Privacy Policy

1. The short version

• You never give us an email address or a phone number. Creating an account takes a username and a password and nothing else — no email sign-up, no real name, and no way for us to contact you unless you write to us first.
• We never store your password, only a one-way scrambled version of it that cannot be turned back into the original. See §13.
• Your account travels with you. Sign in with your username and password on a new phone and your score, streaks and achievements come with it. Because we hold no email address, we cannot reset your password for you — keep it somewhere safe.
• Signing out is not deleting. It makes that device forget your account; everything in the account stays, and signing back in returns it. See §12.
• We store the display name, username, country and avatar you choose, plus how you do in the game — scores, streaks and achievements.
• Your display name, username, country, avatar and total score are public on the global leaderboard.
• The app shows ads from Google AdMob, which collect device identifiers and approximate location the same way they do in other free apps.
• We use PostHog to see how the game is used, on servers in the United States. Those events are attached to a random account identifier, never to your username or display name. See §6.
• Reminders are opt-in. We send none unless you allow them, and you can switch them off in your device settings at any time. See §7.
• We do not sell your personal information.
• You can ask us to delete everything at https://guess-the-title.vercel.app/delete-data or by emailing maryamapps456@gmail.com.

2. Who this policy covers

This policy applies to the Guess the Title mobile app on Android, and to https://guess-the-title.vercel.app. It does not cover the advertisers whose ads you may see, or any other site or service we link to.

3. What we collect

4. What is public

The app has a global leaderboard visible to every player. Your display name, username, country, avatar and total score appear there once you have completed at least one game. Do not use a display name or username you would not want other players to see.

Everything else - your individual games, and streaks — is private to your profile.

5. Advertising

The app is free and funded by ads. You will see a banner on the game screen, and you can choose to watch a rewarded video to unlock a hint, add bonus points, or play another round once your 3 free games for the day are used up — as many further rounds as you care to watch an ad for. Watching is always your choice, and nothing in the game is sold.

Google AdMob serves these ads. To do that, Google collects your device’s advertising ID, IP address, approximate location derived from it, and data about how you interact with ads. Google may use this to show you personalised ads, and processes it as an independent controller under its own terms:

• Google’s Privacy Policy — https://policies.google.com/privacy
• How Google uses data from apps that use its services — https://policies.google.com/technologies/partner-sites

RevenueCat receives a record of each ad impression. RevenueCat identifies these records with its own randomly generated anonymous ID. We do not send it your username, display name, or our device identifier.

• RevenueCat’s Privacy Policy — https://www.revenuecat.com/privacy

Your choices. You can reset or delete your advertising ID, and opt out of personalised ads, in your device settings. Opting out means you will still see ads, but they will be less relevant.

6. Analytics

The app records in-app events — such as starting a round, using up your free games for the day, requesting a hint, unlocking an achievement, signing in or out, or an ad failing to load — to understand how the game is used. These events carry only coarse context: which category, which screen, etc. They never carry your display name, your username, your password, your device identifier, or the content of anything you typed.

We send these events to PostHog, our analytics provider, on servers in the United States. PostHog processes them on our behalf.

Events are attached to a random internal account identifier, not to your name or username, so that a series of events can be recognised as one player’s. Alongside them we store coarse progression facts — your country, chosen avatar, current and longest streak, total games and total score. PostHog also receives your IP address when the app contacts it, and derives an approximate (city or country level) location from it.

We do not record your screen. Session replay is switched off in the app.

Signing out, or a different account signing in on the same device, resets that identifier, so two people sharing a phone are not recorded as one player.

Deleting your account, as described in §12, ends this: we tell PostHog to stop associating this device with the deleted account.

• PostHog’s Privacy Policy — https://posthog.com/privacy

7. Notifications

The app can send you reminders. They are off until you allow them: after a completed round we ask once, and your device asks again with its own permission dialog. If you decline either, we send nothing.

If you allow them, you may receive:

• a daily reminder at around 8pm your local time, on days you have not played and have a streak to keep;
• a weekly suggestion to try the game, if you have the app installed but have not created a profile.

OneSignal delivers these on our behalf. When the app first opens, it registers your device with OneSignal, which creates a notification token for it — this happens whether or not you have a profile, because the reminder has to reach devices we hold no other record of. OneSignal also receives your approximate time zone (as an offset from UTC), whether you have a profile, and your current streak, so a reminder arrives in your evening rather than the middle of your night. If you have a profile, we also tell OneSignal the internal identifier of your account so the reminder reaches the right person. We never send it your display name or your username.

A reminder carries nothing about you beyond your streak, and the same text goes to everyone on the same streak that evening. It never contains anything you typed.

Turning them off. Switch notifications off for Guess the Title in your device settings — on Android, Settings → Apps → Guess the Title → Notifications. We check this every time you open the app, so sending stops without you telling us.

Deleting your account (§12) unlinks it from OneSignal and ends the daily reminder.

• OneSignal’s Privacy Policy — https://onesignal.com/privacy_policy

8. Where your data is stored

Our data is stored with Convex, our backend and database provider, on servers in the United States.

• Convex’s Privacy Policy — https://www.convex.dev/legal/privacy

Usage events are stored with PostHog, also on servers in the United States — see §6.

The notification token and tags described in §7 are held by OneSignal, on servers in the United States.

If you are in the European Economic Area, the United Kingdom, or another region with data transfer rules, this means your information is transferred outside your country. We rely on our providers’ standard contractual clauses and equivalent safeguards for those transfers.

Poster and cover images shown at the end of a round are loaded from third-party image hosts. Those hosts receive your IP address as part of serving the image, as with any image on the internet.

9. Why we are allowed to use your data

For players in the EEA and the UK, our legal bases under the GDPR are:

10. How long we keep it

Your profile, games, and achievements are kept for as long as your profile exists, so your streaks, stats and leaderboard position stay accurate. If you ask us to delete your data (§11), we remove it within 30 days.

On-device settings (§3.4) live on your device until you delete the app.

Ad and impression data held by Google and RevenueCat is retained under their own policies, linked in §5. Usage events sent to PostHog are retained under PostHog’s, linked in §6.

Deleting your account unlinks it from OneSignal, so the notification subscription left on your device is no longer attached to a profile. OneSignal keeps its own record of that subscription under its retention policy, linked in §7, until you turn notifications off or remove the app.

11. Your rights and how to use them

Whoever and wherever you are, you can ask us to:

• See what we hold about you;
• Correct it — you can change your display name, country and avatar in the app at any time, from Profile → Edit, and your password from Profile → Change password. Usernames are permanent once claimed;
• Delete it;
• Object to or restrict how we use it;
• Receive a copy in a portable format.

Depending on where you live you may also have the right to withdraw consent, to complain to your data protection authority, or — under laws such as the California Consumer Privacy Act — to know what is collected and to opt out of its sale. We do not sell personal information and we do not share it for cross-context behavioural advertising beyond the advertising described in §5.

To exercise any of these rights, go to https://guess-the-title.vercel.app/delete-data or email maryamapps456@gmail.com with your username so we can find your profile.

Your username tells us which account you mean, but it does not show the account is yours — it is printed on the public leaderboard (§4), so anyone who reads it could send it to us. Before we act on an emailed request we will therefore ask you to confirm details of the account that are not public. If we cannot establish that the account is yours, we will refuse the request and tell you why. That is not us being difficult, it is what stops someone else using your username against you.

There is no password reset. We hold no email address, so there is nowhere to send one. If you have lost your password you cannot sign in and cannot use the self-service form at https://guess-the-title.vercel.app/delete-data; email us instead, as described above and in §12.

We respond within 30 days, counted from the point we have confirmed who you are. We will not charge you or make the app worse for asking.

12. Deleting your data

Signing out is not deleting. Logging out on a device only makes that device forget your account. Your profile, score, streaks, achievements and leaderboard entry stay exactly as they are, and signing back in with your username and password returns them. If you are handing a phone to someone else, signing out is what you want. Deleting is permanent, and it is what the rest of this section is about.

You have three options:

1. Delete it yourself — visit https://guess-the-title.vercel.app/delete-data and enter your username and password. This deletes your profile, your game history, your achievements and your leaderboard entry straight away, and cannot be undone. Your password is what proves the account is yours, which is why the page asks for it.
2. Ask us to delete it, if you have lost your password — there is no password reset, so this is the only route left. Email maryamapps456@gmail.com with your username. We will not act on a username by itself: it is public (§4), so on its own it proves nothing. We will reply asking you to confirm details of the account that are not public, and we delete everything within 30 days of your answer. If the questions go unanswered, or the answers do not match the account, we leave it alone.
3. Delete from the app — you can delete your account from the profile screen in the app as well.

Whichever route you take, the reminders described in §7 stop, and the app unlinks your device from OneSignal. If you would also like your device removed from OneSignal entirely, turn notifications off in your device settings or email maryamapps456@gmail.com.

13. Security

Data travels between the app and our servers over encrypted connections (HTTPS/TLS), and is encrypted at rest by our hosting provider.

Your password is never stored. When you choose one, we put it through a one-way function and keep only the result. That result cannot be turned back into your password, and it never leaves our servers, we do not send it to your device and we do not share it with anyone.

Sign-in attempts are limited. After 8 consecutive failures against a username we refuse further attempts on it for 15 minutes (§3.3), so a username read off the leaderboard cannot be run against a password list at speed.

No system is perfectly secure, but we limit the damage by not collecting much in the first place: there is no email address and no payment detail in our database, and a stolen copy of it would contain no readable passwords.

Even so, please choose a password you do not use anywhere else.

14. Third parties we use

Your password is never shared with any of them. It never leaves our servers, in any form — see §13.

We do not sell or rent your information, and we do not share it with anyone beyond the providers above, except where we must to comply with the law, to enforce our terms, or to protect someone’s rights or safety.

15. Children

Guess the Title is not directed to children under 13 (or under the equivalent minimum age in your country), and we do not knowingly collect information from them. The app shows advertising and has a public leaderboard, neither of which is designed for children.

If you believe a child has created a profile, email maryamapps456@gmail.com and we will delete it.

16. Changes to this policy

We will update this page when the app changes, and we will move the “last updated” date at the top. For material changes — new categories of data, a new provider, or a new purpose — we will give notice in the app before the change takes effect.

17. Contact

If you are in the EEA or UK and are not satisfied with our response, you may lodge a complaint with your local data protection authority.