Nice Guess ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile trivia game.
Data Controller (Verantwortlicher)
Iasna Iskhaki (Nice Guess)
Contact: support@niceguess.app
Location: Germany
1. Data We Process and Why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Nickname, password (stored only as a hash), language, avatar | Your account and the game | Contract, Art. 6(1)(b) |
| Email address (stored only as a hash and a masked form) | Sending you a code to reset your password | Contract, Art. 6(1)(b) |
| Game data: matches, statistics, rating, achievements, friends, challenges and invitations (including an invite code the app receives from an invite link, from Google Play or, once after installation, from the clipboard) | Running the game, leaderboards, friends and invitations | Contract, Art. 6(1)(b) |
| Push notification token | Notifications about your turn, challenges and results | Consent, Art. 6(1)(a) |
| IP address, device user agent and sign-in attempts; CAPTCHA check | Protecting accounts against attacks | Legitimate interest, Art. 6(1)(f) |
| Error reports, device model, system and app version, performance data, user ID | Finding and fixing errors | Legitimate interest, Art. 6(1)(f) |
A nickname and a password are needed to play. The app asks for an email address at registration; without it you cannot reset a forgotten password. Notifications are optional. We do not use your data for advertising and do not sell it.
2. Recipients
- Other players see your nickname, avatar, rating, statistics and achievements.
- Service providers process data on our behalf: Hetzner Online (hosting, Germany), Resend (password-reset emails), Sentry (error reports), Expo, Apple and Google (push notifications), Cloudflare (CAPTCHA; see the Turnstile Privacy Addendum), Namecheap (our support mailbox, support@niceguess.app).
- Authorities, if we are legally required to disclose data.
3. Transfers Outside the EU
Our servers are in Germany. Sentry stores data in the EU, and Resend sends our emails from its EU region. Sentry, Expo, Apple, Google, Cloudflare, Resend and Namecheap are US companies and may process data in the United States; these transfers are based on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
4. Retention
- Account and game data are kept while your account exists. When you delete your account, they are deleted immediately, including the matches you played; backups are overwritten within 30 days.
- Email address: until you remove it in Settings or delete your account.
- Push token: until you turn notifications off in the app, delete your account, or the token becomes invalid.
- Sign-in attempt records: 24 hours.
- Error reports: at most 90 days.
5. Security
Data is transmitted only over encrypted connections. Passwords and email addresses are stored only in hashed form, and access to our servers is restricted.
6. Your Rights
You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), to object to processing based on legitimate interest (Art. 21), and to withdraw consent at any time (Art. 7(3)) — for notifications, by turning them off in the app. You can delete your account yourself in the app: Profile → Delete Account. For everything else, write to support@niceguess.app.
You also have the right to lodge a complaint with a data protection supervisory authority; in Germany these are the state data protection commissioners (list).
7. Age
Nice Guess is intended for users aged 16 and over.
8. Changes
When this policy changes, we update this page and the date at the top.