Privacy Policy

We keep collection deliberately small. PuntuQuest is playable without an account. Play as a guest and your progress never leaves your device. Sign in and it moves to your account, so it can follow you to another device.

• Gameplay data such as scores, stars, which levels you have completed, and statistics about the games you finish (how many you got right, how long your answers took, your last twenty games). As a guest this stays on your device. Once you sign in it is kept in your account instead.
• Usage and stability signals, such as which levels are started and finished, app version, device model, and crash reports, tied to a pseudonymous app identifier rather than to you.
• A count on each riddle of how often it has been played and answered right. It adds up every player's answers, guests included, and holds nothing that identifies anyone.
• Whether you have PuntuQuest Pro, and the record of your purchases, if you buy it.
• In the free version, what Google's ad service collects to show ads (see Advertising below).
• Optional support correspondence if you email us directly.

We do not require your name, your contacts, or your location to play.

PuntuQuest is playable without an account. If you choose to sign in with Google or Apple, we receive from that provider your email address (or Apple's private relay email if you use Hide My Email), your display name, your profile photo, and a unique user identifier.

Signed in, you can also choose a username, shuffle the avatar the app draws for you, and hide on leaderboards; we keep those choices with your account. To keep usernames unique, we also keep a record of which account holds each one. Your sign-in provider's name and photo are not shown anywhere in the app.

We store this data in Firebase Authentication and Cloud Firestore, both operated by Google as our backend provider. We use it only to sync your progress and personalize the game to you. We do not use it for advertising, tracking, or profile-building, and we do not share it beyond what is needed to run the game.

Signed-in players appear on leaderboards that every player can see, guests included. An entry shows the username you choose in your profile, your avatar (a face the app draws, never your photo, in the style you picked if you have Pro), a crown if you have Pro, and your points for the day, the week, and all time. Until you choose a username, or if you turn on "Hide me on leaderboards", you appear under a made-up name such as "BraveComma42", with the same avatar. The name, email address and photo your sign-in provider gives us are never shown.

Scores are checked and posted by our server, which runs on Google Cloud Functions and keeps a record of when you last posted, so that no one can post more play than time allows, and of which boards you are on. Games played as a guest are not posted. You can change your username or hide yourself at any time from your profile, and your entries update straight away. Deleting your account removes you from every leaderboard and frees your username.

PuntuQuest Pro is optional. Apple takes the payment through your Apple ID; we never see your card or payment details. RevenueCat, a purchase-processing service, keeps the record of what you bought so the app can tell whether you have Pro and restore it on another device. It knows you by a random identifier, and by your account identifier once you sign in, so a purchase made as a guest moves to your account.

Signed in, our server asks RevenueCat whether you have Pro and keeps the answer with your account, so leaderboards can show your crown and your avatar style. Apps cannot change that record; only our server writes it.

The free version shows ads from Google AdMob: banners on some screens, full-screen ads between games and when you return to the app, and ads you choose to watch for a reward such as a 50:50. Ads are limited to content suitable for all ages, and never appear while you are answering a riddle. PuntuQuest Pro removes every ad.

To show and measure ads, Google's ad service collects information from your device: your IP address and the approximate location it suggests, device and app details, how you interact with ads, and, only if you allow tracking when iOS asks, your device's advertising identifier. With that permission, ads can be chosen by your interests; without it, you still see ads, just not personalised ones. Where the law requires it, such as in the EU and the UK, the app asks for your consent first, and Settings offers Ad privacy choices to change it later. You can also turn tracking off at any time in iOS Settings, under Privacy & Security, Tracking.

Google uses this information under its own policies, described at policies.google.com/technologies/partner-sites. To pace ads, the free version also keeps simple counts on your device, such as how many games you have finished and when an ad last showed. They never leave your device.

We use the limited information above only to run and improve the game:

• To save your progress and show your scores, streaks and statistics.
• To know whether you have Pro, and to show ads in the free version.
• To diagnose crashes and improve performance and balance.
• To find riddles that are too hard or unclear, and levels players get stuck on, from totals across all players: the riddle counts above, and how many signed-in players have finished each category's levels. These totals never single anyone out.
• To respond to you when you contact support.

We do not sell your information, and your account details (email, name, username) are never given to advertisers. The advertising described above works from your device, not your account.

We do not sell your data. We share information only in narrow cases: with service providers who help us operate the app, bound by confidentiality, and where required by law.

The primary service providers we rely on are Google Firebase (Firebase Authentication for optional sign-in, Cloud Firestore for game content and account data, Cloud Functions for checking and posting leaderboard scores and for checking Pro), RevenueCat for purchase records, and Google AdMob for ads in the free version. Firebase and RevenueCat process data on our behalf; AdMob as described under Advertising.

We also use Firebase Analytics and Firebase Crashlytics, both from Google, to see which parts of the game are played and to diagnose crashes. These record events such as starting a level, answering a riddle, and finishing a game (with its mode, score, accuracy and length), alongside technical details like app version and device model. They are tied to a pseudonymous app identifier; we do not attach your account identifier to them.

As a guest, your progress lives only on your device. Once you sign in it lives in your account on Cloud Firestore, and the copy on your device is cleared so the two cannot disagree. Security rules allow only your own account to read or write your data. Leaderboard entries are the exception: they are public by design, and only our server can write them. The app can also check whether a username is already taken, so no two players share one; it cannot list who holds which. Where we process usage signals, we use reasonable technical and organizational measures to protect them.

No method of transmission or storage is perfectly secure, but we limit what we hold so there is little to expose.

Depending on where you live, you may have the right to access, correct, or delete information we hold about you, and to object to certain processing.

If you signed in, you can delete your account and all associated data at any time from inside the app: open your profile (tap your avatar at the top of Home, or your name in Settings), then choose Delete Account. This removes your record from Firebase Authentication and Cloud Firestore, takes you off every leaderboard, and frees your username. Deleting your account does not cancel a Pro subscription: cancel it in your App Store account settings. Your purchase history stays with Apple, and RevenueCat keeps its transaction record; contact us to have ours removed.

To clear data held on your device as a guest (scores, stars, level history, statistics), delete the app. For anything we hold on our servers that you cannot remove yourself, contact us and we will respond promptly.

The game itself is suitable for all ages. Accounts are the exception: signing in is for players aged 13 and older, because that is where we receive personal details such as an email address and a name. Everything in the game can be played as a guest, without signing in, and a guest's progress stays on their own device.

PuntuQuest is not directed to children under 13, and we do not knowingly collect personal information from them. Ads in the free version are limited to content suitable for all ages. If you believe a child has signed in and given us information, contact us and we will delete it.

We may update this policy as the game evolves. When we make material changes, we will update the date above and, where appropriate, note the change in the app.

Continued use of PuntuQuest after an update means you accept the revised policy.

Questions, requests, or concerns about your privacy are welcome. Reach us at hello@puntuquest.com.