Privacy Policy
1. Data controller
The data controller is LeadForge, SAS with share capital of EUR 1,000, 4 allée de la Geffrière, 35600 Sainte-Marie, SIREN 932 450 927, R.C.S. Rennes.
For any questions regarding your data: support@mysterq.com
2. Scope
This Privacy Policy describes how LeadForge processes data in connection with the MysterQ mobile Application (Android and, where applicable, iOS).
It supplements the Terms and does not replace information provided by Google in connection with Google Play or Google Play Billing.
3. Data concerned
User-entered data: player first names, group names, language and theme preferences, game progress and scores, stored locally on the device via the Application storage.
Technical and usage data: Firebase installation identifiers, anonymised or pseudonymised usage events (Application launch, premium purchase, restore, store errors), device type, Application version, system language.
Purchase-related data: premium status (active/inactive), product identifier, Google Play verification timestamps, stored locally; the transaction is processed by Google Play.
LeadForge does not directly collect email addresses, phone numbers, or photos through the Application, unless you voluntarily contact us by email.
4. Purposes of processing
Provision of the service: enabling gameplay, local saving of groups, resuming games, and access to purchased premium content.
Purchase management: activating, restoring, and periodically verifying Premium status via Google Play.
Audience and performance measurement: understanding Application usage through Firebase Analytics.
Advertising effectiveness measurement: when you install the Application via a Google Ads campaign, measuring whether a Premium purchase is made in order to optimise campaigns (ROAS / in-app actions). LeadForge does not use your data for remarketing within the Application.
Support and security: responding to your requests, preventing fraud, and improving stability.
5. Legal bases (GDPR)
Performance of a contract (Art. 6(1)(b) GDPR): providing the game, local management of sessions, Premium activation.
Legitimate interest (Art. 6(1)(f) GDPR): security, service improvement, aggregated usage statistics, measurement of acquisition campaign effectiveness, while respecting your rights.
Consent (Art. 6(1)(a) GDPR): where required, in particular for certain trackers or advertising measurements depending on your jurisdiction; you may withdraw consent without affecting the lawfulness of prior processing.
Legal obligation (Art. 6(1)(c) GDPR): retention of certain accounting information or responses to authorities.
6. Recipients and processors
Google Ireland Limited / Google LLC: Firebase Analytics, Google Play infrastructure, in-app billing, advertising install attribution according to Google settings.
LeadForge and strictly necessary technical providers (hosting of the mysterq.com website, support) may access data you voluntarily provide by email.
LeadForge does not sell your personal data to third parties.
7. Google Ads campaigns and analytics
If you install MysterQ via a Google advertisement, Google and Firebase may associate the installation with subsequent events (for example a Premium purchase) in order to measure campaign performance and optimise advertising spend.
This measurement is intended to evaluate the effectiveness of acquisition campaigns, not to display in-app advertisements within MysterQ.
You may limit certain measurements via your device settings (advertising) and by contacting us. In the European Economic Area, additional consent requirements may apply depending on regulatory developments.
8. Retention periods
Local data (groups, scores, preferences): retained on your device until deleted by you, uninstallation of the Application, or clearing of Application data.
Local Premium status: retained as long as necessary for service operation and periodic Google Play verifications.
Analytics data: retained according to Firebase / Google Analytics settings (durations configured by LeadForge, generally up to 14 months maximum for usage events).
Support correspondence by email: retained for the time necessary to handle the request, then limited archiving where applicable.
9. Security
LeadForge implements reasonable technical and organisational measures to protect data (limited access, encryption in transit where applicable, development best practices).
No measure provides absolute security; you must protect access to your device.
10. Transfers outside the European Union
Use of Google services may involve transfers of data to third countries, in particular the United States, governed by the European Commission's standard contractual clauses and/or the EU-US Data Privacy Framework where applicable.
For further information: Google privacy policies (https://policies.google.com/privacy).
11. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection, portability (where applicable), and withdrawal of consent.
To exercise your rights: support@mysterq.com, specifying your request and, if possible, the language of the Application. A response will be provided within one month, unless a justified extension applies.
You may lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country of residence.
Deletion of local data may also be performed directly from your device settings.
12. Minors
The Application is not intended for children under 12 without adult supervision. LeadForge does not knowingly collect data from children without the required parental consent.
If you believe a minor has sent us data, contact support@mysterq.com.
13. Changes
LeadForge may update this Policy. The version number and effective date appear in the document header and at mysterq.com.
In the event of a material change, information may be displayed in the Application or upon renewed acceptance.
14. Contact
LeadForge — support@mysterq.com — https://mysterq.com
Version 1.0.0 — effective 19 May 2026.