Privacy Policy

Effective September 16, 2026. Version 1. The Spanish version is the original; this translation is provided for convenience.

This policy explains what data the Mente Alegre games use, who receives it and what you can decide. If anything is unclear, write to hola@mentealegre.com.

1. Who is responsible and what this covers

The data controller is Uigurus S.A. (MYConsultingCR), corporate ID (cédula jurídica) 3-101-714694, a company incorporated in Costa Rica, with its registered office in San José, Costa Rica. Contact: hola@mentealegre.com.

This policy covers every app published under the Mente Alegre brand on Google Play and the App Store, including "Sopa de Letras: Mente Alegre", "Diferencias: Mente Alegre" and "Crucigrama: Mente Alegre", and this website (mentealegre.com). If an app ever does anything different from what is described here, we will say so in its store listing and on this page.

2. What we do not do

• We do not create accounts or ask you to register, set a password or sign in.
• We do not ask for or directly collect personal data: no name, email, phone number, address, photos, contacts or precise location.
• We run no servers of our own that store data about you. The only external services are the Google services described below and the app stores.
• We do not sell personal data. There is no chat, no public profiles and no content from other people.
• We do not show gambling, casino or dating ads: the maximum ad content rating is set to "general audiences" (G).

3. Data stored on your device

Each app stores, in the memory of your phone or tablet and nowhere else:

• your progress (completed levels, themes, daily streak);
• your settings (text size, sound, vibration);
• your available hints and the purchases you activated;
• your ad consent choices;
• a session and level counter used to decide when an ad may be shown.

This data does not leave the device (unless your operating system backs up the app together with the others, according to your Android or iOS settings). It is deleted when you uninstall the app. It is not linked to your identity.

4. Ads: Google AdMob

The games are free and funded by ads served by Google AdMob (Google LLC) through the Google Mobile Ads SDK. There are two kinds: full-screen ads between levels, and optional "rewarded" ads that you choose to watch in exchange for an in-game help (for example, a hint). There are no banners. The "Remove ads" purchase removes the ads between levels; rewarded ads remain available because they only appear when you ask for them.

Contextual by default, personalized only if you accept

By default we request contextual (non-personalized) ads from Google: they are chosen by the kind of app, the language and the approximate location, not by a profile of you. Personalized ads, based on your advertising identifier and your activity in other apps, are shown only if you accept them.

To ask, we use Google's User Messaging Platform (UMP), which shows a consent form when the app opens:

• In the European Economic Area, the United Kingdom and Switzerland (GDPR): a form where you can consent, decline or manage options by purpose and by vendor, following the IAB Europe Transparency and Consent Framework (TCF). You can change your choice at any time from Settings → Privacy options inside the app.
• In US states with privacy laws (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Florida and others Google adds): a notice to opt out of the sale or sharing of your information for targeted advertising. It is also available under Settings → Privacy options.
• Elsewhere no form is shown and ads are contextual.

On iPhone and iPad we do not request Apple's tracking permission (App Tracking Transparency), so the app does not access Apple's advertising identifier (IDFA) and is not used to track you across other companies' apps. If we ever decided to request it, you would see it as a system prompt you can decline, and we would update this policy and the store listing first.

What Google receives when an ad is shown

According to Google's documentation, the Google Mobile Ads SDK automatically sends to Google, encrypted in transit:

• your IP address, to estimate the device's general location (country or region) and to prevent fraud;
• device identifiers: on Android, the advertising ID (which you can reset or delete in Android settings) and the App Set ID; on iOS, without tracking permission, the IDFA is not accessed;
• ad interactions: impressions, taps, whether a video was watched to the end;
• diagnostic and device information: model, OS version, language, app version and SDK performance;
• your consent status, so that Google and its advertising partners honor it.

Google uses this data to serve and measure ads, limit how often you see the same one, detect fraud and, only with your consent, personalize advertising. Google acts as an independent controller of that data. You can read how Google uses information from apps that use its services, the Google Privacy Policy and the list of ad technology providers AdMob may share data with when you consent.

How to change your ad choices

• Inside the app: Settings → Privacy options (shown in regions where a form applies).
• Android: Settings → Google → Ads lets you "Delete advertising ID" or reset it.
• iPhone and iPad: Settings → Privacy & Security → Apple Advertising and Tracking.
• You can also buy "Remove ads" in the app to stop seeing ads between levels.

5. Usage and stability: Firebase Analytics, Crashlytics and Remote Config

We use three Firebase services (Google LLC) to understand how the games are played and to fix crashes. None of them receives your name, email or a user ID of ours: we do not create one.

Google Analytics for Firebase

It records aggregated usage events: when a level starts and ends and at which difficulty, how long it took, whether you used a hint and which kind, whether an ad was shown and at which point of the game, whether you made a purchase (only the product name, for example "remove ads"), which text size you chose and whether you tapped the link to another Mente Alegre game. Also Firebase's automatic events: first open, game session start, app update and screens viewed. We do not record which words you found or your taps on the grid.

With each event, Firebase collects: an app-instance ID (random, specific to that installation; it does not identify the person or the physical device), the device model, OS version, language, app version, the approximate location (country or region) derived from the masked IP address, and on Android the device's advertising ID. On iOS, without tracking permission, it does not access the IDFA. Data travels encrypted.

Firebase Crashlytics

If the app crashes, it sends a report with the error trace, the state of the app at that moment (for example, the level you were on), the device model and OS version, available memory and a random Crashlytics installation identifier used to count how many installations are affected. It also records non-fatal errors the app detects itself. This is used to fix bugs and keep the app stable.

Firebase Remote Config

It lets us adjust the ad frequency, and switch ads off if needed, without updating the app. For that, the device sends Firebase the country, language, time zone, OS and app version, the app's Firebase ID and the Firebase installation ID.

Firebase installation ID

All three services use a Firebase installation ID (FID), generated at random when the app is installed, which does not identify a person or a physical device and changes on reinstall.

6. In-app purchases

Optional purchases (remove ads, hints, level packs) are processed by Google Play (Google LLC) or the App Store (Apple Inc.) with the account and payment method you have in your store. We do not receive your name, email, address or payment details. The app receives from the store only a transaction identifier, the product purchased and its state, and stores them on your device to activate the purchase and allow restoring it. Google Analytics receives the product name (and on iOS, through Firebase's automatic StoreKit integration, possibly the price) for our revenue reports, with no data that identifies you.

Purchase history, receipts and refunds are handled by the store under the Google Privacy Policy or the Apple Privacy Policy.

7. Permissions and internet

The apps work offline: all content is included. Internet is used only for ads, purchases and the Firebase services described above. The apps do not request access to location, camera, microphone, contacts, photos, calendar or notifications. If a future feature needed a new permission, we would ask for it when you use that feature and explain it here.

8. Children under 13

The apps are rated for everyone (Everyone on Google Play, 4+ on the App Store), but they are not directed to children under 13 and are not part of the stores' family or kids programs. We do not knowingly collect personal information from children under 13 (or under the minimum age set by your country's law, for example 16 in parts of the European Union). If you are a parent or guardian and believe a child in your care has provided us with data, or that a third-party service has received it through our apps, write to hola@mentealegre.com and we will take reasonable steps to delete it.

9. Legal bases and international transfers

If you live in the European Economic Area, the United Kingdom or Switzerland, these are the legal bases we rely on:

• Consent (Art. 6(1)(a) GDPR): personalized ads and storing or reading identifiers on your device for that purpose. You can withdraw it at any time under Settings → Privacy options, without affecting what was done before.
• Legitimate interest (Art. 6(1)(f)): showing contextual ads to fund free apps, measuring usage in aggregate, detecting fraud and fixing crashes. You can object by writing to us.
• Performance of a contract (Art. 6(1)(b)): processing and restoring your purchases.
• Legal obligation (Art. 6(1)(c)): answering requests from authorities and keeping purchase records where the law requires it.

Google LLC and Apple Inc. are based in the United States and may process data in other countries. For transfers from the EEA, the UK and Switzerland, Google and Apple rely on the EU-US Data Privacy Framework and its extensions, and on the European Commission's standard contractual clauses. In Costa Rica, Law 8968 on the Protection of Individuals regarding the Processing of their Personal Data applies.

10. How long data is kept

• On your device: until you uninstall the app or clear its data from the system settings.
• Google Analytics: data linked to the app-instance ID is kept for at most 14 months; after that only aggregated reports without identifiers remain.
• Crashlytics: crash reports are kept for 90 days.
• AdMob: Google keeps advertising data under its own policy; for example, it anonymizes IP addresses in ad logs after 9 months.
• Stores: purchase history is kept by Google Play or Apple under their policies.
• Support emails: kept while the conversation lasts and up to 2 years afterwards, in case you write again.

11. Your rights and how to exercise them

Depending on where you live, you have the right to know what data we process about you, access it, correct it, delete it, restrict or object to its processing, take it to another service, withdraw your consent and not be discriminated against for exercising these rights.

• GDPR (EEA, UK, Switzerland): access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may lodge a complaint with your data protection authority (in Spain, the AEPD; in the UK, the ICO).
• California (CCPA/CPRA) and other US states: the right to know, to delete, to correct, to opt out of the "sale" or "sharing" of personal information for targeted advertising, and to limit the use of sensitive information (we process none). We do not sell personal information. Personalized ads may count as "sharing"; you can opt out in the notice shown in your state and under Settings → Privacy options. Since browser opt-out signals cannot be recognized inside an app, that is the way to exercise the opt-out.
• Costa Rica (Law 8968): access, rectification, deletion and withdrawal of consent; you may contact PRODHAB.
• Other countries (for example Mexico, Colombia, Argentina, Chile, Peru, Brazil): the ARCO rights or equivalents recognized by your law, through the same contact channel.

How to exercise them

Write to hola@mentealegre.com stating the app, whether you use Android or iPhone and what you need. We answer within 30 days at most (45 days for requests under US state laws, extendable where the law allows). There is no charge. Keep in mind that, since there are no accounts, we cannot identify you by name or email: almost all data lives only on your device or is processed by Google under random identifiers.

• To delete everything the app stores on your device, uninstall it.
• To delete the analytics data linked to your installation, write to us; we will explain how to obtain the app-instance ID and, with it, ask Google to delete it.
• To unlink advertising from your device, reset or delete the advertising ID in Android settings, or manage Apple Advertising on iOS.
• For your purchase data, use Google Play or App Store support, which is where it is held.

12. Security

All communications with Google and the stores are encrypted (TLS). We have no servers of our own holding your data, so there are no databases of ours to attack. Data stored on your device is protected by its operating system. If we detected an incident affecting personal data, we would report it as required by law.

13. This website

mentealegre.com uses no cookies, analytics, forms or third-party fonts: everything is served from the site itself. It is hosted on Firebase Hosting (Google), which logs the IP address of each request in its access logs for a few months to detect abuse and keep the service running, as described in the Firebase privacy policy. If you email us, we keep your message and address only to reply.

14. Changes to this policy

If anything changes (for example, if an app started requesting tracking permission on iOS or added a new service), we will publish the new version here with its effective date and, if the change is significant, announce it inside the app or in its store listing before it takes effect. Previous versions are available on request by email.

15. Contact

Uigurus S.A. (MYConsultingCR), corporate ID (cédula jurídica) 3-101-714694, San José, Costa Rica · hola@mentealegre.com