Privacy Policy

GuessClash (guessclash.com — the "Platform") is operated by Founder Panda. This policy explains what personal data we collect when you use the Platform, why and on what legal basis we process it, who we share it with, how long we keep it, and what rights you have over it.

Our basic approach is simple: we do not collect more data than the game needs to work. We do not sell your personal data and we do not market it to third parties.

1. Who is responsible

The data controller is Founder Panda.
Address: Turkey
Email: privacy@guessclash.com

2. What we collect

2.1 What you give us directly

• Display name and username. Creating an account takes a single field: a name. A username is derived from it. Both are visible to other players.
• Email address and password (optional). Only if you choose to secure your account so you can sign in from another device. Passwords are stored as salted hashes — never in readable form.
• Profile photo (optional). If you upload one, it is cropped and resized to 200×200 in your own browser before it is sent to us.
• Support messages. Whatever you write in a support request, plus your account details so we can reply.

2.2 What is created as you play

• Match, arena and marathon results: scores, words solved, wins, losses and draws.
• ELO rating, XP, level, title, badges, trophies and medals.
• League standings (daily, monthly, yearly and all-time).
• Friend connections and the private labels you give your friends.
• Notifications sent to you and your notification preferences.

2.3 Technical data

• Sign-up IP address. Stored once, to enforce a per-IP account limit and to block abuse. We do not keep a log of every request you make.
• Platform. Whether you are using the mobile app, a mobile browser or a desktop browser. Stored as one of those three values, not as a full device fingerprint.
• Push token (optional). Only if you allow notifications, so we can deliver them.
• Daily visit counters. One number per day per platform. No IP address, no user agent and no identifier is stored alongside it.

3. Why we use it

• To run the game: match you with opponents, score rounds and keep your progress.
• To show leaderboards, profiles and match history.
• To send the notifications you asked for.
• To answer your support requests.
• To keep the game fair: detect abuse, cheating and impersonating names.
• To understand roughly how many people use the game, in aggregate.
• To show ads, so the game can stay free.

4. Legal bases

• Performance of a contract. Everything needed to actually provide the game: your account, your progress, matchmaking.
• Legitimate interests. Keeping the service safe and abuse-free, aggregate usage counts, and basic product improvement.
• Consent. Push notifications, analytics cookies and personalised ads. You can withdraw consent at any time without affecting the game itself.
• Legal obligation. Where we must keep or disclose data under applicable law.

5. Information that is public

Some information is visible to anyone, by design, because it is part of a multiplayer game: your display name and username, your avatar or profile photo, your level, title, badges, trophies and medals, your league position, and your match history against other players. Your email address, password and IP address are never shown to other players.

You can hide your online status from your profile settings. You can also turn off incoming friend requests.

6. Cookies and local storage

We use a small number of strictly necessary items in your browser's local storage — your session token, your theme choice and your sound preference. These are not tracking cookies and the game cannot work without them.

Analytics and advertising cookies are separate and optional. See our Cookie Policy for the full list and how to turn them off.

7. Third-party services and sharing

We share data only with the providers that make the service work:

• Hosting and database — to store your account and game data.
• Google AdMob / AdSense — to show ads inside the app and on the site.
• Firebase Cloud Messaging — to deliver push notifications, if you allow them.
• Google Analytics — aggregate usage statistics, only with your consent.
• Google Sign-In — if you choose to sign in with a Google account.

We do not sell your personal data. We disclose it to authorities only where we are legally required to.

8. International transfers

Some of the providers above operate servers outside your country. Where data is transferred internationally, it is done under the safeguards those providers offer, such as standard contractual clauses.

9. How long we keep data

• Account and game data — for as long as your account exists.
• Notifications — automatically deleted after a configurable period (30 days by default).
• Support requests — kept while the request is open and for a reasonable period afterwards.
• Daily counters — aggregate numbers only; they contain nothing personal.

10. Security

Traffic is encrypted end to end with HTTPS. Passwords are stored as salted hashes. Administrative access is limited and authenticated. No system is perfectly secure, but we keep the amount of data we hold deliberately small, which is the most effective protection of all.

11. Children's privacy

The Platform is not intended for children under 13. We do not knowingly collect personal data from them. If you believe a child has created an account, write to us and we will remove it.

12. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time;
• complain to your local data protection authority.

To exercise any of these, write to privacy@guessclash.com. We reply within one month at the latest.

13. Deleting your account

You can delete your account yourself, from your profile, at any time — or from our account deletion page if you cannot sign in.

When you do, your account is anonymised rather than removed row by row: your name becomes "Deleted user", and your email, password, photo and friend connections are erased. Match records stay, because they also belong to the opponents you played against and deleting them would corrupt other people's history. Nothing in them identifies you any more.

14. Changes to this policy

We may update this policy as the game changes. The date at the top always shows the current version. Significant changes will be announced in the app.

15. Contact

Questions about this policy or about your data: privacy@guessclash.com
General enquiries: support@guessclash.com