10MAIS (the "App") is a party game published by Simplibot,
an independent developer based in France. This policy explains, in plain words, what the App
collects, why, where it is stored, how long we keep it, and how you can have it deleted.
We only describe here what the App actually does. If a practice is not written on this page,
it does not happen.
iOS Bundle ID: com.simplibot.10mais
1. Your account is anonymous
10MAIS never asks for an email address, a phone number or a password. The first time you open
the App, an anonymous account is created automatically on our servers. It is
nothing more than a random identifier (a UUID) generated for your device.
That identifier is what lets the App remember your nickname, your subscription and your
profile picture between two sessions. It is not linked to your real identity, and we have no
way of connecting it to a person. Because everything else described below is attached to that
identifier, we treat all of it as data linked to you.
2. What we collect
2.1. Your nickname
What: the name you type when you join a game (1 to 20 characters). You choose it freely, and it does not have to be your real name.
Why: so the other players in the room can tell who is who.
Shared with: the other players in the same room, while the game is running.
2.2. Your profile picture (optional)
What: a photo you pick from your library or take with the camera. This is entirely optional, and the App works without it.
Why: to personalise your profile screen inside the App.
Where: uploaded to our storage on Supabase, in a folder named after your anonymous identifier.
Shared with: nobody. The picture is not sent to the other players and is not shown during a game.
Access: the file sits behind a long, non guessable public link. Anyone holding that exact link could open the image, so please avoid uploading a photo you would not want to be seen.
Tapping "Remove photo" in the Profile tab removes the picture from your profile and also erases the file from our servers. If you were offline at that moment, the file may remain: write to [email protected] and we will delete it.
2.3. Online game data
When you play an online game, the following is synchronised between the players in the room:
The room code (4 digits)
Your nickname and whether you created the room
Your votes and answers on the cards
Your status (ready, waiting, inactive) and the time of your last activity
The game mode and the theme selected for the room
In offline mode, where everyone plays around a single phone, nothing about the game is sent
to our servers.
2.4. Usage analytics
We measure how the App is used, so we can see which modes people play and where they get
stuck. This runs on PostHog, on European servers. The events we send are:
game_started, game_completed, game_replayed: which mode was played, offline or online, and whether the player is a subscriber
premium_cta_tapped, the opening and closing of the 10MAIS+ screen, and the outcome of a purchase (successful, cancelled or failed)
music_toggled: music turned on or off
promo_code_redeemed: a promo code was accepted
Technical events added by PostHog itself: app opened, app sent to the background, plus your device model, operating system version and App version
These events carry your anonymous identifier and a device identifier generated by PostHog.
They never contain the content of your answers, your nickname or your picture. We also use
PostHog to run A/B tests on the subscription screen.
2.5. Crash reports
To find and fix bugs, the App sends technical reports to Sentry, on servers in
Germany (European Union).
When: when the App crashes or runs into an error. Each time the App is opened, Sentry also receives a simple "session ended normally or with a crash" signal and the startup time, and, for about one session in five, screen speed measurements.
What: the technical description of the error (the place in the code involved), your device model, operating system and App version, and a short trail of the last technical actions before the error (screens opened, buttons tapped, network requests).
Linked to: your anonymous identifier, your PostHog identifier and whether you are a subscriber, so we know how many players a bug affects and what happened just before it.
Never sent: the text of the cards, your answers, your nickname, your picture. The App's internal log messages are not transmitted, no screen recording is made, and Sentry is set up not to collect your IP address or any other personal data.
2.6. Subscription and purchases
What: whether you have an active 10MAIS+ subscription, its type (weekly or monthly), its renewal and trial status, and the country of your store account.
Handled by: RevenueCat, which talks to the App Store and the Play Store on our behalf, using your anonymous identifier.
Payment: entirely processed by Apple or Google. We never see your card number, your billing address or your store account.
Promo code: if you enter an access code, we store on Supabase the code used, the date, the end date of the free access and each attempt (successful or not, to block repeated guessing), along with your anonymous identifier.
2.7. Feedback you send us
At the end of a game, the App may offer you a short review. If you fill it in, we store your
rating, your comment if you wrote one, the game mode and the room code, along with your
anonymous identifier. If you leave it empty, nothing is sent.
2.8. Activity
While the App is open, it tells our Supabase servers once a minute that your anonymous identifier
is active. Only the time of your last activity is kept: it is used to count online and active
players, nothing else.
2.9. Settings kept on your device
Music and vibration, chosen theme, language, last game mode used
These stay in the App's local storage and are never uploaded
2.10. What we never collect
No email address or password
No phone number or contacts
No location, ever
No microphone or camera recording outside the picture you choose
No payment details
No advertising identifier (IDFA)
No push notifications: the App does not send any
3. Where your data is stored, and for how long
3.1. Hosting
Supabase (accounts, games, profile pictures, feedback): servers in Paris, France (eu-west-3).
PostHog (analytics): European Union servers.
Sentry (crash reports): servers in Germany, in the European Union.
RevenueCat (subscriptions): United States, under the European Commission's standard contractual clauses.
Encryption: everything travels over HTTPS / TLS.
3.2. Retention
Game data (room, players, votes): deleted automatically at most 24 hours after the game ends, and after 6 hours if the room was left inactive.
Nickname and profile picture: kept until you change them, or until you ask us to delete your account.
Analytics events: kept for 12 months, then deleted.
Crash reports: kept for 90 days by Sentry, then deleted.
Last activity time, promo codes and attempts: kept until you ask us to delete your account.
Feedback: kept as long as it is useful to improve the game, and no longer than 24 months.
Subscription status: kept by RevenueCat for as long as the subscription is active, and for the period Apple and Google require for accounting.
4. Why we are allowed to process it (GDPR)
Performance of a contract: your account, your nickname, online games and your subscription. Without them the App cannot work.
Legitimate interest: usage analytics, crash reports and crash-free operation, to keep the game working, fix bugs and improve it. The data stays pseudonymous and is never sold.
Consent: your profile picture and the feedback form, both of which you provide voluntarily and can withdraw.
5. Third-party services
5.1. Supabase
Use: anonymous accounts, online game synchronisation, storage of profile pictures, feedback
10MAIS shows no advertising. We do not sell your data, we do not share it with
data brokers, and the App contains no advertising SDK and no cross-app tracker.
Nothing we collect is used to follow you across other apps or websites, which is why the App
never asks for tracking permission. Your data is not used to train AI models.
7. Your rights
Under the GDPR, and under similar laws elsewhere, you can:
Access the data attached to your anonymous identifier
Correct it, starting with your nickname, which you can change at any time in the App
Delete it, in full
Object to analytics, or ask for a copy of your data in a readable format
Complain to your data protection authority (in France, the CNIL)
To exercise any of these, write to [email protected].
Because the account is anonymous, we cannot recognise you from your email address alone: tell us
your nickname and the code of a recent room, and we will locate the data. We answer within 30 days.
Deleting everything yourself: uninstalling the App removes every local setting.
To also erase your nickname, your picture, your feedback and the rest of your data from our
servers, ask us at the address above and we will delete them. Details are on the
Delete my data page.
8. Children
10MAIS is rated 12+ and is not intended for younger children. Some themes are
aimed at an adult audience and are clearly flagged before a game starts. We do not knowingly
collect data from a child under 13. If you believe your child has used the App, write to us
and we will delete the account.
9. Cookies
The App uses no cookies and no equivalent tracking technology.
10. Changes to this policy
We update this page whenever the App changes. The date at the top always reflects the current
version. If a change is significant, you will be told inside the App.