Privacy Policy

The core game needs no account and no internet connection. All game content is bundled in the app. Your rounds, the cards you have found, your statistics and your preferences are stored only on your device and are never sent to us.

You > Settings > Privacy and data > Delete my data removes them from your device (so does deleting the app).

Some online features (the daily ranked challenge, the leaderboard and buying GuessPal+) need an account. The first time you use one, the app creates it silently through Firebase Authentication (a Google service) as an anonymous account: there is no sign-up form and no email or password.

To keep a leaderboard profile on your own terms you can additionally link Sign in with Apple. We do not ask Apple for your email address or your name. What we hold is a random account identifier and, if you link Apple, the identifier Apple gives our app for you.

You can sign out or delete the account at any time (see “Your rights and choices”). Without an account the offline game works exactly the same.

When you take part in the daily ranked challenge our server stores:

• the nickname and avatar you choose and your leaderboard visibility setting;
• your ranked attempts: the day, the content region, the questions you asked, your guesses and your score (scores are calculated only by our server);
• the language of your app and the region group you compete in for the week.

Your nickname, avatar, score and rank are visible to other players on the leaderboard. Visibility is on by default; turn off Show me on the leaderboard in You > Settings > Account and your row disappears from the lists while you still see your own result. Please do not put personal information in a nickname.

Other players can report a nickname. Our team can look at the account concerned (nickname, attempts, subscription status) to moderate it, to keep the leaderboard fair and to give you support, and may change a nickname or void an attempt that breaks the rules.

When the app talks to our server it sends your app version, build number, platform (iOS) and language, and our server records the time of your last visit. Like any internet service, our servers and hosting infrastructure also see your IP address and the request itself; they appear in short-lived technical logs that we use to run the service, prevent abuse (for example by limiting request rates) and fix errors. Logs do not contain sign-in tokens or keys.

Reminders (card of the day, unfinished round, new round invitation) are local notifications scheduled on your device. They send nothing to our server, and you control them in You > Settings > Notifications and in iOS Settings.

The weekly result is a push notification. If you allow notifications and have an account, the app registers your device’s push token (with the platform) on our server and, through Apple’s notification service and Google’s Firebase Cloud Messaging, we send you your weekly leaderboard result in your language after the week closes. The token is removed when you sign out or delete your account, or when it stops working. Refusing the permission or switching it off in iOS Settings only stops the notifications.

GuessPal+ is an auto-renewing subscription sold by Apple. Apple takes the payment and we never see your card or payment details. To unlock the features and keep them correct, our server records the subscription status that Apple signs and sends to the app and to us: transaction identifiers, product, environment, purchase and expiry dates, renewal and refund status, and a random purchase-account token that links the purchase to your GuessPal account. Whether you have GuessPal+ is decided only by this server record.

We forward Apple’s subscription notifications to RevenueCat, which receives these purchase events for reporting (it does not decide access). When you delete your account we also ask RevenueCat to delete the related customer record. We keep the subscription records themselves, with the link to your account removed, for the accounting and tax periods the law requires.

Usage analytics are off by default. Only if you switch on You > Settings > Privacy and data > Usage analytics, the app sends anonymous events through Firebase Analytics (Google) to help us improve the game. You can switch it off again at any time, and collection stops.

Events describe how the app is used: which screens are opened; the category, mode and scene chosen; how many questions were asked, whether a guess was right and how a round ended and scored; which setting was changed; whether the paywall was opened and the store outcome of a purchase or restore (never the price paid); and, for the leaderboard, the period, region and your rank. They also carry your app language, content version and standard technical details such as app version, operating system, device model and approximate region. Firebase gives the installation a random app-instance identifier. We never attach your nickname, account identifier, contact details or any search text to analytics events.

We do not use the advertising identifier (IDFA), we do not show the App Tracking Transparency prompt, and nothing is used for advertising or sold.

We share data only with providers that help us run GuessPal, and only what they need:

• Google (Firebase): Authentication for accounts, Cloud Messaging for the weekly push notification, and Analytics if you agreed to it.
• Apple: Sign in with Apple, the App Store (payments, subscriptions) and the push notification service.
• RevenueCat: receives subscription events for reporting.
• Our hosting provider: runs the servers and database that hold the data described above.

These providers act on our instructions as processors, or as independent controllers for their own services such as Apple’s. Some of them process data outside your country, including in the United States; where required, this relies on safeguards such as standard contractual clauses or an adequacy decision. We do not sell your data and we do not share it for advertising. We disclose data to authorities only when the law requires it, and only what is required.

• To provide the features you use (account, ranked challenge, leaderboard, subscription): performance of our agreement with you.
• Usage analytics and push notifications: your consent, which you can withdraw at any time.
• Security, preventing abuse, moderation and keeping the leaderboard fair: our legitimate interest.
• Accounting and tax records: legal obligation.

• Account, nickname, ranked history and leaderboard rows: until you delete your account.
• Push token: until you sign out, delete the account, or the token stops working.
• Subscription and transaction records: while the subscription is relevant and for the legally required accounting and tax periods; after you delete your account they no longer point to you.
• Technical logs: a short time, only as long as needed for security and troubleshooting.
• Analytics events: for the retention period set in our Firebase project, never longer than 14 months.
• Data that stays on your device: until you delete it or the app.

Delete your account in the app: You > Settings > Account > Delete account. This immediately deletes your account and sign-in (including the Firebase user), your nickname and avatar, your ranked history, your leaderboard rows and your push tokens. Progress stored on your device stays until you delete it (Privacy and data > Delete my data). An active subscription is not cancelled by this: cancel it in your Apple Account settings (see our support page).

Depending on where you live you can also ask us for access to your data, to correct it (you can change your nickname and avatar in the app yourself), to delete or restrict it, to receive it in a portable form, or to object to processing, and you can withdraw consent (analytics, notifications) at any time. If you cannot open the app, write to [email protected] and tell us your nickname; we will answer within the time the law sets. You may also complain to your data protection authority.

The site uses no advertising, tracking or visitor analytics, and loads its fonts and images from our own server. When you pick a language yourself, that choice is remembered in your browser (local storage plus one small functional cookie, guesspal_lang, valid for one year) so that the site opens in your language next time; your light/dark theme choice stays in your browser only. As with any web server, your IP address and the page you request are processed to deliver the page and keep it secure.

GuessPal is a general-audience game. Online features and purchases follow the age and family settings of your Apple Account. We do not knowingly collect personal data from children beyond what is described here; if you believe a child has given us more, contact us and we will delete it.

If we change this policy we publish the new version on this page with its effective date. If a change affects how we use data in a way that needs your consent, we will ask again in the app.

Questions and data requests: [email protected]. More help is on the support page, and the rules of use are in the Terms of Use.