Pinteza/Privacy

Privacy Policy

Last updated: 21 August 2026

This Privacy Policy explains how Iris Edge Studios ("we", "us", "our") collects, uses, and protects information when you use the mobile game Pinteza (the "App") on iOS and Android. We have tried to write this in plain language. If anything is unclear, contact us at legal@pinteza.app.

1. Summary

2. Who we are (Data Controller)

The data controller responsible for your information is Alexandre Paiva, trading as Iris Edge Studios, an individual entrepreneur established in Portugal at Rua Celadias 7, Canelas Baixo, 4540-251 Canelas, Arouca. You can reach us at legal@pinteza.app for any privacy question or request.

3. Information we collect

We do not ask you for, or collect, your name, email address, phone number, contacts, photos, precise (GPS) location, or microphone/camera data in the App. The App collects the following automatically, through our own server and the third-party services described in §5:

3.1 Usage and gameplay data (analytics)

Anonymous, aggregated events about how the game is played, for example: app opens, game/screen views, games started and finished, results shared, in-game progress (e.g. streaks, achievements), and interactions with menus. This is collected via Google Firebase Analytics to help us understand and improve the game.

3.2 Device and technical information

Device model, operating system and version, app version, device language and region settings, screen information, and similar technical data. Your approximate location (country/region level only) may be inferred, from your IP address, both by our analytics provider and by our own daily-word server (see §5), on their servers, we do not collect or store GPS/precise location, and the App requests no location permission.

3.3 Identifiers

• A Firebase installation identifier generated by the analytics/crash services to distinguish devices for analytics and crash grouping. This is not your name and is not an advertising identifier.
• An anonymous, randomly generated player ID created by Firebase Authentication. It is used for two things: Duo (head-to-head) mode, so two devices can join the same match in real time, and online result submission (§3.8), so your results can be compared with other players' and so the same game is not counted twice. This is not your name, it is not an advertising identifier, and it is not linked to your identity. It is created the first time you finish a puzzle or start a Duo match, not when you install the App.
• A match code for Duo, which you choose to share so that a friend can join your match.

3.4 Crash and diagnostic data

If the App crashes or misbehaves, Google Firebase Crashlytics collects diagnostic information such as the crash stack trace, device state, device model and OS version, and an anonymous installation identifier, so we can find and fix the problem.

3.5 Data stored on your device and device backups

Your game saves, streaks, scores, achievements, word collection, settings, and in-progress games, are stored locally on your device. So that your progress can survive a reinstall or a new phone, this local data may be backed up through your own device account using the operating system's standard backup features, namely iCloud on iOS and Android Auto Backup / Google Drive on Android. That backup is controlled by your Apple/Google account settings, is not accessible to us, and is not transmitted to our own servers. You can disable it in your device settings, and uninstalling the App removes the local copy.

3.6 Launch notification list (website only)

If you choose to give us your email address on our website to be notified when the app launches, we store that email only to send you launch updates. We do not use it for advertising, we do not share or sell it, and we delete it after launch or on request. To be removed at any time, email legal@pinteza.app. The list is held on our website hosting provider (Cloudflare). This is the only place we ask for an email address, and only if you provide it.

3.6.1 Website language preference

When you choose English, Portuguese (Portugal), or Portuguese (Brazil) in this website's language menu, a first-party pinteza_locale cookie is stored in your browser for up to one year. It contains only the selected language code and is used only to show that language when you next open the homepage. It is not used for analytics, advertising, or cross-site tracking. You can remove it in your browser's cookie settings; choosing another language replaces it.

3.7 Word reports (website only)

If you use the in-app Report a word link, it opens a short form on our website. When you submit it, we store the word you reported, the type of issue you selected, any optional note you add, and, to help us find it, your app version, language, and your browser's user-agent string. We use this only to review and improve the word lists; we do not use it for advertising and do not sell it. Please do not put personal information in the optional note. This data is held on our website hosting provider (Cloudflare). To have a report removed, email legal@pinteza.app.

3.8 Gameplay results sent to us (the online comparison)

When you finish a Daily or Caos puzzle, the App sends a short summary of that one game to our own server. Sprint runs are recorded the same way, for a feature we plan to add later. Results are recorded automatically when a game finishes. Each one is deleted 90 days later (see §8), and you can ask us to delete yours sooner (see §11).

What is sent: which puzzle it was, meaning the game mode, the puzzle's date (or week, for Caos), the language you are playing in, and the word length; how it went, meaning whether you solved it, how many guesses you used, how long the game took, and your score; and, technically, the app version and the anonymous player ID described in §3.3.

What is not sent, and not stored: not the words you guessed, and not the answer. Not your IP address, our server has to receive the request over the internet like any website does, but the address is not stored with your result. No browser/user-agent string, no device fingerprint, and no location of any kind. Nothing at all from Practice (Treino) or Duo, those results are never submitted.

Why we do it: so that the end-of-game card can tell you how you did against everyone else who played the same puzzle, for example that you were first today, or in the top 10%. That line is worked out from anonymous totals for that puzzle. We never show you another player's result, and we never show your individual result to anyone else.

3.9 Purchases (Pinteza Plus)

Pinteza Plus is an optional one-time purchase. The payment itself is taken by Apple or Google, not by us. We never see your card, your billing address, your Apple Account or your Google account, and no payment details ever reach our servers.

To know whether you own Plus, to restore it on a new phone, and to remove it if a purchase is refunded, we use RevenueCat, Inc. (United States), a purchase-management service. When you open the Plus screen, buy Plus, or tap Restore purchases, the following is processed:

• a RevenueCat App User ID, a random identifier RevenueCat generates for your installation. It is not your name, it is not an advertising identifier, and it is not linked to your identity;
• the purchase receipt or token issued by the App Store or Google Play, the product identifier, which store you bought from, the country of your store account, the price and currency the store charged, and the dates of purchase, refund and restore;
• your device platform, operating system version and app version, so the entitlement can be matched to the right store account.

Tapping Restore purchases is itself enough to create that identifier, even if you never buy anything. Your entitlement is also cached on your own device so that Plus keeps working offline.

We do not use any of this for advertising or profiling. Records connected to a sale are kept for as long as tax and accounting law requires us to keep them, which can be longer than the retention periods in §8 and can survive a deletion request.

3.10 How you found us (Android only)

On Android, the first time you open the App it reads the Google Play install referrer, a short string Google Play attaches to an install when you arrive from a link we published. We use it for two things: to carry a Duo invite code through the install so that a shared link still works after you download the game, and to record in our analytics which campaign or link an install came from. It contains no name and no advertising identifier.

4. How we use information

• operate and provide the game, including real-time matchmaking for Duo mode;
• show you how your result compares with other players who played the same puzzle;
• understand how the game is used so we can improve features, balance, and performance;
• detect, diagnose, and fix crashes, bugs, and stability issues;
• maintain the security and integrity of the App;
• comply with legal obligations.

We do not use your information for advertising, profiling for marketing, or automated decisions that produce legal effects about you.

5. Third-party services we use

We rely on the following Google Firebase services, provided by Google LLC / Google Ireland Limited:

We use RevenueCat, Inc. (United States) to manage the Pinteza Plus entitlement: to check whether you own it, to restore it on a new device, and to withdraw it if a purchase is refunded. The data involved is described in §3.9. See revenuecat.com/privacy.

We also use Cloudflare (Cloudflare, Inc.) to host this website and to run the small server that delivers each day's word to the App (pinteza.app/api/daily). When the App fetches the daily word, and when you browse this site, Cloudflare processes your IP address, a coarse timezone inferred from that IP (used only to decide which calendar day's word you may load, never stored as your location), and standard request logs. Cloudflare acts as our hosting and processing provider; we do not use this to identify you or to advertise. See cloudflare.com/privacypolicy.

The same Cloudflare account runs the small server that records a finished game and returns your comparison (pinteza.app/api/result), described in §3.8. The one-game summary and the anonymous per-puzzle totals are stored in Cloudflare D1, Cloudflare's database service. Your IP address is not stored with your result.

On Android, the App may show Google Play In-App Review, Google's own rating prompt. It shows the store's rating sheet and collects no personal data for us.

Backups of your local save may also be processed by Apple iCloud (Apple Inc.) or Google Android Backup (Google LLC) under your own device account, as described in §3.5. These providers process data under their own terms and privacy practices. Google's handling of Firebase data is described at firebase.google.com/support/privacy and policies.google.com/privacy. We do not share your information with any other third parties except where required by law, or to protect our rights, safety, or property.

6. Legal bases for processing (EU/EEA & UK users)

• Legitimate interests (Art. 6(1)(f)): to run, secure, debug, and improve the App using anonymous analytics and crash diagnostics, and to show you how your result compares with other players who played the same puzzle, in a way that does not override your rights. You have the right to object to processing on this basis at any time (Art. 21). Email legal@pinteza.app and we will delete the results held against your anonymous player ID; uninstalling the App stops anything further being sent.
• Performance of a contract (Art. 6(1)(b)): to provide Duo (head-to-head) matches when you choose to start or join one, and to sell, deliver, restore and, where refunded, withdraw the Pinteza Plus purchase described in §3.9.
• Legal obligation (Art. 6(1)(c)): to keep the records connected to a sale for as long as tax and accounting law requires.
• Consent (Art. 6(1)(a)): where consent is required (for example, if we introduce advertising or non-essential tracking in the future), we will ask for it first and you may withdraw it at any time.

7. Advertising and purchases

The App contains no third-party advertising and does not collect an advertising identifier. Should we add advertising in a future release, we will update this Privacy Policy, disclose the partners and identifiers involved, and present an appropriate consent choice before any such data is collected, in line with applicable law.

The App does contain one optional in-app purchase, Pinteza Plus. It is not advertising and it is not used for advertising. What is processed when you buy or restore it is set out in full in §3.9, and the purchase terms are in our Terms of Use.

8. Data sharing, retention, and international transfers

• Sharing: We do not sell, rent, or trade your information. Data is processed only by us and the services listed in §5.
• Retention: Analytics and crash data are retained for the period set in our Firebase configuration (Firebase Analytics default event-data retention is up to 14 months; crash data is retained per Crashlytics' policy). Duo match data is transient: the App deletes a match when it ends, and a match that is abandoned mid-way is cleared when it is next seen to be stale rather than at a guaranteed moment. Local saves and their device backups remain until you delete them, disable backup, or uninstall the App.
• Retention of gameplay results (§3.8): a result stored against your anonymous player ID is deleted automatically 90 days after it is recorded, and sooner if you ask us to delete it (§11). When a result arrives it is also added to the running totals for that puzzle, for example how many players solved it and in how many guesses. Those totals are plain counts, they carry no identifier of any kind and cannot be traced back to you or to your device, so we keep them indefinitely. Deleting your results removes the rows that identify you and leaves those anonymous counts as they are.
• Retention of purchase records (§3.9): RevenueCat keeps the entitlement record for as long as you may need to restore it, because a one-time purchase has no expiry and must be restorable on any future device. Records connected to a sale are also kept for as long as Portuguese tax and accounting law requires. This is a legal obligation under Art. 6(1)(c) and it can outlast a deletion request.
• International transfers: Firebase, RevenueCat and the device-backup providers process data on Google's and Apple's servers, which may be located outside your country, including in the United States and the European Union. Our website and our daily-word and result servers run on Cloudflare's network, which may likewise store and process data outside your country. Where required, these providers rely on safeguards such as the EU Standard Contractual Clauses for international transfers.

9. Security

We use reasonable technical and organizational measures to protect information, including encrypted (HTTPS/TLS) transmission to our service providers and access controls on backend data. No method of transmission or storage is 100% secure, but we work to protect your information and continuously improve our safeguards.

10. Children's privacy

The App is intended for users aged 13 and older and is not directed to children under 13 (under 16 in some EU/EEA countries where a higher age applies). We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided us with information, contact us at legal@pinteza.app and we will delete it.

11. Your rights and choices

Depending on where you live, you may have the right to: access, correct, delete, restrict or object to processing, data portability, withdraw consent, and lodge a complaint with your national data protection authority.

California residents (CCPA/CPRA): you have the right to know, delete, and correct your personal information, and to opt out of "sale"/"sharing". We do not sell or share your personal information as those terms are defined under California law, and we do not discriminate against you for exercising your rights.

Deleting the results you have sent us: the quickest route is inside the App, under Settings, Data & Backup, where Delete my online results removes every result held against your anonymous player ID immediately. You can also email legal@pinteza.app and we will delete every result held against your anonymous player ID (§3.8). Because we never ask for your name or email address, that ID is the only thing those results are filed under, so please tell us as much as you can about your play (the language you play in, and roughly which dates) to help us find them. Every result is deleted automatically 90 days after it is recorded in any case, and uninstalling the App stops anything further being sent. The anonymous per-puzzle counts described in §8 stay as they are, because they hold no identifier and there is nothing in them to trace back to you.

How to exercise your rights / request deletion: email legal@pinteza.app. Because we do not collect direct identifiers, we may ask for information (such as your approximate region and device type, or roughly which dates you played) to help us locate any associated data. You can also remove all locally stored game data at any time by uninstalling the App, and disable device backups in your Apple/Google account settings.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide notice within the App or on our website. Continued use of the App after an update means you accept the revised policy.

13. Contact us

Iris Edge Studios
Email: legal@pinteza.app