Privacy policy

Ottomino is designed to work without accounts and without any mandatory personal data. This page describes what data the app and the api.ottomino.app service process.

Device identifier

On first launch the app generates a random code (UUID) stored only on your device. It is used to record your scores and is not linked to your identity, your phone number or any other account.

Nickname

Every player gets a generated nickname (e.g. “Otto-48213”), which you can customise. The nickname is public: it appears in the app's leaderboards and on this website. Don't use your real name if you don't want it to be public.

Location

You can optionally choose the town (or country) you compete in. If you pick automatic detection, your position is used once, only to suggest the nearest municipality: the coordinates are never stored, neither by our servers nor anywhere else. Leaderboards only show the name of the chosen town. The places catalogue comes from ISTAT for Italian towns and from GeoNames (CC BY 4.0) for the rest of the world.

Zone links

A zone link (zona.html) opens the app with a town or a region already set. If you open it on a phone without the app, the page tells our server «from this connection somebody opened the link of X»: we keep for at most 48 hours a salted hash of the IP address (never the address itself), the device family (iPhone or Android) and the zone, so the app can propose that zone when first opened. The record is deleted when used or after 48 hours. On Android the same information can reach the app from the Play Store (install referrer) without going through us.

AI agent players

To keep the leaderboards alive while the community grows, some spots are held by openly declared synthetic agents, always marked with the “AI” badge. They are not real people and collect no data.

Scores and leaderboards

We send to our servers only: the score, the challenge number, the best combo, an anonymous snapshot of the final board, the town you chose (it feeds your zone leaderboard and stays attached to that game even if you change it later) and the app version. This data powers percentiles and leaderboards. Along with the score we also send the sequence of moves of the match, to replay it and verify scores: you can turn it off in Settings, scores still go out.

Advertising and purchases

The app shows ads via Google AdMob: one full-screen ad at the end of a match, never during play. To serve ads, Google may process device identifiers under its own policy: policies.google.com/privacy. Where the law requires it, consent is requested first. There are no active in-app purchases.

Usage statistics

The app uses Google Analytics for Firebase to count installs and opens and to see which features are used (daily challenge played, arena created, invite shared). The data is aggregated and tied to an app-instance identifier, never to your nickname; it is also used to measure Google Ads campaigns. Collection is off under 16; where the law requires it, it follows the consent given for ads. Google's policy: policies.google.com/privacy.

Campaign measurement (AppsFlyer)

To know which ad campaigns on Meta (Facebook, Instagram) and TikTok bring new players, the app uses AppsFlyer. It records the install, app opens and three steps of the game (match started, match over, result shown) with the mode, the score and the challenge number; it links them to the ad that led to the install through the device's advertising identifier (on iPhone only if you allow it in Apple's prompt) and passes them to Meta and TikTok as conversions. Never your nickname, never your location. AppsFlyer stays off under 16; where the law requires it, it starts only if you accept ad measurement in the consent form. AppsFlyer's policy: appsflyer.com/legal/privacy-policy.

Year of birth and minors

On first launch the app asks for your year of birth only to decide how ads are shown. It stays on the device and is never transmitted: under 16, every ad request is tagged as under the age of consent (and as child-directed under 13), ads are non-personalised and limited to general-audience content, and no ads consent flow is ever started.

Messages you write to us

From the app settings you can write to us. Along with the message come the category you pick, your nickname, the app language, the version and the operating system: they are what we need to understand the problem and reply. Nothing else travels with it, we do not use it for anything else and we do not share it. We keep messages as long as they are useful to follow up, then delete them.

Partner arena requests

The form on partner.html sends us your name, email, the channel or venue you name, the size of your audience, the #hashtag you would like and your message. We use them only to reply and, if we agree, to set up the arena. To limit abuse of the form, the request carries a salted hash of your connection address (never the address itself), used only in the 24 hours after sending and deleted together with the request. The request is deleted once it is settled, or on request.

Deletion

From the app settings you can regenerate your identity: the nickname is replaced with a newly generated one and the location is removed. For manual requests write to info@ottomino.app.

Data controller

The data controller is:
SBPLUS di SIMONE BALDI
Via Pietra del Cardoso 2, 55045 Pietrasanta (LU), Italia
P.IVA IT02331940466 — info@ottomino.app

This website

www.ottomino.app uses no cookies, does not track visitors and queries the leaderboards read-only.

Last updated: October 2026.