second and number of shadows), the run’s seed, the run settings, time, shadows, character, level, whether you won, and the display name (“Confederate from” followed by your canton; in the web version with an account, your player name). The server keeps the ghost for 60 days under a five-character code and then deletes it. Anyone who knows the code can race the ghost and sees the display name, time and shadows, so share the code only with people you want to have it. The device identifier is sent only to limit submissions and is not stored in the ghost.
Service providers and transfers abroad
Connections to the game server and to this website pass through Cloudflare (USA; data processing agreement and Data Privacy Framework), which briefly processes IP addresses and filters attacks. The game server is located in Switzerland and keeps a technical access log (IP address, time, path) against abuse, overwritten on a rolling basis (at most about 250 MB) and not analysed. The newsletter on this website runs through Mailchimp (USA; data processing agreement and Data Privacy Framework) with a confirmation email; you can unsubscribe in every email. With a newsletter or membership sign-up we also store where it came from: which game and which page. We pass on nothing else.
Stored on your device
Progress, settings, language and home canton live in the local storage of your browser or the app. You delete them by clearing the site data or removing the app. The transfer code for your progress contains only this game data.
Your rights
You can request access, correction or deletion: sekretariat@massvoll.swiss. The Swiss Federal Act on Data Protection (FADP) applies. The general privacy policy of MASS-VOLL! is at massvoll.swiss/datenschutz. For players in the EU the GDPR applies in addition: the legal basis is our legitimate interest in operating and improving the game (Art. 6(1)(f)); you may lodge a complaint with a data protection supervisory authority.
Legal notice
MASS-VOLL!, political party and civil rights movement, non-profit association under Art. 60 ff. of the Swiss Civil Code, based in Zurich · P.O. Box 255, 8021 Zurich · UID CHE-158.803.175 · President: Nicolas A. Rimoldi