1. Controller and contact
Patrick Irmler, sole trader trading as DEEPBURG Digital Science
Bessemerstraße 51, 12103 Berlin, Germany
Email: mail@deepburg.com
Telephone: +49 30 23327288
No data protection officer is currently appointed.
2. Processing on your device
The app generates random numbers and fair selections. Number ranges, lists, results and up to 30 history entries are processed locally. Their contents are not sent to DEEPBURG or ANU. The app has no advertising, analytics SDKs, DEEPBURG user accounts or tracking.
Inputs and history remain in memory and Android's temporary state for the current session. Android may retain that state across rotation, backgrounding or restoration of the same task. The app does not create a persistent history database. You can delete history inside the app; the currently displayed result and input fields remain. Finishing the task permanently or clearing app data removes session state.
The appearance setting and your decision about optional ANU access are retained in app-private storage. A provided API key is encrypted with AES-GCM; its encryption key is managed through Android Keystore. Android backup is disabled for this app, and the key file is additionally excluded from backup and device transfer. Android and the app store are responsible for their own processing.
Where local inputs contain personal data, processing provides the functions you request under Article 6(1)(b) GDPR. Settings and the API key are retained until you remove them, clear app data or uninstall the app. Local random generation does not require an internet connection.
3. Optional ANU quantum source
Quantum Mix is off by default, including after updating an older installation. The app accesses the Australian National University (ANU), Canberra, Australia, only after you enter your own API key and explicitly enable the explained connection. Enabling confirms that you are at least 16 years old. Do not enable ANU access if you are under 16. The app does not collect your date of birth or verify your age against an identity document. Local random generation remains available without this service or transmission to ANU.
Synchronization connects only to api.quantumnumbers.anu.edu.au using HTTPS. ANU receives your API key, IP address, request time and necessary HTTPS request data, including the requested quantity and format of random bytes. Number ranges, lists and results are not included. Downloaded quantum entropy is mixed into Android SecureRandom. The app does not claim that each displayed value comes exclusively from quantum hardware.
When enabled, requests occur on saving your settings, on manual synchronization or when drawing without current quantum entropy. Existing entropy is reused for up to 24 hours; repeated attempts are rate limited. The app does not run a background synchronization service. Local generation remains available if a request fails.
Enabling uses consent under Article 6(1)(a) GDPR. To the extent the transmission to Australia is subject to third-country transfer rules, it relies on explicit informed consent under Article 49(1)(a) GDPR. Australia has no general EU adequacy decision. This app does not promise standard contractual clauses or other guarantees for this direct connection. Data protection rights and legal remedies may be more limited, and foreign authorities may access the data. Enable this service only if you want this optional transfer.
Withdraw consent at any time by disabling the ANU connection or selecting “Delete key” in settings. The app will then start no further ANU requests; an already started request may finish. Withdrawal does not affect earlier lawful processing or automatically delete data previously received by ANU. ANU independently operates the service and determines its server locations, additional recipients and log retention. The app has no access to those logs and cannot specify their retention period.
ANU privacy information: https://www.anu.edu.au/privacy
ANU privacy contact: privacy@anu.edu.au
4. Copying, sharing and links
Copying sends your result to the Android clipboard; Android controls its retention and access. Sharing a result or history sends selected data to the app you choose only after your selection. That app applies its own policies. Check lists containing names before sharing.
Website links open your browser or another external app. The chosen website then receives connection data under its own policies. Email and telephone contact take place outside this app. DEEPBURG processes contact details and messages to respond to your enquiry under Article 6(1)(b) or (f) GDPR (legitimate interest: answering enquiries). Further retention and website processing details: www.deepburg.com/datenschutz
5. Your rights
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and data portability under Articles 15–20 GDPR. You may object to processing based on legitimate interests under Article 21 GDPR and withdraw consent for future processing. DEEPBURG does not receive your local lists or results and cannot remotely access or erase them. Use the app or Android app settings to manage those contents.
You may complain to a data protection supervisory authority, particularly in your country of residence or to the Berlin Commissioner for Data Protection and Freedom of Information: https://www.datenschutz-berlin.de/
The app does not perform profiling or make decisions with legal or similarly significant effects. Random selections are functions you explicitly trigger.
These app-specific notices are fully available offline. General DEEPBURG privacy information supplements them: www.deepburg.com/datenschutz
6. Public privacy page and hosting
The public version of these app-specific notices is available at https://quantum-random-privacy.deepburg.chatgpt.site/. The app opens it only when you select the online link; reading the built-in notices does not require that request.
This information page is hosted through OpenAI Sites. When you visit it, hosting and infrastructure providers process necessary connection data, including IP address, request time and resource, and browser and operating system information, to deliver the page, maintain security and troubleshoot errors. The legal basis for the hosting we arrange is Article 6(1)(f) GDPR; our legitimate interest is publicly accessible and secure privacy information. We include no analytics or advertising scripts, contact form, user account or embedded third-party content. We maintain no separate visitor or history database for this page.
OpenAI lists hosting, infrastructure, security and support providers for ChatGPT Sites, including Cloudflare. Depending on the provider and location, processing may also take place outside the EU. Actual providers and the privacy and transfer arrangements applicable to OpenAI govern this processing. We do not promise exclusively EU processing or a fixed log deletion period verified by us. See https://openai.com/policies/privacy-policy/ and https://openai.com/policies/sub-processor-list/. Visits to the general DEEPBURG website are described at www.deepburg.com/datenschutz.