Privacy policy

Who is responsible

Amber Desarrollo Digital S.L. (Tax ID B44675304, Calle Jesús del Gran Poder 37, 3.º L, 41002 Sevilla) is the controller of the data handled by ¡Fuiste tú! (the app, the fuistetu.app website and its server). For anything about your data, write to us at hola@fuistetu.app.

In short

We don't ask for your email or phone number, or for you to create an account. Each installation of the app, or each browser, gets a random anonymous id.

Your player name, your selfie, your photos, your drawings and what you write in a game only exist while the room lasts: they aren't kept in any database and they're deleted when it ends.

We don't use advertising, third-party analytics or tracking cookies. We do keep our own usage statistics, without names or faces, which you can switch off in Settings.

What data we handle and why

• Installation id: a random code and a secret key kept on your device, along with the platform (iOS, Android or web), the app version, the language and the dates you started and last connected. It lets you create and join rooms, get your seat back if the connection drops, and know which free games you have left and what you've bought.

• What happens in the room: your player name, your selfie, your photos and drawings, your texts, your votes and your points. The server needs them to run the game and so the rest of the room can see them.

• The game's summary image is made on your own device and only leaves it if you share it. Your selfie only appears in other people's images if you allow it.

• Purchases: if you buy the All-Access Pass, Apple or Google take the payment and RevenueCat confirms the purchase to us. We keep what it includes, which store it was made in, when, and whether it was a test, linked to your anonymous id. We never see your payment details.

• Usage statistics, to improve the game: which games are played, how long they last, how many people play, which questions get skipped and how each game ends. Linked to your anonymous id, we also keep which rooms you've been in, how you got in (with the code, the QR or a link) and when you left, your points, your place and the awards of each game, which days you play, which screens of the app you open (for example, the shop and where from) and the kind of device: whether it's a phone, a tablet, a computer or a TV, its model, its system version and the region it's set to, which isn't your location. The statistics never keep your name, your face, what you write, who you vote for or your IP address. The app's errors are kept without any id. You can switch the statistics off in Settings: they stop being sent and we delete the ones linked to your installation.

• Reports, blocks and bans: if someone reports a player, we keep the report (the reason, the comment and the ids of who reported and who was reported) and a copy of what the reported person did in that game (their name, selfie, photos, texts and drawings) so we can review it. If you block someone, we keep the block. If we ban an installation from the service, we keep its id, the reason and until when.

• Technical logs: the server notes connections (for example, the IP address and the time) to protect itself from abuse and fix problems.

Legal basis

We handle your data to provide the service you ask for by playing: rooms, your purchases and your free games (performance of a contract, art. 6.1.b GDPR).

Moderation, server security and usage statistics rely on our legitimate interest in keeping the game safe and improving it (art. 6.1.f GDPR), and on what the stores and the law require. You can object to the statistics whenever you like by switching them off in Settings.

Your selfie appearing in the images others share relies on your consent, which you can withdraw at any time from the room.

How long we keep it

• What happens in the room (name, selfie, photos, drawings, texts and votes): while it lasts. Each game's photos and drawings are deleted when that game is left, and everything else when the room closes, a few hours later at most. If the server restarts, everything is deleted.

• Your id and your free games: until you delete your data or two years go by without you playing. If you have the All-Access Pass, we keep it while it's active, so you don't lose it.

• The copy of reported content: 30 days. The report itself: one year. Blocks: until one of the two installations deletes its data. Bans: while they last.

• Usage statistics linked to your id: 13 months at most. After that only totals without any id remain, such as how many people played each day. The app's errors: 13 months since they last happened.

• The server's technical logs: 30 days at most.

Who we share it with

We don't sell or hand over your data. It's only handled on our behalf, under contract, by:

• Scaleway (France), where our server is hosted, inside the European Union.

• RevenueCat (United States), which handles purchases with your anonymous id.

Apple and Google handle your purchase data as independent controllers, under their own privacy policies.

And, of course, the other people in your room see your name, your selfie and what you do in the game while you play.

Transfers outside the European Union

RevenueCat is in the United States. The transfer is made with the safeguards the GDPR requires: the EU-US Data Privacy Framework or, failing that, the European Commission's standard contractual clauses.

Minors

¡Fuiste tú! is only for people aged 18 or over. We don't ask your age or anything that says who you are: by accepting the rules you confirm you're that age. If a minor has used the app, write to us at hola@fuistetu.app and we'll delete what we have from that installation.

Security

Everything travels encrypted. Photos can only be seen with a signed link your room knows, the server strips their hidden data (such as location), and of your secret key we only keep an encrypted fingerprint.

Your rights

You can ask us for access to your data, to correct it, delete it, restrict its use, object to it or take it elsewhere by writing to hola@fuistetu.app. Include the id you'll see in Settings, since we have no other way of knowing which data is yours.

The quickest way to delete everything is «Delete my data» in the app's settings: it deletes your id, your saved purchases, your free games and your blocks at once, and unlinks your statistics from it. If you had the All-Access Pass, you get it back with «Restore purchases».

To stop sending usage statistics, switch them off in Settings.

If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Changes

If we change this policy we'll tell you in the app and, if the change matters, we'll ask you to accept it again.