Privacy Policy

Last updated: 30 September 2026

This policy explains what personal data the WTM? – Meme Club app for iOS and Android (“the app”) and this website process, why, and what choices you have. The data controller is Elermond Studio S.R.L. (“we”, “us”), reachable at neogenius24@gmail.com.

Short version: you can play without creating an account. We keep what we need to run matches, leaderboards and your progress, we use Google’s Firebase and AdMob to do that, and we never sell your data. You can delete your account and its data from inside the app.

1. What we collect and why

Data	Why	Legal basis (GDPR)
Account identifiers: an anonymous user ID; if you choose Sign in with Apple or Google, the email address and name that provider shares	Keep your profile, progress and matches linked to you across devices	Contract
Profile and game data: display name, avatar choice, level, coins, wins, match history, leaderboard scores	Run the game, show leaderboards and results	Contract
Multiplayer data: room codes, players in a room, the cards you play, and text or drawings you submit (custom situations, captions, doodles)	Run live matches; shown to the other players in that match	Contract
Usage and diagnostics: app events, device model, OS version, crash reports (Firebase Analytics, Firebase Crashlytics)	Fix crashes and improve the game	Legitimate interests
Push token (Firebase Cloud Messaging)	Send game notifications you allowed	Consent (system permission)
App integrity token (Firebase App Check with Apple App Attest / Google Play Integrity)	Block cheating and abuse of our servers	Legitimate interests
Advertising data: advertising ID (IDFA/GAID) and ad interactions, via Google AdMob	Show ads that keep the game free; personalised only with your consent	Consent (personalised ads); legitimate interests (non-personalised ads, fraud prevention)

Stays on your device only

Settings, language, your card collection progress, saved memes and saved situations are stored locally on your phone and are not uploaded to us.

Nearby tables

When you host a room, the app advertises the room code and your display name to nearby devices on the same Wi-Fi network (or, on iPhone, over Apple’s peer-to-peer Wi-Fi), so friends next to you can find it. Nothing else is shared, it stops when the room starts or closes, and your device asks for the “Local Network” permission first.

Invites

When you share an invite, the link contains only the room code. We don’t see who you share it with.

2. Ads, tracking and your choices

In the EEA, UK and Switzerland, we ask for consent through Google’s consent message before ads are personalised. You can change your choice any time in Settings → Privacy choices.
On iOS we ask permission through Apple’s App Tracking Transparency prompt. If you decline, we don’t access the IDFA and ads are not personalised with it.
Google’s use of data in ads is described at policies.google.com/technologies/partner-sites.

3. Who we share data with

We don’t sell or rent personal data. We share it only with service providers that process it for us:

Google (Firebase Authentication, Realtime Database, Analytics, Crashlytics, Cloud Messaging, App Check, and AdMob). Game data is stored in Google’s europe-west1 (Belgium) region.
Apple and Google as sign-in providers, if you choose to use them, and as app stores.
Other players see your display name, avatar, the cards and content you play in their match, and your leaderboard scores.
Authorities, only where the law requires it.

Some providers may process data outside your country. Where data leaves the EEA or UK, it is protected by the European Commission’s Standard Contractual Clauses or an adequacy decision (for example the EU–US Data Privacy Framework, under which Google is certified).

4. How long we keep it

Account, profile and leaderboard data: until you delete your account.
Match rooms: temporary game data, removed after the match has ended and been left idle.
Analytics and crash data: as set by Google’s retention settings (up to 14 months for Analytics, 90 days for Crashlytics).
Support emails: as long as needed to handle your request, then deleted.

5. Delete your data

Open the app → Account → Delete account. This deletes your account and the profile data linked to it. Uninstalling the app removes the data stored on your device. You can also email us and we’ll delete it for you within 30 days (see Delete your account).

6. Your rights

Depending on where you live (for example under the GDPR/UK GDPR, or US state laws such as the CCPA), you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent at any time. Email neogenius24@gmail.com. You can also complain to your local data protection authority. We don’t sell or “share” personal data for cross-context behavioural advertising as defined by the CCPA, apart from personalised ads you consented to.

7. Children

The app is not directed at children under 13, and we don’t knowingly collect personal data from them. If you believe a child has given us personal data, email us and we will delete it.

8. Security

Data is sent over encrypted connections, access to our databases is restricted by security rules, and App Check helps block unauthorised clients. No system is perfectly secure, but we work to protect your data.

9. Changes

If we change this policy, we’ll update the date above and, for significant changes, tell you in the app.

10. Contact

Elermond Studio S.R.L. · neogenius24@gmail.com