Privacy Policy
In short: you don't need an account to play. We show no ads, we don't track you across apps and we don't sell data. The name and photo you use in the game are visible only to people in your room. On the server they are kept in memory only and deleted automatically. We collect anonymous statistics to learn what to improve.
1. Data controller
The controller of personal data processed in the Guess Us app (the “App”) is {{OWNER_NAME}}, {{OWNER_ADDRESS}} (“we”). Contact for all data matters: {{CONTACT_EMAIL}}.
2. What data we process and why
2.1. Name in the game
The name or nickname you enter is shown to other players in your room. On the server it exists
only in memory while the room exists and is deleted when the room closes. The App remembers it
on your device so you don't have to type it again.
Legal basis: Art. 6(1)(b) GDPR (providing the game).
2.2. Profile photo (optional)
You can add a photo from your camera or gallery, or pick a ready-made avatar. The photo is
cropped and resized on your device and then sent to the server so players in your room can see it.
On the server it is stored in memory only, never written to disk or a database,
and deleted automatically within 24 hours at the latest (sooner if the server
restarts). We don't use photos for facial recognition, don't analyse biometric features and
don't share them with anyone. You can remove your photo in the App at any time.
Legal basis: Art. 6(1)(b) GDPR; adding a photo is voluntary.
2.3. Gameplay
Answers, votes, scores and room settings are needed to run the game. They exist only in server
memory and disappear when the room closes.
Legal basis: Art. 6(1)(b) GDPR.
2.4. Anonymous statistics and diagnostics
To learn which modes and categories people enjoy and to detect errors, we record events such
as: game started and ended, chosen mode and categories, number of rounds and players, leaving
a game, server errors. Events include a random installation identifier (generated
by the App, not linked to your name, account, device serial number or advertising ID), the
operating system (iOS/Android), App version and language. We do not record
names, photos, answers or IP addresses. Statistics are kept for up to 24 months.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in developing and keeping the
App stable). You can object by writing to us. Uninstalling the App erases the installation
identifier from your device.
2.5. Technical connection data
To connect to the game server, your device transmits its IP address. We use it in real time to
handle the connection and protect against abuse (e.g. photo upload limits). The IP address may
briefly remain in our hosting provider's technical logs.
Legal basis: Art. 6(1)(f) GDPR (service security).
2.6. Purchases and subscriptions
Payments are handled exclusively by Apple (App Store) and Google (Google Play). We never see
your card or payment account details. To confirm your access to premium content we use
RevenueCat, which receives a random App user identifier and purchase information (product,
date, validity) from Apple or Google.
Legal basis: Art. 6(1)(b) GDPR; accounting obligations — Art. 6(1)(c) GDPR.
2.7. Account (optional)
If you create an account (e.g. via “Sign in with Apple” or Google), we process your email address
(with Apple this may be a private relay address) and account identifier to transfer your
purchases between devices. You can delete your account in the App
(how to delete data).
Legal basis: Art. 6(1)(b) GDPR.
2.8. Contacting us
When you write to us, we process your email address and message to reply, for as long as
needed to resolve the matter and then until any claims become time-barred.
Legal basis: Art. 6(1)(f) GDPR.
2.9. Permissions and data on your device
- Camera and photos — only when you choose a profile photo.
- Motion sensor — for the card tilt effect; the data never leaves your device.
- The App stores on your device: your name, chosen avatar or photo, language, settings and installation identifier. Uninstalling the App removes this data.
3. Who we share data with
We use providers that process data on our behalf under data processing agreements:
| Provider | Role | Location |
|---|---|---|
| Railway Corporation | game server | EU servers (Amsterdam) |
| Supabase Inc. | content and statistics database | EU servers (Frankfurt) |
| Cloudflare Inc. | this website | global network |
| RevenueCat Inc. | subscription management | USA |
Apple and Google process data related to downloading the App and payments as independent controllers under their own privacy policies. Data may also be disclosed to public authorities where required by law.
4. Transfers outside the EEA
Some providers are US companies. Transfers are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (where the provider is certified) or on standard contractual clauses approved by the European Commission.
5. How long we keep data
| Data | Period |
|---|---|
| Name, gameplay | until the room closes |
| Profile photo on the server | 24 hours at most |
| Anonymous statistics | up to 24 months |
| Account | until deleted |
| Correspondence | until resolved and claims are time-barred |
6. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. Write to us at {{CONTACT_EMAIL}}; we will reply within one month. You may also lodge a complaint with a supervisory authority — in Poland the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority in your country of residence.
7. Children
The App is not intended for children under 13 and we do not knowingly collect their data. If you believe a child has provided us with data, contact us and we will delete it.
8. Security
Connections to the server are encrypted (HTTPS/TLS). Photos are never stored on persistent media. Only people developing the App have access to the statistics database.
9. What we don't do
- We don't show ads or use the advertising identifier.
- We don't track you across other companies' apps and websites.
- We don't sell data.
- We don't make automated decisions about you or profile you.
10. Changes
If we change this policy, we'll publish the new version on this page and update the date above. We'll also inform you about significant changes in the App.