Privacy Policy
The short version
- You can play without giving us your name or email. We create a random guest account so your stats are saved.
- Your username, colour, profile picture, country and game stats are visible to other players.
- The app shows ads from Google AdMob, and the home page of our website (mind-raider.app) shows a banner ad from Google AdSense. Where the law requires it, we ask before ads use your data to personalise them.
- We don't sell your personal information for money.
- You can delete your account and data at any time in Profile > Settings > Delete account, or by request at mind-raider.app/delete-account.
1. Who we are
Mind Raider (the "app") is made and run by Tomas Dev Studio, the name an independent developer uses to publish on Google Play ("we", "us"). We are the controller of the personal data described here.
Contact: privacy@mind-raider.app
2. What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Account ID (a random identifier) and sign-in session | Created automatically the first time you open the app | To save your progress and keep the game fair |
| Username and colour, friend code | You choose them | Shown to other players in parties, friends lists and leaderboards |
| Email address (optional) | You add it in Settings | To let you log in on another device and to send you sign-in codes. We don't send marketing emails |
| Profile picture (optional) | A photo you pick. The app only gets the one photo you choose, resized on your phone | Shown to other players |
| Country (two-letter code) | Worked out on your phone from your mobile network, SIM or language settings. We don't use GPS or your precise location | Country leaderboards |
| Gameplay data: parties joined, picks, guesses, scores, stats, badges, game history | Created as you play | To run the game, show results and leaderboards |
| Friends, blocks and reports | You send or accept friend requests, block players, or send reports (reason, optional details, and a copy of the reported username and picture) | Social features, safety and moderation |
| Push notification token | Your device, if you allow notifications | To send you party invites, friend alerts and "your game started" messages |
| Purchases (Premium): the Google Play order ID and purchase token, the product and when it was bought | Google Play, when you buy Premium. We never see your card or payment details | To unlock Premium on your account, restore it on a new phone and handle refunds |
| Custom questions (Premium): the packs, questions and answers you write | You type them | To play them in your parties. Everyone in a party you host with a custom pack sees its questions |
| Invite code | The Google Play install referrer, when you install from a friend's invite link | To take you straight into that party or add that friend |
| Device and technical data: IP address, device model, Android version, app version, crash logs | Your device, automatically | To connect you to the game servers, fix crashes and keep the service secure |
| Advertising data: advertising ID, IP address, device information, ad views and taps | Collected by Google AdMob inside the app | To show ads, measure them, prevent ad fraud and, with your consent where required, personalise them |
| Website advertising data: IP address, browser and device information, cookies or similar identifiers, ad views and clicks | Collected by Google AdSense when you visit the home page of mind-raider.app | To show the website banner ad, measure it, prevent ad fraud and, with your consent where required, personalise it |
The PASTE button reads your clipboard only when you tap it, to find a party code. We never read your contacts, messages or other photos.
3. Legal bases (EEA, UK and Switzerland)
- Contract: running your account and the game you asked to play.
- Legitimate interests: security, preventing cheating and abuse, moderating reports, fixing crashes, and showing non-personalised ads that keep the app free. You can object at any time (section 8).
- Consent: personalised ads (in the app and on the website), advertising cookies on the website, push notifications, and your optional email and profile picture. You can withdraw consent at any time without affecting earlier processing.
- Legal obligation: when we must keep or disclose data by law.
4. Who we share data with
We share data only with service providers that run parts of the app for us, under contracts that limit how they use it:
- Supabase Inc.: hosts our database, sign-in and file storage. Servers in the European Union (Frankfurt, Germany).
- Google LLC / Google Ireland Ltd.: Firebase Cloud Messaging (push notifications), Firebase Crashlytics (crash reports), Google AdMob (ads in the app), Google AdSense (the ad on our website) and Google Play (app distribution, install referrer and payments for Premium). For how Google uses data from apps that use its services, see policies.google.com/technologies/partner-sites.
- Resend: sends sign-in codes to your email address.
Other players see your username, colour, profile picture, country, scores, stats and badges. Anything you show in the app is visible to them.
We may disclose data if required by law, to protect the rights and safety of players or the public, or as part of a sale or merger of the app (we would tell you first).
5. Ads
The app shows banner ads and ads inside the app's screens, from Google AdMob. Premium players see no ads. In the EEA, UK and Switzerland we ask for your consent before ads are personalised; you can change your choice in Profile > Settings > Ad privacy choices. Everywhere, you can reset or delete your advertising ID or opt out of ad personalisation in your Android settings (Settings > Privacy > Ads, or Google > Ads on some phones).
Ads on our website
The home page of mind-raider.app shows one banner at the bottom of the screen, from Google AdSense. You can close or collapse it. Our other pages (this policy, the terms and the account-deletion page) show no ads. Google and its partners may use cookies or similar technologies to show the ad, measure it, prevent fraud and, if you agree, personalise it based on your visits to this and other websites.
In the EEA, the UK and Switzerland a consent message from Google appears on your first visit; nothing is stored for personalised ads unless you agree, and you can change your choice at any time with the Privacy and cookie settings link Google shows on the page. Everywhere, you can turn off personalised ads at myadcenter.google.com or block cookies in your browser. See how Google uses data from sites that use its services.
6. International transfers
We and some of our providers (for example Google) may process data outside your country, including in the United States. Where required, these transfers are covered by an adequacy decision of the European Commission, the EU Standard Contractual Clauses, the EU-U.S. Data Privacy Framework or other lawful safeguards.
7. How long we keep data
- Your account, profile, stats and game results: until you delete your account.
- Premium purchase records: while your account exists. If you delete your account, our purchase record and your custom packs are deleted with it; Google keeps its own record of the payment.
- Custom questions: until you delete them or your account. Questions used in a game stay with that game's round details for up to 7 days.
- Round-by-round details (individual picks and guesses): 7 days after the game ends. Final results stay in your history.
- Guest accounts with no email that never finished a game: deleted after 60 days without use.
- Notifications sent to you: 7 days.
- Reports: until reviewed, then up to 12 months. Reports you sent are kept without your identity if you delete your account.
- Crash reports: up to 90 days (Firebase Crashlytics).
- Backups: deleted data can remain in our encrypted backups for up to 7 days before it is overwritten.
8. Your rights and choices
- Delete your account: Profile > Settings > Delete account. This removes your profile, stats, history, friends, blocks and device tokens right away, and your profile picture file within 24 hours. Other players keep their own results from games you played together, without your account. You can also ask at mind-raider.app/delete-account by email from your account's address, or with the private deletion code shown in Settings.
- Change or remove your username, colour, email and profile picture in Settings.
- Notifications: turn them off in Settings or in Android settings.
- Access, correction, portability, restriction and objection: email us. We answer within 30 days (or the time your local law requires) and may need to confirm the request comes from the account owner.
- Complaints: you can complain to your local data protection authority (in the EU/EEA your national authority, in the UK the ICO). We'd appreciate the chance to fix it first.
California and other US states
We don't sell personal information for money. Showing ads through AdMob and AdSense may count as "sharing" for cross-context behavioural advertising under California law. You can opt out by turning off ad personalisation in your Android settings or at myadcenter.google.com (section 5), or by emailing us; we also honour Global Privacy Control signals where they reach us. We don't use sensitive personal information to infer characteristics about you. You have the right to know, delete and correct your data and not to be discriminated against for using these rights.
9. Children
Mind Raider is not directed at children under 13 and we don't knowingly collect personal data from children under 13 (or the higher minimum age in your country, for example 16 in some EU countries, unless a parent has consented). If you believe a child has given us personal data, contact us and we will delete it.
10. Safety and moderation
Usernames and custom questions are checked against a list of blocked words. When several established players who recently played with someone report the same username or profile picture, it is removed automatically (a removed picture can be replaced after 7 days) and we review the reports. Other reports are reviewed by us. We may remove content or suspend accounts that break our Community Rules.
11. Security
Data is encrypted in transit (HTTPS) and at rest by our hosting provider. Access to the database is restricted, players can only reach their own data through the game's checks, and nobody can see other players' picks before a round is revealed. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires.
12. Changes
We'll update this policy when the app changes. For important changes we'll tell you in the app before they take effect. The effective date at the top shows the current version.
13. Contact
Tomas Dev Studio. Email: privacy@mind-raider.app