Who is responsible
The data controller is AX Software, Medellín, Colombia (axsoftware.codes). For any privacy matter, email andres.sanabria@axsoftware.codes.
Summary
- We don't show ads.
- We don't sell or rent your data.
- We don't use third-party analytics or tracking tools.
- We only process what's needed for you to play, keep your progress and buy chips.
Data we process
- Account identifier: when you open the game, an anonymous account is created with Firebase Authentication, which generates a unique identifier. We don't ask for your name, email or phone number to play as a guest.
- Game profile: your nickname, avatar settings (color and visor), stats (games played, wins, detection rate), level, experience (XP), chips and unlocked items.
- Google account (optional): if you choose to link or sign in with Google, we receive your Google name and email address to identify your account and keep your progress across devices.
- Purchases: if you buy chips on Google Play, we store the purchase record (purchase token, product ID, date and status) to verify it and credit your chips. We never receive or store payment details such as card numbers: payments are processed by Google Play.
- Match data: short clues, votes, guesses and room state while you play. This data is deleted together with the room within 12 hours at most.
- Voice notes (optional): if you tap the microphone in a room, we record an audio clip of up to 12 seconds and send it to the other players in that room. Only they can hear it, we don't use it for anything else, and it is deleted together with the room (12 hours at most). The game only asks for microphone permission when you tap it.
- Matches with AI: if the host adds AI players, that match's data (word or category, clues and nicknames) is processed with Google Vertex AI to generate the AI's moves.
- Reports: if you report a player (or someone reports you), we keep the report with the identifiers involved, the reason and the context needed to review it.
- Technical data: like any online service, Google Firebase infrastructure processes technical data such as IP address and device or browser type in order to deliver the service, protect it from abuse (for example with Firebase App Check) and keep it secure.
- On your device: we store your preferences (language, sound, graphics quality) and your sign-in session locally. We don't use advertising cookies.
How we use it
- To create and maintain your account and game profile.
- To run real-time matches: rooms, turns, clues, votes and results.
- To save your progress, level, chips and items, and sync them if you link Google.
- To verify Google Play purchases and credit chips.
- To moderate the game: filter offensive nicknames, review reports and prevent cheating, fraud and abuse.
- To comply with legal obligations.
We process this data to provide the service you request by using the game, based on your consent (for example, when you link Google) and on our legitimate interest in keeping the game safe, in accordance with Colombian Law 1581 of 2012 and, where applicable, laws such as the GDPR.
Who we share it with
Only with the providers we need to run the game, acting as data processors:
- Google Firebase (Authentication, Firestore, Realtime Database, Cloud Functions, Hosting and App Check), with servers in the United States (us-central1 region).
- Google Play, to process and verify in-app purchases.
- Google Vertex AI (Gemini), only if the host adds AI players to a room: to let the AI play we send the round's word or category, the clues and the nicknames of that match. We never send your email, your account ID or purchase data, and Google does not use this data to train its models.
Other players in a room see your nickname, avatar, level, clues and votes during the match. We don't share your data with advertisers, data brokers or other companies, and we don't sell it.
International transfers
Your data is stored on Google servers in the United States. By using the game you agree to this transfer, which is covered by the contractual safeguards offered by Google Cloud.
How long we keep it
- Match data (clues, votes, voice notes, room): deleted with the room within 12 hours at most.
- Account and profile: for as long as your account exists. If you delete it, it is erased within 30 days at most.
- Purchase records: for as long as your account exists, unless a law requires us to keep a minimal record for longer (for example, for accounting or fraud prevention).
- Reports: as long as needed to review them and prevent abuse.
Minimum age
The game is intended for people aged 13 and over. We don't knowingly collect data from children under 13. If you believe a child under 13 has given us data, contact us and we'll delete it.
Your rights
You can access, update, correct and delete your data, and withdraw your consent. You can change your nickname and avatar in the game at any time. For any other request, email andres.sanabria@axsoftware.codes; we reply within 15 business days at most. You may also lodge a complaint with your local data protection authority (in Colombia, the Superintendencia de Industria y Comercio).
Deleting your account
- In the game: Settings → Delete my account. Your profile, level, chips and purchased items are deleted.
- By email: write to andres.sanabria@axsoftware.codes from your Google account's email address or including your nickname.
Your account and data are erased within 30 days at most. More details on Delete account.
Security
We use encrypted connections (HTTPS), database access rules so each player can only read and change what belongs to them, and server-side purchase verification.
Changes to this policy
If we change this policy, we'll publish the new version on this page with its effective date and, if the change is significant, we'll let you know in the game.
Contact
AX Software · Medellín, Colombia · andres.sanabria@axsoftware.codes