Effective date: 5 September 2026 Last updated: 5 September 2026

This policy explains what HITGUESS ("the app") does with your data. It is written to match what the app's code actually does, not what a generic template says.


1. The short version

HITGUESS is a silent music-trivia game. It has no advertising, no tracking, and no third-party ad or attribution SDKs. It never asks for the App Tracking Transparency permission and never reads your advertising identifier (IDFA). It never accesses your music library, your microphone, your camera, your contacts, or your location.

To run the game we do need an account (it can stay anonymous), a record of the rounds you play, and — if you subscribe — your subscription status. Social features (username, friends, duels, leaderboards) add data only if you use them. You can delete your account from inside the app.


2. Who processes your data

We use three service providers. They act as our processors or, where noted, as independent controllers of their own.

Provider What they handle for us Role
Google (Firebase / Google Cloud) — Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging (FCM), Google Analytics for Firebase, Crashlytics, Remote Config, App Check Accounts, game database, all server logic, push delivery, product analytics, crash reports, remote configuration, anti-abuse attestation Processor (Google also processes some data as an independent controller under its own terms)
RevenueCat, Inc. Subscription and purchase state — we identify you to RevenueCat by your Firebase user ID Processor
Apple Inc. App Store distribution and billing, Sign in with Apple, Apple Push Notification service (APNs), App Attest / DeviceCheck Independent controller for the App Store and Apple ID; service provider for push and attestation

We do not sell your personal information and we do not share it for cross-context behavioural advertising.


3. What we collect, why, and on what legal basis

3.1 Account and identity

Data Why Legal basis (GDPR)
Firebase user ID (uid) — created automatically on first launch as an anonymous account It is the key that owns your scores, streaks and friendships Performance of a contract (providing the game)
Apple account identifier and, where Apple supplies it, your email address (including Apple's private relay address) — only if you choose Sign in with Apple So your progress survives reinstalling the app or changing device Performance of a contract
Display name Shown on your profile and to friends Performance of a contract
Username (lowercase, 3–20 characters, a–z 0–9 _) — only if you claim one Lets friends find you; it is unique across the game Performance of a contract
Avatar seed (a number that generates a procedural avatar) Your avatar. There is no photo or profile-picture field anywhere in the app. Performance of a contract
Interface language and catalogue language preferences To show the right language and the right puzzle catalogue Performance of a contract

You can play the entire single-player game without ever signing in with Apple; the anonymous account is created for you and is enough.