This Privacy Policy explains what data the Photo Bingo mobile application (the "App") collects, why, and what your rights are. We designed Photo Bingo to work with as little personal data as possible: no real name, no phone number, no account password — just a username you choose, and an email only if you decide to add one.
The App is operated by the developer of Photo Bingo. For any privacy matter, contact: photobingo@bitsavestudio.com.
| Data | Why we process it | Legal basis (GDPR) |
|---|---|---|
| Username (chosen by you) | Identifies you to other players in games, friend lists, and leaderboards. | Contract performance (Art. 6(1)(b)) |
| Device identifier (a random UUID derived on your device) | Signs you in without a password; your account is bound to your device. | Contract performance (Art. 6(1)(b)) |
| Email address (optional, only if you add and verify one) | Account recovery and messages about your account (e.g. deletion confirmation). | Contract performance (Art. 6(1)(b)) |
| Photos you submit, including their technical metadata (EXIF: timestamps, camera/device info, and similar) | Running the game (showing photos to players in your session, validating targets), anti-cheat checks, and content-safety scanning; improving our services; sharing with third parties only after de-identification (see Section 4). | Contract performance (Art. 6(1)(b)); legitimate interest in fair play and safety (Art. 6(1)(f)); consent for third-party sharing (Art. 6(1)(a)), given when accepting this policy |
| Precise location (GPS coordinates), captured only at the moment you submit a photo in a multiplayer game | Anti-cheat only: photos submitted for the same target from implausibly close together are a strong signal of copied or re-used shots. Coordinates are stored with the photo and are removed before any photo is shared (see Section 4). If you deny the location permission the game works normally and the photo is submitted without coordinates. | Legitimate interest in fair play (Art. 6(1)(f)) |
| Gameplay data (scores, games played, votes, badges, moderation and anti-cheat flags) | Running games, leaderboards, and keeping the game fair and safe. | Contract performance (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) |
| Preferred language | Showing game content in your language. | Contract performance (Art. 6(1)(b)) |
| Push notification token (Firebase Cloud Messaging) | Delivering notifications such as friend requests and match starts; only if you allow notifications. | Contract performance (Art. 6(1)(b)) |
| Crash reports and diagnostics (Firebase Crashlytics): the error and stack trace, the app version, your device model and OS version, and an app-installation identifier | Finding and fixing crashes. Sent only when the app actually fails; a report contains no photos, no game content and no email address. Your in-game username is attached so a report you send us can be matched to the crash it describes. | Legitimate interest in a working, stable app (Art. 6(1)(f)) |
| IP address and technical logs | Security, abuse prevention, and rate limiting; kept only in short-lived server logs. | Legitimate interest (Art. 6(1)(f)) |
| Advertising data (handled by Google AdMob) | Showing the ads that keep the App free. Whether ads are personalised depends on the consent choice you make in the ad consent dialog shown in the App. | Consent (Art. 6(1)(a)) for personalised ads; legitimate interest for non-personalised ads |
We do not collect your real name, contacts, browsing history, or any data from other apps. Location is collected only in the narrow case described above — at photo submission in a multiplayer game, for anti-cheat — and never in the background or while you are not playing.
Before any photo leaves our game systems and is shared with a third party, we:
What third parties receive is therefore an anonymous image with no information about who took it, where, when, or with what device. We may use and share such de-identified photos to improve our own services (for example, improving photo validation and content-safety systems) and for other legitimate business purposes. By accepting this Privacy Policy when creating your account, you agree to this use and sharing.
Note that if a photo visually shows something identifying (for example, your face), the image content itself is not altered — please keep this in mind when choosing what to photograph.
If you are in the European Economic Area or the United Kingdom you have the right to:
To exercise any right, email photobingo@bitsavestudio.com. We answer within one month.
Account access is protected by device-bound secrets stored in your device's secure storage; credentials and tokens are stored hashed on our servers; traffic between the App and our servers is authenticated. No system is 100% secure, but we design for data minimisation: the less we collect, the less can be exposed.
Our servers are located in the European Union. Some service providers (Google AdMob, Firebase) may process data outside the EEA; such transfers rely on the European Commission's adequacy decisions and/or Standard Contractual Clauses implemented by those providers.
The App is not directed at children under 13, and we do not knowingly collect personal data from them. Where EU member-state law sets a higher digital consent age (up to 16), that age applies. If you believe a child is using the App in violation of this, contact us and we will delete the account.
We may update this policy from time to time; the version and effective date are shown at the top. For material changes we will ask you to review and accept the new version in the App.
Privacy questions and requests: photobingo@bitsavestudio.com