Privacy Policy

This policy explains what information Find My Number (the "game") collects when you play at https://findmynumber.app or in the Find My Number app, what we do with it, and the choices and rights you have. The game is operated by Find My Number, based in Greece (the "we" in this policy), and is offered to players everywhere in the world. We are the data controller, or the equivalent under your local law, for the information described here. Questions go to support@findmynumber.app.

We designed the game to need very little. You can play without an account and without giving us your name or email, and playing on one phone or against the computer sends us nothing about you at all. If you choose to create an account, we keep only what an account needs: your email address, your password (stored as a hash by our sign-in provider, never readable by us) and the player name you pick. You can delete the account from inside the game at any time, and everything it held goes with it.

What we collect, and why

• Anonymous player ID (online play). When you open or join an online room, the game creates an anonymous sign-in with our database provider. It is a random identifier tied to your browser; it holds no name, email or phone number. We use it to seat you at the table and to keep your secret number readable by you alone. Legal basis: providing the game you asked for.
• Your player name at a room: the name of your account if you have one, otherwise the colour of your seat (RED, BLUE, YELLOW or PURPLE). It is shown to the other players in that room and stored with the room. Please do not use your full real name or anything you would not say out loud at a table.
• Your friends, if you have an account: other players can find your player name by typing its first letters, and when you add a friend or accept one, that link (the two account ids and the date) is stored with your account. Removing a friend, or deleting your account, removes it.
• Your account, if you create one (optional). Your email address and a hashed password are kept by our sign-in provider so you can sign in and recover a forgotten password; the player name you choose is stored with the account and shown at the tables you play. Password-reset codes are sent to that address, and to nothing else. Legal basis: providing the account you asked for.
• Game moves in online rooms. The questions asked, the answers, and the round results are stored so every phone at the table shows the same game and so scores carry over between rounds.
• A random device ID for usage statistics. A random number is saved on your device and sent with anonymous events such as "a game started" or "a room was created", with the mode and the number of players. It is not linked to your name or to anything outside the game. We use it to see which modes are played and how often the game is opened, so we know what to improve. Legal basis: our legitimate interest in understanding how the game is used.
• Page views. The website uses Cloudflare Web Analytics, which counts visits without cookies and without identifying visitors.
• Technical data. Like every website, our hosting provider and our database provider see your IP address and basic details of your device and browser when they serve the game, and keep short-lived logs of it to run and secure the service.
• Settings. Sound preferences and similar choices are saved on your device only.
• Messages you send us. If you email us, we keep the message and our reply for as long as needed to help you.

What we do not do

• We do not sell your personal information, and we never have.
• We do not collect precise location, contacts, photos or anything else from your device.
• We do not collect special or sensitive categories of information such as health, religion or political views.
• We do not use your information for automated decisions that have legal or similarly significant effects on you.

Advertising

The game is free and may show advertisements from Google (AdSense on the website, AdMob in the apps). When advertising is enabled, Google may use cookies or your device's advertising identifier to show and measure ads, and to limit how often you see the same one. How Google uses information from sites and apps that use its services is explained at policies.google.com/technologies/partner-sites.

Where the law requires it, you will be asked for your consent through Google's consent tool before any personalised advertising is used, and you can change your choice at any time from the game's Settings. This applies in the European Economic Area, the United Kingdom and Switzerland, and to the choices offered under United States state privacy laws.

Everywhere, you can limit personalised advertising on your device: on Android under Settings, Google, Ads (delete or reset your advertising ID, or opt out of ads personalisation); on iPhone under Settings, Privacy & Security, Tracking and Apple Advertising. Ads may still be shown, but they will not be based on your interests.

Where the data is kept, and for how long

• Online rooms, names and moves are stored with our database provider, Supabase, on servers in the European Union (Frankfurt, Germany). Rooms exist to run a game: they are kept only as long as needed for that and are deleted periodically.
• Anonymous player IDs stay in your browser until you clear its data; you can also remove them by clearing the site's data or uninstalling the app.
• An account is kept until you delete it (Account, DELETE ACCOUNT, in the game) or ask us to. Deleting it removes the email, the password and the player name at once.
• Usage statistics are kept in aggregate form. The random device ID stays on your device until you clear its data.
• Provider logs containing IP addresses are kept for a short period, typically days to a few weeks, by the providers named below.
• Emails to support are kept for up to two years after the last reply, then deleted.

International transfers

We are based in the European Union and keep game data in the EU. Some of the providers that help us, such as Cloudflare and Google, operate worldwide and may process information, including in the United States. Where information leaves the European Economic Area, the United Kingdom or Switzerland, it is protected by the safeguards those laws recognise, such as the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework. If you play from outside these regions, your information will be processed in the EU and by these providers as described here.

Who else sees it

The providers that help us run the game process information only on our instructions: Supabase (database, sign-in and account emails, EU), Cloudflare (website analytics and security), Hostinger (web hosting) and, when advertising is on, Google. Other players in your online room see your player name and the questions you ask, because that is the game. We may also disclose information if the law requires it, to protect players or the game from abuse, or if the game is ever taken over by someone else, in which case this policy continues to apply.

Children

The game is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If your country sets a higher age for giving your own consent online (up to 16 in parts of the European Union), please play with the permission of a parent or guardian until you reach it. If you believe a child has provided us with information, write to us and we will delete it.

Security

The game is served over HTTPS, secret numbers in online rooms are readable only by the player who chose them, and access to our providers' dashboards is limited and protected. No system is perfectly secure, so we also keep as little information as we can.

Your rights, wherever you live

You can ask what information we hold about you, have it corrected or deleted, receive a copy of it, object to or restrict how it is used, and withdraw any consent you gave. To exercise a right, write to support@findmynumber.app from any country. If you have an account, write from its email address; otherwise, because our records are anonymous, tell us the room code or the name you used and roughly when you played, so we can find them. We answer within one month, or sooner where your local law requires. We will never treat you differently for exercising your rights.

European Economic Area, United Kingdom and Switzerland

Under the General Data Protection Regulation, the UK GDPR and the Swiss Federal Act on Data Protection, the legal bases we rely on are: performance of the game you asked for (online rooms, and your account if you create one), our legitimate interest in understanding and securing the game (usage statistics, technical logs), and your consent (personalised advertising). You have the right to complain to a data protection authority: in Greece that is the Hellenic Data Protection Authority (dpa.gr); in the UK, the Information Commissioner's Office (ico.org.uk); in Switzerland, the Federal Data Protection and Information Commissioner; or the authority of the country where you live.

United States

If you live in California or another US state with a privacy law (such as Virginia, Colorado, Connecticut, Texas or Oregon), you have the rights described above, including the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal information and of targeted advertising. In the past twelve months we have collected only the categories listed in "What we collect": identifiers (anonymous player and device IDs, IP address, and the email address of an account if you create one), the player name you choose, and internet activity within the game (moves and events). We do not sell personal information. Personalised advertising by Google may count as "sharing" or targeted advertising under these laws; you can opt out through the consent choices in the game's Settings and your device's advertising settings described above. You may use an authorised agent to make a request on your behalf; we will ask for reasonable proof that they act for you.

Brazil

If you live in Brazil, the Lei Geral de Proteção de Dados (LGPD) gives you the rights described above, including confirmation of processing, access, correction, anonymisation, deletion and information about the parties we share information with. Our contact for these requests is the email above. You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).

Other countries

Wherever you live, we apply the same principles: we collect little, we do not sell it, we keep it only as long as needed, and you can ask us about it at any time. If your local law gives you additional rights, write to us and we will honour them.

Changes

When we change this policy we update the date at the top and, for any change that matters to you, say so in the game. This version applies from the date shown.