Privacy policy
Scope and contact
Memo Guesser is a photo geography game. This notice covers the website and mobile apps. Updated 6 September 2026. Questions and privacy requests: beyoung.belcrew@gmail.com.
Photo library access
When you choose photos in the mobile app, Android may ask for media-location access and iOS may ask for Photos access. We read only the photos you select and their available saved locations to suggest map pins; we do not request your current device location or scan unselected photos. You can decline metadata access and place pins manually. Originals are processed one at a time in temporary private device storage, then removed after processing or cancellation; leftovers after an interrupted app process are cleaned on the next start. Prepared photos remain in editor memory until saved or closed. Only explicit Save uploads photos directly to your Google Drive. Photo locations become game data when you save the rounds, not installation analytics.
Installation analytics
We create a random installation UUID, separate from creator authentication, to count installations and activity. We collect coarse platform/channel, device category (not device model), OS family and major version, browser family on web, language and app version. First-touch and last non-direct attribution contain only a referring host and normalized UTM source, medium and campaign. Android may obtain these campaign fields from Google Play Install Referrer; iOS defaults to App Store organic attribution. We do not store the raw referrer or full query. Installation records have first/last activity timestamps and currently no automatic expiry. Daily activity rows are retained for 13 months and removed by scheduled maintenance; aggregated statistics may be retained indefinitely. These records are pseudonymous, not guaranteed anonymous: installation IDs can link to creator devices and game sessions.
Game data is different
To run games we store creator/device identifiers, player display names, titles, clues, rounds, game/session status, answers and map coordinates. Coordinates describe photos, guesses and map views, not background device location. If present, photo GPS metadata is read locally to suggest a pin; the chosen coordinates are sent as game data. Google Drive file IDs and optional resource keys are stored, and public sharing/media links are used to display the photos. Folder inspection processes file names and format metadata. These fields are not stored in the installation analytics payload. Game and session history has no fixed automatic expiry; the 13-month analytics limit does not apply to it.
Photos and Google authorization
Memo Guesser does not host or receive photo bytes on its backend and does not store Google OAuth access tokens in its database or application storage. Selected photos and conversions are processed temporarily on your device and uploaded directly to your Drive. Temporary buffers and native download files are cleared after use. Short-lived access tokens stay in application memory. Official Google SDK session state may remain in platform-managed storage to restore authorization. Disconnect Drive revokes access and clears app-held authorization, but does not delete your Drive files or change their public sharing. Google is an independent service with its own terms, security and retention practices.
Network services and website analytics
Servers and infrastructure process network information such as IP addresses to deliver requests, prevent abuse and operate securely. This is distinct from our analytics tables, which do not store IP addresses, full user agents, advertising IDs, player names, coordinates or Drive IDs. We do not promise an unverified retention period for operational logs. Google processes requests for authorization, Drive and image delivery. Map tiles and optional place searches contact map providers (OpenFreeMap and, by default, OpenStreetMap Nominatim), which receive network information and requested tiles or search text. Web fonts may contact Google Fonts; native fonts are bundled. On the website, a configured Google Analytics integration loads with analytics_storage and advertising consent denied by default. It may send cookieless page and game-event measurements to Google even with consent denied; this version has no consent-choice interface. Google may process network information under its own privacy policy. Native apps do not load Google Analytics, advertising SDKs or request ATT permission. We do not sell personal data or use cross-app advertising tracking.
Your choices and deletion
Use a nickname and share only photos and locations you are entitled to disclose. Public Drive links can be forwarded; revoke sharing or delete originals in Google Drive to stop access there. Deleting a game in Studio hides it (soft deletion) and stops active rooms, but retains the game, rounds, Drive IDs/resource keys, coordinates, clues, player names, answers and session history. Removing an individual round when no room is active deletes that round record, including its Drive identifiers, coordinates and clue; it does not erase prior answers or session history. Neither operation deletes Drive photos or revokes their public links. For a verified erasure request beyond these controls, contact beyoung.belcrew@gmail.com; we will explain what can be located and erased after checking ownership and any applicable limits. The app uses anonymous installation/device access rather than a Memo Guesser email/password account; Google connection is optional. Contact us to request access, correction, deletion or restrictions as applicable to your rights. We may need non-secret evidence of ownership to locate records. We cannot reliably identify an anonymous installation from an email alone; uninstalling or clearing browser data does not automatically delete server records and may lose access to your creator identity. Do not send access tokens, private photos or credentials. Tell us what you want removed and we will explain what can be located, verified and deleted, including any security/legal retention limits. Email requests themselves contain the address and information you choose to send.