Privacy policy

Last updated: 21 September 2026

In short: camera images are processed on your phone and never sent to a server. What we store is little, pseudonymous, and you can delete it yourself.

1. Controller

MD.USE Innovations, S.L. · Tax ID B70455605 · Lugar de Penelas, 37, parroquia de Cacheiras, 15883 Teo (A Coruña), España · info@gummano.app

2. What data we process and why

2.1 Camera images

The hand detector runs inside your browser. Images are neither transmitted nor stored outside your device. The photos of your games shown in “Your games” and “Your hand in numbers” are stored only in your browser.

2.2 Game record (with your consent)

If you tick “Save my hand geometry”, at the end of each game we send a compact record with: a random identifier of your browser (not linked to your identity), your nickname and avatar if you chose them, the geometry of the final pose (21 points in 3D, no image), the palm width if you measured it, the score, the hand used, the language, and your age and sex only if you decide to provide them. From your connection our provider derives the approximate country and city; the IP address is not stored with the record.

Purposes: showing the leaderboards (world, country, city, friends), building statistics by age and sex (“compare”), improving the measurement and carrying out scientific research on aggregated or anonymised data. Legal basis: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time from Settings.

2.3 Challenges and rooms

When you create or join a room or challenge we store your nickname, avatar, scores and, if you choose the “photo” or “cut-out” modes, the image you decide to show the other participants. This data is linked to the room code and deleted automatically when the room ends or expires (and in any case after 30 days). Legal basis: performance of the service you request (art. 6(1)(b)).

2.4 Service usage and security

We log usage events (visit, start, result, share…) with your browser identifier, approximate country and city, language, device type and the page you came from. Our infrastructure provider also processes IP addresses to protect the service from abuse. Purpose: measuring usage, detecting errors and protecting the service. Legal basis: legitimate interest (art. 6(1)(f)). This data is not used to build personal profiles.

2.5 Advertising

Gummano is funded by Google AdSense ads. In the European Economic Area, the United Kingdom and Switzerland we will ask for your consent before using cookies or identifiers for advertising; if you do not give it, non-personalised ads are shown. Google acts as an independent controller for that processing: see how Google uses information from sites that use its services. You can change your choice at any time with the “Ad privacy” link at the bottom of the site.

3. Data that stays on your device

Your game history, nickname, avatar, preferences and ongoing rooms are stored in your browser's storage. You can delete them from Settings → “Delete my games from this phone”. More in the cookie policy.

4. Recipients and international transfers

The service is hosted by Cloudflare, Inc. (USA), acting as processor under the EU–US Data Privacy Framework and standard contractual clauses. Ads are served by Google Ireland Ltd. Beyond these cases we do not share data with third parties, except where required by law. Any research data published will always be aggregated or anonymised.

5. Retention

Leaderboard entry: until you delete it from Settings or ask us to.
Game records (pseudonymous): while the game is active; afterwards only in anonymised form.
Rooms and challenges: until they end or expire, at most 30 days.
Usage events: 3 months in detail; afterwards only aggregates.

6. Your rights

You can access your data, rectify it, erase it, object to or restrict its processing, request portability and withdraw consent. The fastest way is Settings → “Delete my data from the server” (removes your leaderboard entry) and unticking the consent box. For any other request write to info@gummano.app quoting your browser identifier (shown in Settings). If you believe we have not honoured your rights you can lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local authority.

7. Children

Gummano is not aimed at children under 14. We do not ask for identifying data; if a parent or guardian believes a child has provided data, they can write to us to have it deleted.

8. Changes

Any change to this policy will be published here with its date. If a change affects processing based on your consent, we will ask for it again.