Privacy Policy

1. Who we are

Guesser Space is made by Marek Dieška, an individual developer based in Slovakia, who publishes under the name Apakhian Games. “Apakhian Games” is a publishing name, not a registered company. In this policy “we”, “us” and “our” mean Marek Dieška, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

You can reach us at mdieska1@gmail.com about anything in this policy.

This policy covers the Guesser Space app for Android and this website, www.guesserspace.online.

2. Your account and Google sign-in

Before you sign in. The first time you open the app, Firebase Authentication (a Google service) creates an anonymous account: a random user ID with no name or email attached. It lets you play your first game straight away.

Signing in with Google. To keep playing after your first game, and to buy Pro or start a trial, you sign in with a Google account. On Android this uses Google’s own sign-in sheet. The app asks Google only for basic sign-in information:

• your Google account ID,
• your email address,
• your name,
• your profile picture.

Firebase Authentication keeps these in your sign-in record so you can sign in again and restore your progress on another phone. The app shows your email address to you in the account panel so you know which account you’re using. It never shows your Google name, email address or profile picture to other players, and we don’t use them for advertising, sell them or share them with anyone. We don’t ask for access to your contacts, calendar, photos, Google Drive or anything else in your Google account.

When you sign in, the progress you made without an account moves to your Google account. If the Google account you pick already has a Guesser Space profile, the app asks before switching to it. You can switch to another Google account at any time; each account keeps its own progress.

3. What other players can see

Guesser Space has leaderboards, friends and a co-op mode, so some of your data is visible to other signed-in players.

What	Who can see it	How to change it
Player name, profile picture (a creature), flag or flare, banner color and bio	Any signed-in player who opens your profile, a leaderboard or a friends list	Edit or clear them in Profile Settings
Level, daily streak, games played and leaderboard scores	Any signed-in player who opens your profile or a leaderboard	Turn off Show my stats to others: they are hidden and leaderboards list you as “Hidden player”
Whether you’re online, away or offline	Signed-in players, for example a friend viewing your profile	Turn off Show my online status: you always appear offline
Your Rendezvous record against a player	That player, if you’re friends	Remove the friend
Streak cards, creatures and reactions you share	The friend you send them to	Only share with people you choose

Notifications about a friend’s activity, such as “… beat your Flag Blitz score”, include that friend’s player name.

4. What we store and why

4.1 On your phone only

Some data never leaves your device:

• settings such as dark mode, vibration, daily reminders and the order of the sections on Home,
• the state of puzzles you’re in the middle of, your daily results and your local statistics,
• the hours at which you opened the app the last seven times, so reminders can arrive when you usually play,
• your answers to the first-launch questions (for example which topics you like),
• whether certain messages, like subscription notices or What’s new, have already been shown,
• a cached copy of your profile and progress, so the app starts quickly (the cloud copy in section 4.2 is the one that counts),
• if you’re not signed in, a random identifier used only to keep your referral code consistent.

This data is deleted when you uninstall the app or clear its data.

4.2 In the cloud, with Google Firebase

We use Cloud Firestore (Google LLC) to keep your player record and everything social. It contains:

• your Firebase user ID and your unique player name,
• your profile: bio, profile picture, flag or flare, banner color, and your two privacy switches,
• XP and level, your daily streak and the date of your last win, achievement progress, and your best scores in the leaderboard games,
• for each daily game, the days it was rewarded together with your time-zone offset on that day, so a win counts for the right calendar day,
• your average completion time for each daily game, which is how the app judges whether a game went faster than usual when it calculates Intergalactic Cash; once a day the server also works out, across all players, how long each game typically takes,
• your Intergalactic Cash balance, Streak Freezes, the items you bought (banner colors, skins, boosters), the creatures you own and your daily Shop offer,
• your friends, friend requests and blocked players,
• the streaks and creatures you share or receive, and reactions to them,
• co-pilot invites and pairings, and for each Rendezvous day the categories picked, the number of mistakes in each round and who won,
• notices about activity involving you, for example a friend beating your score, a drop in your leaderboard position or someone using your referral code,
• the device tokens used to send you push notifications, and whether notifications are allowed on your phone,
• your referral code, who redeemed it and when, and any referral or promo code you redeemed,
• messages you send through the in-app Suggestion Box: the text, your user ID, player name, device platform and the time, plus our reply if we write one.

The Suggestion Box is free text, so please don’t put information in it that you wouldn’t want us to read.

We use Firebase Realtime Database (servers in Belgium) only for your online, away or offline state and the time it last changed. Nothing else is recorded there, and no history is kept. With Show my online status turned off, the app always reports you as offline.

We use Firebase Cloud Functions (servers in the United States) so the server, not the app alone, handles anything that has to be trustworthy: submitting scores, awarding XP, Cash and Streak Freezes, running the Shop, syncing achievements and streaks, friend and co-pilot requests, Rendezvous rounds, referral and promo codes, moving your progress to your Google account when you sign in, and sending push notifications about activity involving you. Each call processes your user ID and the data needed for that action, for example a score or a friend request.

We use Firebase Storage to deliver the pictures for game skins. Nothing about you is uploaded there.

4.3 Analytics and crash reports

We use Google Analytics for Firebase to understand, in aggregate, how the app is used: for example which onboarding steps people complete, which games are started and finished, how often the Pro page is opened, whether a purchase went through, whether notifications were allowed and how often results are shared. These events are linked to a random app-instance identifier and to your subscription status, not to your name or email address. Google also records your device model, operating system and approximate location (country or region) derived from your IP address. On Android the Analytics SDK may read your device’s advertising ID; we use it for aggregate analytics only, never for ads or ad targeting.

We use Firebase Crashlytics to find and fix crashes. When the app crashes, Crashlytics sends a report with technical details: the error and where in the app it happened, the app version, your device model and Android version, and a random installation identifier. Crash reports don’t include your name, email address or player name.

4.4 Subscriptions and purchases

Pro is sold through Google Play. Google processes the payment; we never receive your card number or other payment details.

We use RevenueCat (RevenueCat, Inc.) to manage subscriptions, free trials, restores and the time-limited Pro access granted by referral and promo codes. RevenueCat receives your user ID, the purchase receipt from Google Play, the product you bought, its price and currency, and your subscription status and expiry date.

The app may show Google Play’s built-in rating prompt. If you rate or review the app, Google handles that under its own policies; we receive nothing from the prompt.

4.5 Notifications

The app asks for permission to send notifications. There are two kinds.

• Reminders scheduled on your phone: a daily reminder around the hour you usually play (at most once a day, and never on a day you’ve already won), a reminder to come back after a break, a message when your streak reaches a space milestone, and reminders before a free trial ends or a subscription renews. These are created on your device; no server is involved.
• Push notifications through Firebase Cloud Messaging (Google LLC). Every install is subscribed to a general channel we use occasionally to message all players at once, for example about a new version. When you’re signed in, your device token is also stored with your player record so we can tell you about activity involving you: friend requests, shares and reactions, a friend beating your score, a drop in your leaderboard position, co-pilot invites, nudges and Rendezvous rounds. Tokens that stop working are removed automatically.

You can turn reminders off in Profile Settings, and all notifications off in your phone’s settings, at any time.

4.6 Content from other services

• Artwork images. Guess the Art and the Art category in Rendezvous download each artwork’s image from Wikimedia Commons (upload.wikimedia.org). Like any website, the Wikimedia Foundation receives your IP address and basic technical information about the request. See the Wikimedia Foundation Privacy Policy.
• Connection check. To tell whether you’re online, the app sends an empty request to a Google connectivity endpoint (clients3.google.com). It contains nothing about you beyond what any internet request reveals.
• Sharing. When you share a result or a streak card, your phone’s share menu sends it to the app you choose. We don’t see what you share there.

5. Why we use your data

The GDPR requires a legal basis for each use of personal data. These are ours:

Purpose	Legal basis
Your account, saving and restoring progress, games, rewards, the Shop, friends, Rendezvous, leaderboards and notices about activity involving you	Providing the service you asked for under our Terms of Use (Art. 6(1)(b))
Pro, free trials, referral and promo codes	Providing the service (Art. 6(1)(b)); billing records are also kept by Google to meet legal obligations (Art. 6(1)(c))
Push notifications and reminders	Your consent, given through Android’s notification permission, which you can withdraw at any time (Art. 6(1)(a))
Analytics and crash reports	Our legitimate interest in understanding how the app is used and fixing what breaks (Art. 6(1)(f))
Checking scores and rewards, preventing cheating and abuse, keeping the service secure	Our legitimate interest in a fair and secure game (Art. 6(1)(f))
Reading and answering Suggestion Box messages and emails	Our legitimate interest in improving the app and helping you (Art. 6(1)(f))
Responding to lawful requests from authorities	Legal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, you can object, as described in section 9. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

6. Who we share it with

We don’t sell your personal data, and we don’t share it with advertisers or data brokers. The app shows no ads.

These services process data on our behalf, or receive it because the feature depends on them:

Service	Provider	What for	Where
Firebase Authentication	Google	Anonymous accounts and Google sign-in	Global
Cloud Firestore	Google	Player records, friends, sharing, Rendezvous, Shop, referrals, Suggestion Box	Google Cloud
Firebase Realtime Database	Google	Online, away or offline status	Belgium
Firebase Cloud Functions	Google	Validating scores, rewards, purchases in the Shop, requests; sending personal push notifications	United States
Firebase Storage	Google	Pictures for game skins	Google Cloud
Google Analytics for Firebase	Google	Aggregate usage	Global
Firebase Crashlytics	Google	Crash reports	Global
Firebase Cloud Messaging	Google	Delivering push notifications	Global
RevenueCat	RevenueCat, Inc.	Subscriptions and entitlements	United States
Google Play	Google	Billing and purchases	Global
Wikimedia Commons	Wikimedia Foundation	Artwork images	United States

We may also disclose data if we are required to by law, a court order or an enforceable request from a public authority.

7. Transfers outside the European Union

Some of these providers process data outside the EU, mainly in the United States. Google LLC is certified under the EU–US Data Privacy Framework, and Google and RevenueCat also offer the European Commission’s Standard Contractual Clauses. These are the safeguards we rely on for such transfers.

8. How long we keep it

• Data on your phone: until you uninstall the app or clear its data.
• Your account and player record: for as long as your account exists. When you ask us to delete your account, we delete your sign-in record and your player data.
• Notices about activity involving you: deleted automatically after 60 days.
• Friend requests and co-pilot invites nobody answers: expire after 30 days.
• Online status: overwritten with your latest state; no history is kept.
• Push notification tokens: until they stop working or your account is deleted.
• Suggestion Box messages: until we delete them, or you ask us to.
• Analytics: event data linked to the app-instance identifier is kept for no more than 14 months; aggregated reports may be kept longer.
• Crash reports: 90 days.
• Subscription records: kept by Google Play and RevenueCat under their own retention rules and legal obligations.

Backups and security logs held by our providers may keep copies for a short time after deletion.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy,
• correct data that is wrong,
• delete your data,
• restrict how we use it,
• receive it in a portable format,
• object to uses based on our legitimate interests, including analytics,
• withdraw consent at any time, for example by turning notifications off.

To use any of these rights, email mdieska1@gmail.com from, or mentioning, the Google account you sign in with and your player name. We’ll answer within one month. The quickest way to have everything erased is described on Delete your account.

Several things you can do yourself, in the app, at any time:

• edit or clear your player name, bio, picture, flag and banner color,
• hide your stats and your online status from other players,
• remove friends and block players,
• turn reminders and notifications off,
• switch to a different Google account.

If you think we’re handling your data unlawfully, you can complain to a data protection authority. In Slovakia that’s the Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. You can also contact the authority in the EU country where you live or work.

10. Children

Guesser Space is not directed at children below the age at which they can consent to the processing of their personal data in their country, unless local law and Google Play’s policies allow it. If you believe a child has given us personal data that should be removed, write to mdieska1@gmail.com and we’ll delete it.

11. Security

Data travels encrypted between the app and our providers. Access to stored data is limited by Firebase security rules, and anything that affects scores, rewards or purchases is checked on the server rather than trusted from the app. No system is perfectly secure, but we collect as little as we can and protect what we keep.

12. This website

This website is a static site hosted on GitHub Pages. It uses no cookies, no analytics and no tracking, and it loads its fonts from its own server rather than from a font service. GitHub, which hosts it, processes visitors’ IP addresses to deliver and protect the site; see the GitHub Privacy Statement. Links to Google Play take you to Google’s site, where Google’s policies apply.

13. Changes to this policy

When the app changes in a way that affects your data, we update this policy and the date at the top of this page. Earlier versions are listed below. If you keep using the app after a change takes effect, the updated policy applies.

14. Contact

Questions, requests or complaints about privacy: mdieska1@gmail.com.

Privacy policies of the main services we use: Google · RevenueCat · Wikimedia Foundation