This privacy policy explains which personal data we process when operating Guess Ladder (website guessladder.ch and the accompanying iOS app), for what purpose, and what rights you have. We process personal data in accordance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
The controllers responsible for processing your data are:
Cedric Hirt and Morris Knoflach
Grüzefeldstrasse 51
8404 Winterthur
Switzerland
Contact for all data protection matters:
E-mail: support@guessladder.ch
Guess Ladder can generally be played without an account. Depending on how you use it, the following data arises:
| Category | Data | When |
|---|---|---|
| Player name | The display name you choose yourself (max. 8 characters) | When creating or joining a lobby |
| Account data (optional) | E-mail address, chosen display name, password (stored only as a cryptographic scrypt hash, never in plain text) | Only if you register or sign in |
| Game & balance | Coins, unlocked skins, the time your account was created | When using an account |
| Connection data | Real-time communication runs over WebSockets (Socket.IO). This involves technical data such as a random client identifier and the game state during the current round. | While playing |
| Server logs | For technical reasons, the usual log data (e. g. IP address, timestamp, error messages) may arise at our hosting provider. | Automatically on access |
Guess Ladder uses your browser's or device's local storage (LocalStorage) to remember things such as your name, a stable device identifier for reconnecting, your language setting and your sign-in status. This data stays on your device and you can delete it at any time via your browser settings. We ourselves do not set any tracking or analytics cookies and use no third-party analytics tools. For advertising, Google sets its own identifiers and cookies – see section 5.
Guess Ladder is free and funded by advertising. We use Google services for this:
For users in Switzerland and the EEA, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to and processed by Google LLC in the USA. Google decides independently which ad is served to you and is itself responsible for that processing under data protection law.
Google may process the following data in particular: your device's advertising identifier (on iOS, the IDFA or IDFV), your IP address, device and browser information, the approximate location derived from it, and details of which ad was displayed, viewed or clicked and when. This data is used to serve, measure and bill the advertising, and to prevent fraud.
Your consent. Before any personalised advertising is served, we ask for your consent via Google's consent dialogue (User Messaging Platform). When that dialogue appears depends on where you are playing:
If you do not consent, you will only receive non-personalised advertising – the game remains fully usable and you are at no disadvantage.
How to change your decision. On the website, the consent dialogue reappears once you clear this site's data in your browser; if the dialogue offers a privacy-options link, you can also change your choices directly there. In the iOS app the tracking setting is under Settings → Privacy & Security → Tracking. For personalised Google advertising in general, see adssettings.google.com.
Further information can be found in Google's privacy policy and under “How Google uses data”.
The legal basis for personalised advertising is your consent (Art. 6(1)(a) GDPR and Art. 31 revFADP). For non-personalised advertising we rely on our legitimate interest in funding the free service (Art. 6(1)(f) GDPR).
We do not sell your data. We use the following service providers to deliver the service:
Both service providers also process data outside Switzerland and the EEA, in particular in the USA. These transfers are based on the European Commission's Standard Contractual Clauses and on the safeguards recognised by the Swiss Federal Data Protection and Information Commissioner.
Account data is stored for as long as your account exists. You can request deletion of your account and the associated data at any time by e-mail to support@guessladder.ch. Data from ongoing rounds is not stored permanently after the game ends. We keep server logs only as long as necessary for operation, security and error analysis, after which they are deleted automatically.
Data is transmitted encrypted over HTTPS/TLS. Passwords are stored exclusively as a salted scrypt hash. We take appropriate technical and organisational measures to protect your data.
Within the limits of applicable law, you have the right to access, rectification, erasure, restriction of processing and data portability, as well as the right to withdraw consent you have given. An e-mail to support@guessladder.ch is enough to exercise these rights. You also have the right to lodge a complaint with the competent data protection authority (in Switzerland: the Federal Data Protection and Information Commissioner, FDPIC).
Guess Ladder is aimed at a general audience. We do not knowingly collect data from children below the legally relevant age without the consent of their parents or guardians.
We may amend this privacy policy to reflect legal or technical developments. The version published on this page applies.
If you have any questions about data protection, you can reach us at support@guessladder.ch.