Last updated: 5 September 2026
“Riddle me this” (the “app”) is an Android riddle game published by Juhan Tamm (“we”, “us”). This policy explains what data the app handles and what happens to it.
The app saves your progress (which riddles you solved, attempts, unlocked hints and packs, riddle-of-the-day history) and your settings (notification preferences, appearance, purchase status) in the app’s private storage on your device. Deleting the app deletes it. Unless you turn on cloud save, this data stays on your device.
Cloud save is off by default. Turning it on, in Settings → Cloud save, means signing in with your Google account so your progress can be backed up and restored on another device.
When you sign in, we receive from Google:
What we then store against that identifier is your game progress only — solved riddles, attempt counts, unlocked hints and packs, and riddle-of-the-day history — plus the time it was last updated. Nothing else about you is stored, and the app never uploads your contacts, files, location or any device identifier as part of cloud save.
The data is held in Google Cloud Firestore in the
europe-north1 region (Finland), inside the European Union, with
Google acting as our processor. Access rules restrict each saved game so that
only the signed-in account it belongs to can read or write it.
The legal basis is your consent, given by choosing to turn cloud save on (GDPR art. 6(1)(a)). You can withdraw it at any time by deleting your cloud data, which also signs you out.
If you use Settings → Report a bug, we store what you type along with your app version, build number and Android version, so a problem can be reproduced. This is stored on the same Google Cloud project described above.
Bug reports are not linked to your account, and you do not need to be signed in to send one. Please do not include personal details in the message — only what you type is sent, so what you leave out is not collected. Reports are deleted once the issue they describe is resolved, and in any case within 12 months.
To decide which riddles to write next, and to find riddles that are unfairly hard or that reject answers they ought to accept, the app reports how the game is being played. About once a day, when it has a connection, it sends:
What is not sent: your name, your email address, your Google account, your cloud-save identifier, your advertising ID, your device model, or anything you write in a bug report.
The report is filed under a random identifier generated on your device the first time it is sent. It is not derived from your Google account and cannot be matched to it, and the rejected answers are stored separately from it, so a guess cannot be traced back even to that random identifier. Each day's report replaces the previous one rather than building a history.
Because a typed answer is free text, the app shortens anything long and limits how much it keeps. Please do not type personal details into the answer box — only what you type is sent.
The legal basis is our legitimate interest in understanding how the game is played well enough to improve it (GDPR art. 6(1)(f)). You can object at any time by turning the setting off, which stops any further reporting immediately.
Because the identifier is random and is deliberately not connected to you or your account, we have no way to find your reports among everyone else's, and so cannot single them out to delete or send back to you (GDPR art. 11). Turning the setting off is the control we can offer, and it is why the data is kept this way rather than tied to an account.
The app shows ads through Google AdMob, a service of Google LLC. When ads are served, Google may collect and process, among other things:
This data is collected and used by Google to serve and measure ads, subject to Google’s Privacy Policy and Google’s advertising partner disclosures.
If you are in the European Economic Area or the UK, the app asks for your consent before any ads are requested, using Google’s consent framework. The legal basis for personalized advertising is your consent (GDPR art. 6(1)(a)). You can review or change your choice at any time in Settings → Ad privacy options inside the app. If you decline, the ads SDK is not started.
The optional one-time “Remove ads” purchase is processed by Google Play. We receive no payment information. The purchase state is stored on your device and can be restored through Google Play on a new device.
The optional daily riddle notification is scheduled locally on your device. No push-notification service is used, and no data leaves your device for it.
The app is intended for ages 13 and up and is not directed at children.
If you turned on cloud save, you can delete everything we hold at any time:
That erases your saved progress from our database and deletes your authentication record, including the email address, name and profile picture described above. It takes effect immediately and cannot be undone. Progress kept on your own device is left alone, so you can carry on playing offline.
If you have already uninstalled the app, or would rather not do it yourself, email kolbakilu@gmail.com from the address you signed in with and ask for deletion. We will action it within 30 days and confirm by reply.
What is deleted: your cloud-saved game progress and your authentication record (email address, name, profile picture, account identifier). What is kept: nothing about your account is retained, and no backup copy is held beyond the deletion. Progress saved on your own device is untouched, and is removed when you uninstall the app.
You can also have specific data in “Riddle me this” removed while keeping your account. To request this:
What is deleted: whichever of the two you ask for — your saved progress, or the text and version details of a bug report. What is kept: if you ask only for your progress, your authentication record (email address and name) stays so you can keep using cloud save; ask for account deletion above if you want that gone too. Bug reports are not linked to an account, so removing one leaves nothing behind.
Timing: requests are actioned within 30 days and confirmed by reply. Bug reports are in any case deleted once the issue is resolved, and within 12 months. Cloud saves left unused are deleted after 24 months.
Progress on your device is removed when you uninstall the app or clear its data. Cloud saves are kept until you delete them as described above, or until the account has been inactive for 24 months, after which they are removed. Bug reports are deleted once resolved, and within 12 months regardless. Usage statistics are kept while they are useful for planning riddles and are deleted within 24 months; each day's report replaces the last, so no history builds up. For data processed by Google for advertising, see Google’s My Ad Center and Privacy Policy for your controls and rights.
Under the GDPR you have rights of access, rectification, erasure, restriction, portability, and objection regarding personal data. If you use cloud save, exercise them by emailing kolbakilu@gmail.com — erasure is also available directly in the app, as described above. If you do not use cloud save we hold no personal data about you, and for advertising data those rights are exercised toward Google (links above). You also have the right to lodge a complaint with your supervisory authority (in Estonia: Andmekaitse Inspektsioon).
If a future version of the app changes what data is handled, this policy will be updated before that version is released, with the date above revised.
Questions about this policy: kolbakilu@gmail.com