Privacy Policy
Last updated: 21 October 2026
In short:
- You can play Meandro without an account. Your progress then stays on your device.
- The app sends anonymous usage events, so we can see which features work. They never include your name or email.
- If you create an account, we store your email and your game progress, so it can sync between your devices.
- If you join the leaderboards, other players see the nickname you choose and your results. Never your email.
- Ads are optional. They play only when you tap to watch one for a reward, and never on the daily puzzles. Google asks for your consent where the law requires it.
- Meandro+ is bought through Google Play or the App Store. We never see your payment details.
- Reminders are scheduled on your device. They never go through a server.
- We don't sell data. You can delete your account and its data at any time, in the app.
1. Who we are
Meandro is a daily puzzle game made by an independent developer based in Portugal ("we", "us"). We are the data controller for the personal data described here.
Contact: [email protected]. If you need the controller's full name and postal address, for example to exercise your rights or to file a complaint, write to us and we will give them to you.
This policy covers the Meandro app on Android, iOS and the web, and the website meandro.app.
2. What we collect and why
2.1 Playing without an account
Your results, streaks, best times, settings (reminder, theme, trail color), unfinished puzzles and your daily practice and archive allowance are saved only on your device. The app also creates a random id for the installation, which is stored on the device. We can't see any of this unless you sign in (see 2.3).
2.2 Anonymous usage analytics
The app sends usage events to PostHog, our analytics provider. We use them to understand how the game is played: for example, how many players solve each daily puzzle, how long puzzles take, whether reminders help and how often ads and Meandro+ are chosen. That tells us what to improve.
The events are:
- Play: app opened, daily puzzle started or solved (with difficulty, time, hints used, streak and puzzles solved that day), perfect day, streak freeze used, practice unlocked, practice puzzle started or solved, daily practice limit reached, result shared.
- Leaderboards: leaderboard opened (with the tab and where it was opened from), nickname set, leaderboard failed to load.
- Ads and Meandro+: rewarded ad watched, closed early or unavailable (with what it was for), streak restored, Meandro+ page opened (with where from), purchase made, cancelled or failed (with annual or lifetime), purchases restored, archive opened, archive day picked, archive puzzle solved, stats opened, trail color changed.
- Settings: reminder prompt answered, reminder turned on or off, reminder hour changed, theme changed.
- Account: signed in (with the method: email, Google or Apple), signed out, account deleted, sync failed.
- App lifecycle: app installed, updated, opened and sent to the background.
Each event comes with a random analytics id created by the app, and with basic technical details: app version, operating system and version, device type and model, screen size, language and time zone.
The events never contain your name, your email, your nickname, prices or anything you type. We never link them to your account. PostHog is set to discard IP addresses, so they are not stored with the events. Session recording is off.
Legal basis: our legitimate interest in understanding and improving the game (GDPR Art. 6(1)(f); LGPD Art. 7, IX). The data is anonymous to us and limited to gameplay. You can object at any time by writing to us. The app has no switch to turn analytics off yet.
2.3 Account and sync (optional)
An account lets you keep your progress when you change phones, play on more than one device and join the leaderboards. You can sign in in three ways:
- Email code: we store your email address and send a one-time code to it.
- Google: Google shares your email address, your name, your profile picture link and your Google account id with us. We use only the email and the id to identify your account. The other details are stored with the account but not used.
- Apple (iOS): Apple shares your Apple account id and an email address. This can be a private relay address if you choose to hide your email.
When you're signed in, the app syncs your game progress with your account:
- daily results (date, difficulty, time and hints used), including puzzles played from the archive;
- current and best streak, streak freezes held and used, and days restored with a streak restore;
- best practice times;
- how many practice puzzles each of your devices has solved (counted by the random installation id);
- your position in the list of hard practice puzzles.
The reminder setting, the theme, the trail color and unfinished puzzles stay on each device and are not synced.
Our account provider, Supabase, also records technical logs for sign-ins and requests, such as IP address, time and device type. They are used for security and to fix errors, and kept only briefly.
Legal basis: providing the service you asked for (GDPR Art. 6(1)(b); LGPD Art. 7, V).
2.4 Leaderboards (optional)
When you're signed in, your results for today's and yesterday's daily puzzles (difficulty, time and hints used) are posted to the leaderboards, together with your current streak, best streak, streak freezes and the date of your last daily solve.
The boards list only players who have chosen a nickname. Anyone using Meandro, signed in or not, can see your nickname next to those results and your streak. Before you choose a nickname, your results and streak are stored with your account, but nobody else can see them. Your email and your account details are never shown. Choose a nickname that doesn't identify you if you'd rather stay anonymous.
Legal basis: providing the leaderboards you chose to join (GDPR Art. 6(1)(b); LGPD Art. 7, V).
2.5 Rewarded ads (optional)
Some extras can be unlocked by watching a short ad: more practice puzzles for the day, restoring a broken streak, or playing a recent archive day. An ad is requested only when you tap to watch one. The daily puzzles never show ads, and the app has no banner or pop-up ads.
The ads come from Google AdMob. Before the first ad, where the law requires it (for example in the EU, the UK and Brazil), Google shows a consent form where you choose whether ads may be personalized and whether data may be stored on your device. You can change that choice at any time in Settings → Ad privacy choices.
When an ad is requested, Google receives your IP address, your device's advertising identifier (on Android), device and app details and how you interact with the ad. Google uses this to show the ad, measure it, prevent fraud and, only if you agreed, personalize ads. The app does not ask for permission to track you on iOS, so ads there don't use the iOS advertising identifier. Google acts as an independent controller for this data: see how Google uses information from apps that use its services. You can also reset or delete your advertising identifier in your device's settings.
Ad rewards are given in the app. We don't receive any data from Google about you personally.
Legal basis: your consent for personalized ads and for storing data on your device (GDPR Art. 6(1)(a); LGPD Art. 7, I); otherwise our legitimate interest in funding a free game with ads you choose to watch (GDPR Art. 6(1)(f); LGPD Art. 7, IX).
2.6 Meandro+ purchases
Meandro+ is sold through Google Play or the App Store. They handle the payment under their own terms and privacy policies. We never receive your card or payment details.
We use RevenueCat to check which purchases are active, so Meandro+ works on your devices and can be restored. RevenueCat receives the store's purchase records (product, price, currency, country, purchase and renewal dates, transaction ids), device and app details, and an app user id. That id is random if you're not signed in. If you're signed in, it is the internal id of your Meandro account, never your email.
Legal basis: providing what you bought (GDPR Art. 6(1)(b); LGPD Art. 7, V), and keeping records the law requires (GDPR Art. 6(1)(c); LGPD Art. 7, II).
2.7 Daily reminders
If you turn on reminders, the app asks your device for permission to show notifications and schedules them locally, at the hour you choose. No notification token or reminder data is sent to us or anyone else. You can turn reminders off in Settings, or in your device's settings.
2.8 Emails to support
If you write to [email protected], we receive your email address and your message. We use them only to reply to you. Messages are forwarded by Cloudflare and stored in our Gmail (Google) inbox.
Legal basis: our legitimate interest in answering you (GDPR Art. 6(1)(f); LGPD Art. 7, IX).
2.9 This website
meandro.app is hosted by Cloudflare. The website uses no cookies, no analytics and no third-party scripts. Cloudflare processes your IP address and browser details to deliver the pages and protect them from abuse.
2.10 What we don't collect
No precise location, contacts, photos, payment card details or crash reports. The advertising identifier is used only by Google for ads, as described in 2.5; we never receive it. No profiling and no automated decisions about you, other than Google's ad personalization if you agreed to it.
3. Who processes the data
We use these service providers. Except where noted, they process data for us under their data processing terms.
| Provider | What for | Where |
|---|---|---|
| PostHog | Anonymous usage analytics | EU (Frankfurt, Germany) |
| Supabase | Accounts, synced progress and leaderboards | EU (Ireland) |
| Resend | Sending sign-in code emails | United States |
| RevenueCat | Checking Meandro+ purchases | United States |
| Google AdMob | Rewarded ads and the ad consent form (independent controller) | Global |
| Cloudflare | Website hosting, forwarding support emails | Global network |
| Google (Gmail) | Support inbox | Global |
If you sign in with Google or Apple, that company also processes the sign-in under its own privacy policy.
The app is distributed through Google Play and the App Store, which handle downloads and payments under their own policies.
We don't sell or rent personal data. Data is shared with Google for ads only as described in 2.5.
4. Transfers outside the EU
Analytics, accounts and leaderboards stay in the EU. Resend, RevenueCat, Cloudflare and Google may process data in the United States or other countries. Those transfers are protected by the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Account, synced progress, nickname and leaderboard results: until you delete your account.
- Analytics events: deleted automatically after the retention period of our PostHog plan, currently 1 year.
- Purchase records (RevenueCat): as long as Meandro+ is offered, so purchases can be restored, and longer where tax or accounting law requires it.
- Ad data: kept by Google under its own policies.
- Sign-in and email logs (Supabase, Resend): a few days.
- Support emails: as long as needed to handle your request, then deleted within 2 years.
- Data on your device: until you uninstall the app or clear its data. Signing out clears the progress on that device.
6. Your rights
Under the GDPR and Brazil's LGPD, you can:
- get a copy of your personal data, including in a portable format;
- correct it;
- delete it;
- object to, or ask us to limit, how we use it;
- withdraw consent where we rely on it (for ads, in Settings → Ad privacy choices);
- get information about who we share it with.
Write to [email protected] from the email address of your account. We reply within one month. Because analytics events aren't linked to you, we usually can't find them for a specific person.
You can also complain to a data protection authority: in Portugal the CNPD, in Brazil the ANPD, or the authority where you live.
7. Deleting your account
In the app, go to Settings → Account → Delete account. This permanently deletes your account, your synced progress, your nickname and your leaderboard results at once. It doesn't cancel a Meandro+ subscription: do that in Google Play or the App Store. You can also ask by email.
8. Children
Meandro is meant for players aged 13 or over and is not directed at children. Children under 13 must not create an account. In Brazil, players under 18 need a parent's or guardian's consent to create an account or make a purchase. If you think a child has given us personal data, write to us and we will delete it.
9. Security
Data is encrypted in transit (HTTPS). Each account can change only its own progress and leaderboard entries, enforced in the database. Keys with full access to the database never ship in the app. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the authorities as the law requires.
10. Changes
We'll update this page when the app changes what it collects. We'll change the date at the top. For important changes, we'll also tell you in the app, where we can, before they take effect.
11. Contact
Meandro · [email protected]