Privacy policy

Your account

When you open the app, it signs you in with Game Center (iPhone) or Play Games (Android). We receive the player ID that service gives you and your player name, which we use as the start of your username. If neither is available, we create a guest account that is not tied to any service.

If you link a Google or Apple account, we receive that account’s ID and your first name. We do not ask Google or Apple for your email address, and we never see your password for any of these services.

An account that was registered with an email address and a password keeps that email address and the password, stored hashed so that nobody can read it.

With every account we keep your username, avatar and paper doodles, language, units, XP and level, and the date you joined.

What you do in the game

Your answers, the question each one answered, when and how fast you answered, the result of every game, your Daily and Spread runs, your Retry answers, your friends, friend requests and blocks, and the likes, dislikes and problems you report on questions.

To keep games fair, a record of how each answer was typed: the timing of each key press, including the ones that were erased. In online battles we also record the timing of your connection (the delay to our server and when you dropped out and came back) and how long matchmaking took.

Pass the Phone games are played on your phone, but the finished game is sent to us, including the team names typed in it. The app also tells us when a Pass the Phone game or a Spread run starts and how far it got.

Your votes in polls run by TV shows, if you take part, and any message you send us from the app, with the app version, the phone’s system version and the language it was sent in.

Technical data

IP addresses: we record the IP address your account connects from, with when we first and last saw it and how often. We use it to keep the game secure and fair, for example to spot several accounts run by one person or an attack on our servers.

Every request from the app carries the app version, its build number and the platform (iOS or Android). A sign-in session stores the description your phone sends of itself (its user agent).

Our servers keep a log of the requests they answer: the address that was asked for, the result, how long it took and the account number. The log does not contain IP addresses or the content of what you send. A few lines also contain your username, such as when you join the matchmaking queue.

Error reports and performance data: when something goes wrong in the app, an error report is sent to Sentry with your account number, your username, your IP address, the model and system version of your phone, the app version, the screen you were on and the game you were playing. For half of all app sessions, Sentry also receives performance data: how long the app took to start, where it stuttered and how long requests took. Our servers report their own errors with the account number, never the content of a request. When you leave the app, it also sends our servers a performance report with your account number: how long it took to start, how smoothly it ran, where it paused, and the model, chip, memory and screen of your phone.

Updates: the app checks for updates to itself. That check sends the app version, the platform, a random number created when the app was installed and a number derived from the phone that only decides which group of phones gets an update first. Neither number is linked to your account.

On Android, the app reads once, from Google Play, the link you followed to install it. That is how a Daily played on the website, a TV show or a friend’s link reaches the app.

The app never accesses your location, contacts, photos, camera or microphone, and does not track you across other companies’ apps or websites.

The website

If you play the Daily or vote in a TV show’s poll on numeroo.io without an account, we create a guest identity with a random name. It is stored in your browser and on our server with the run you played or the vote you gave. It is not linked to your email or your name, because we never ask for them.

numeroo.io sets one cookie, which remembers the language you picked, and uses your browser’s storage to keep your guest identity and your last Daily result. Neither tracks you across other websites, and there is no analytics or advertising script on the site. Errors on the site are reported to Sentry, as in the app.

What we use it for

To run the game: to sign you in, pair you with an opponent, score a round, keep your progress, show your friends, and give you the same Daily as everyone else. This is performance of our agreement with you.

To keep the game fair, secure and working: key-press timing and connection timing let us tell a typed guess from a scripted one; IP addresses let us find second accounts and attacks; error reports, performance data and server logs let us fix crashes and slowness. This is our legitimate interest in a game that is playable and fair for everyone.

To improve the questions and the game: which questions people find hard, which answers are contested, and how each mode is actually played. We look at this in aggregate.

To send push notifications, only if you allowed notifications on your device. You can turn them off in your device settings at any time.

Who else sees it

Other players see your username, your avatar and the outcome of games you played with them. Your friends also see your level, whether you are online or in a game, and your Daily rank once they have played that day themselves. Nobody sees your IP address or how you typed. The staff of a TV show see how many people voted for each answer, never who.

We use these service providers, who process data only on our instructions: DigitalOcean (our servers, database and website, in the EU); Sentry (error reports and performance data, stored in the EU); Grafana Labs (our server logs); Cloudflare (delivering app updates); OneSignal (push notifications, identified by your account number); and Apple and Google (sign-in with Game Center, Play Games, Apple and Google, and the app stores). Where one of them handles data outside the EU, the transfer is covered by the European Commission’s standard contractual clauses.

We do not sell your data and we do not show you advertising.

How long we keep it

Your account and game data stay for as long as you have an account.

When you delete your account, we delete your username, email address, name, password, the Game Center, Play Games, Google and Apple IDs, your sessions, friends, friend requests, blocks, the messages you sent us and the IP addresses we recorded. Your games are kept under an anonymous number with no name attached, because battles belong to two players and answers tell us how hard a question is; they no longer identify you.

IP addresses are deleted a year after we last saw them, or with your account if that comes first. Error reports and performance data are kept for at most 90 days, and server logs for at most 30 days. Guest identities and their runs and votes are kept for as long as the results they took part in are meaningful.

Your rights

Under the GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask us to hand it over to you. You can delete your account yourself from the app’s settings. For anything else, write to [email protected] and we will answer within a month.

If you think we have not treated your data properly, you can complain to the Hellenic Data Protection Authority (dpa.gr) or to the authority in your own country.

Children

Numeroo is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has an account, tell us and we will delete it.

Changes

When this policy changes, the date at the top changes with it. If a change affects you, we will say so in the app before it applies.