Car Guesser — Privacy Policy

Effective 23 October 2026

Car Guesser is a car-guessing game for Android (and, where offered, the web), for players of all ages. It is operated by Jens Sjödin, Seglaregatan 10, 414 54 Göteborg, Sweden ("we", "us"), who is responsible for your personal data. Questions about this policy or your data: carguesserinfo@gmail.com.

This policy says what the app collects, why, who else receives it, and what you can do about it. It describes the app as it actually works; if the app changes what it collects, this policy changes first.

In short

• You can play without signing in. The app then gives you an anonymous guest account: a random ID, with no name or email attached.
• The app asks your month and year of birth the first time it opens. The answer stays on your device and is never sent to us. It decides how adverts are requested and whether you can sign in.
• Children under 13 always play as guests. They cannot sign in, have no nickname and are not ranked, and their adverts are child-directed and never personalised.
• Signing in with Google is optional (13 and over). If you do, we receive the email address of your Google account. It is never shown to other players.
• Leaderboards show a nickname, never your name. The app makes one up for you (for example "SwiftPiston42"). You can change it.
• Adverts on Android are served by Google AdMob. Google collects device identifiers and usage data to show and measure them. Adverts are personalised only for players 16 and over who agree in Google's consent message, which is shown in the EEA, the UK and Switzerland. Everywhere else, and for everyone under 16, they are non-personalised.
• "Remove ads" is bought through Google Play. We never see your payment details.
• No analytics, crash-reporting or tracking tools are built into the app apart from Google's advertising SDK.
• You can delete your account and progress at any time, in the app or on the web, and it happens at once (section 5). Guest accounts nobody uses for 12 months are deleted automatically.
• We do not sell your personal information.

1. What we collect and why

1.1 Your month and year of birth (stays on your device)

The first time the app opens, it asks when you were born: a month and a year, typed freely. The answer is kept only on your device and is never sent to us or anyone else. The app uses it for two things: to request adverts suitable for your age (see 1.6), and to keep children under 13 as guests (see section 6). You can correct it under Birthday in your profile; from inside the app it can be changed to a younger age but not an older one, and clearing the app's data asks again.

1.2 Guest account (everyone who plays online)

On first launch the app opens an anonymous account with our backend provider, Supabase. That account is a randomly generated ID. It carries no name, email or phone number. We use it to save your game progress (see 1.4) so that the progress is kept safely off the device. If you sign out, or delete your account, the app starts a fresh guest account.

1.3 Signing in with Google (optional, 13 and over)

If you choose Sign in with Google, Google tells our sign-in provider (Supabase) who you are. Supabase stores what Google provides at sign-in: your email address, your Google account ID and, where your Google account supplies them, your name and profile picture. We use your account to keep your progress across devices and to put you on the leaderboards. Children under 13 are not offered sign-in, and an account already signed in on a child's device is signed out.

The app shows your email address only to you, on your own device ("Signed in as …"). It never appears on a leaderboard or anywhere another player can see it. We do not use your name or profile picture for anything.

When you first sign in, the app gives you a nickname made from random words and digits, never from your name or email. You can change it in Edit name. Your nickname is public (see 1.5), so do not put your real name in it unless you want it shown.

1.4 Game progress

To keep your progress, the app saves the following to your account, whether guest or signed in:

• the date you last played and your daily-play streaks;
• your Zoom Out record: questions shown, points won, which cars you have identified, wins, best scores and runs, and fast answers;
• which cars you have already been shown, so that you are not shown them again too soon;
• your Daily Car result.

We use this only to run the game: to save your progress, to award badges and to rank leaderboards.

1.5 Leaderboards (signed-in players only)

Signed-in players are ranked on all-time and weekly boards. Anyone using the app can see, for each ranked player: nickname, score, rank and the player's random account ID. The app uses that ID only to highlight your own row. Guests, and so all children under 13, are never ranked.

For the weekly board, the app also creates a random installation ID on your device, sent only while you are signed in. It tells the server which reports came from the same install, so that nothing is counted twice. It is a random number and contains no information about your device.

1.6 Adverts (Android)

The Android app shows adverts from Google AdMob: an advert you can choose to watch for a reward (an extra life, or keeping a broken daily streak), and a full-screen advert shown after some games, never when the app opens. The app does not start Google's advertising SDK, or ask for an advert, until you have answered the birthday question.

To serve, measure and protect those adverts, Google's SDK collects from your device:

• your device's advertising ID and app set ID (for players 16 and over; see below);
• your IP address, which can be used to estimate your general location;
• your interactions with the app and the adverts, such as app launches, taps and video views;
• diagnostic information about the app and the SDK's performance.

Google uses this data for advertising, analytics and fraud prevention, under its own policy: https://policies.google.com/technologies/partner-sites.

Under 16, adverts are never personalised. For a player under 13, every advert request is marked as directed at a child; for a player of 13 to 15, it is marked as from a user under the age of consent. Either way, Google turns off personalised and remarketing adverts, does not receive the advertising ID, limits adverts to those rated suitable for general audiences (G), and does not show its consent message.

From 16, personalised adverts need your consent. In the EEA, the UK and Switzerland, the app shows Google's consent message the first time you open it. Adverts are personalised only if you agree to all three of these: storing information on your device, building a personalised-ads profile, and selecting personalised ads. Anything else gives you non-personalised adverts. That includes saying no, not answering, and the app being unable to read your choice.

Outside the EEA, the UK and Switzerland, the app currently asks Google for non-personalised adverts only. Even non-personalised adverts still use identifiers. Google uses them to limit how often you see an advert, to produce aggregated ad reports, and to fight fraud and abuse.

Changing your mind: where Google's consent message applies to you, your profile shows Ad privacy choices, which reopens it. You can also reset or delete your advertising ID in your device's Android settings.

The iPhone version, if available, requests non-personalised adverts only. The web version shows no adverts.

1.7 Purchases

Remove ads is a one-off purchase made through Google Play, with Google Play's own approval for family members where a parent has set it up. Google handles the payment under its own terms. We never receive your card or payment details. The app asks Google Play whether your Google account owns "Remove ads" and remembers the answer on your device only. Nothing about your purchase is sent to our servers.

1.8 Car photographs and game data

The app downloads car photographs and game data from our file storage (Supabase Storage). Like any download, those requests carry your IP address. We do not use it to identify you.

1.9 Sharing results and challenges

If you share a result, a challenge or a share card, the app hands it to your device's own share sheet, and you choose where it goes. The app itself sends nothing. A challenge link contains only a code for the cars, the score to beat and a check code. It contains nothing about who you are.

1.10 Stored only on your device

The app keeps the following in its own storage on your device: your month and year of birth, your progress, your best score, an unfinished game, your "Remove ads" status, the weekly-board totals and installation ID, the Daily Car attempt, cached game data and photos, and your sign-in session. Google's consent tool also stores your ad-consent choices on the device. Uninstalling the app, or clearing its data, removes all of it. If Android backup is turned on for your device, Android may include this data in your device backup.

1.11 What we do not do

The app does not ask for your location, contacts, camera, microphone, photos or files. It contains no analytics, crash-reporting or attribution tools other than Google's advertising SDK described above. We do not sell your personal information, and we do not use it for anything this policy does not describe.

2. Who else receives data

Supabase stores our data in the European Union, in Stockholm, Sweden (Amazon Web Services' eu-north-1 region). Google and Cloudflare may process data in other countries, including the United States, under their own safeguards, such as the EU Standard Contractual Clauses.

3. Legal bases (EEA, UK and Switzerland)

• Performing our contract with you (providing the game): your guest or signed-in account, game progress, nickname and leaderboards.
• Consent: personalised adverts, and storing or reading information on your device for them. You can withdraw consent at any time in Ad privacy choices.
• Legitimate interests: showing non-personalised adverts that pay for a free game, keeping the service secure and free of fraud, and deleting guest accounts nobody uses.

4. How long we keep data

• Account and game progress: for as long as the account exists. Uninstalling the app does not delete your account on our servers; you can delete it yourself at any time (see section 5).
• Guest accounts: a guest account with no activity for 12 months is deleted automatically, with its progress. Activity means the app opening it or saving progress to it.
• Backups: our database's backups are kept for a limited time; a deleted account is gone from them within 30 days.
• Data on your device: until you uninstall the app or clear its data.
• Advertising data: kept by Google under its own retention policies.

5. Your rights and deleting your data

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, to withdraw consent, and to complain to a data-protection authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY, imy.se); you can also complain to the authority where you live. To use any of these rights, email us at carguesserinfo@gmail.com.

How to delete your account

1. In the app: on the home screen, tap your profile picture in the corner, then Delete account (or Delete progress if you play as a guest), and confirm.
2. On the web, without the app: go to carguesser-legal.pages.dev/delete, sign in with the Google account you use in Car Guesser, and confirm.
3. By email: write to carguesserinfo@gmail.com from the email address of the Google account you signed in with, with the subject "Delete my Car Guesser account". We delete it within 30 days and confirm by email.

What is deleted, and when

Deleting in the app or on the web takes effect immediately. It deletes your account (including the email address, Google account ID, name and picture our sign-in provider holds), your nickname, your leaderboard entries and weekly results, and your game progress. In the app, the progress stored on your device is cleared too, and you go on playing as a new guest. We keep nothing about a deleted account, except that copies in our backups are removed within 30 days. Data Google holds for adverts is under Google's control; you can reset or delete your advertising ID in your device's settings.

If you only ever played as a guest, your guest account is not linked to your name or email, so only the device it is on can find it: delete it in the app with Delete progress. Uninstalling the app or clearing its data deletes everything stored on your device, and the guest account it leaves on our server is deleted after 12 months without activity.

You can change your nickname at any time in Edit name.

6. Children

Car Guesser is a game for all ages, including children. The app asks every player's month and year of birth before anything else, keeps the answer on the device, and treats a player under 13 as a child:

• A child always plays as a guest. The app offers no sign-in, and signs out any Google account already on the device, so we never receive a child's name or email, and a child has no nickname and is never on a leaderboard.
• What we receive from a child's game is the game progress described in 1.4, under a random guest ID, which we use only to keep that progress. It is deleted when the child (or a parent) taps Delete progress in the app, or after 12 months without activity.
• A child's adverts are requested as directed at a child: never personalised, without the advertising ID, and rated for general audiences (G). Google shows a child no consent message.
• Other players' nicknames are shown to everyone on the leaderboards, children included.

Players of 13 to 15 can sign in, but their adverts are never personalised (see 1.6). A parent who wants anything deleted, or who has a question about their child's data, can contact us at carguesserinfo@gmail.com.

7. US state privacy rights (including California)

In the last 12 months we have collected the categories of personal information described in section 1: identifiers (account ID, installation ID, email address, advertising ID, IP address), internet or other electronic network activity (interactions with the app and adverts), and approximate location derived from IP address (collected by Google for adverts). We do not sell personal information for money.

Outside the EEA, the UK and Switzerland, the app currently requests non-personalised adverts only, and does not share personal information for cross-context behavioural advertising. You have the right to know about, to correct and to delete your personal information, and not to be discriminated against for using these rights. Contact us at carguesserinfo@gmail.com.

8. Security

All traffic between the app and our servers, and between the app and Google's advertising SDK, is encrypted (HTTPS/TLS). Our database lets each player read and change only their own records, and an account can be deleted only by a request signed in as that account. Leaderboards are built on the server and show only nickname, score, rank and account ID.

9. Changes

When we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell you in the app before it takes effect.

10. Contact

Jens Sjödin · Seglaregatan 10, 414 54 Göteborg, Sweden · carguesserinfo@gmail.com