Privacy Policy · Tessera

Last updated: 14 September 2026

Français · English

Data we collect

Account. If you create an account with an email, we store your email address, your username and your password (stored encrypted, never in clear text). If you sign in with Google, we receive your email address, your display name and your Google account identifier. If you sign in with Apple, we receive your Apple account identifier and, if you choose to share them, your email address (possibly a private relay address provided by Apple) and your name.

Guest use. You can play without an account: an anonymous identifier is then created to keep your progress on the device. If you later create an account, this progress can be linked to your account.

Game data. Your answers to questions, your scores, your confidence bets, your streaks and the associated dates.

Social data. The groups you create or join, your membership in these groups, invitation codes, as well as the challenges you send or receive and their answers.

Content you send us. The questions you propose, error reports and improvement suggestions (free text).

Notifications. If you enable notifications, a device token (provided by Firebase Cloud Messaging) is stored so we can send you push notifications.

Purchases. If you make a purchase in the app (Tessera+, token packs), we keep your purchase history in order to grant you the corresponding features. The payment itself is processed by Apple (App Store) or Google (Play Store): we never see your card number.

Advertising. The app displays ads provided by Google AdMob. For this purpose, interaction and diagnostic data may be collected and shared with Google to serve and measure ads. On Android, your device's advertising identifier may also be used, and a consent screen (GDPR) lets you choose between personalized and non-personalized ads on first launch. On iPhone, the app does not track you: it never asks for tracking permission, does not access the advertising identifier and only shows non-personalized ads. Tessera+ accounts see no ads.

Audience measurement. To find out which features of the app are actually used, we record anonymous usage statistics: screens opened, time spent on each, actions performed (for example “a question was played”), as well as the platform, the app version and the language. These statistics are tied to a random identifier generated on first launch, never to your account or to an advertising identifier, and contain none of the text you type. They are not cross-referenced with your game data and are not shared with anyone. You can opt out at any time in the Settings.

We do not resell any of your data.

Why we use this data

• Run the game: display the daily question, calculate and keep your scores and streaks.
• Enable social features: groups, leaderboards and challenges between friends.
• Process the questions, reports and suggestions you send.
• Send you notifications (streak reminders, activity in your groups) if you have accepted them.
• Offer and unlock in-app purchases (Tessera+, token packs).
• Display ads and measure their performance (except for Tessera+ accounts).
• Understand which features are used, in order to improve the app.
• Ensure the security and proper functioning of the service.

Legal basis (GDPR)

Processing your account and game data is necessary to provide the service you request. Sending push notifications relies on your consent, which you can withdraw at any time in your device settings. Displaying personalized ads also relies on your consent, collected via the consent screen on first launch and changeable at any time. Anonymous audience measurement relies on our legitimate interest in improving the app; you can object to it at any time in the Settings.

Who has access to your data

Your data is hosted and processed by our technical providers, acting on our behalf:

• Supabase: hosting of the database, authentication and backend.
• Google Firebase: sending push notifications (Cloud Messaging) and Google sign-in.
• Google AdMob: serving and measuring ads; for this it receives usage data and, on Android, your advertising identifier.
• RevenueCat: managing and validating your in-app purchases.
• Apple / Google Play: processing in-app purchase payments; Apple also provides Sign in with Apple.

These providers may process data outside the European Union. In that case, appropriate safeguards (standard contractual clauses) govern these transfers. Apart from serving ads (Google AdMob), we do not share your data with third parties for commercial purposes, and we do not resell it.

The other members of your groups can see your username, your scores within the group and the challenges you share with them.

Data retention

We keep your data for as long as your account exists. If you delete your account or ask us to, your personal data is deleted, except for what the law would require us to keep. Anonymous usage statistics are kept for 90 days in detailed form; beyond that, only anonymous totals remain.

Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, portability, restriction and objection, as well as the right to withdraw your consent. To exercise these rights or delete your account, write to jeanfechter@gmail.com. You can also lodge a complaint with your data protection authority (in France, the CNIL).

Security

Passwords are stored encrypted and exchanges with the server are protected. As no method is completely secure, we cannot guarantee absolute security, but we implement reasonable measures to protect your data.

Children

Tessera is not intended for children under 15. If you believe a child has provided us with personal data, write to us and we will delete it.

Changes

This policy may change. In the event of a significant change, we will inform you in the app. The date of the last update appears at the top of this document.

Contact

For any question about this policy or your data: jeanfechter@gmail.com.