Privacy policy
Last updated: 8 November 2026
This policy describes which data Fillupz (the Android and iOS app, the web trial version and this website) processes and why. Fillupz needs no account: we never ask for your name, email or phone number.
Data controller
The data controller is:
[Ragione sociale e indirizzo da inserire]
For any request about personal data write to [email protected].
Data we process
The app sends the server only what is needed to run the game and the leaderboards:
- a random device identifier (UUID), generated by the app on first launch and not linked to any hardware, advertising or system identifier;
- the nickname you choose, shown publicly on the leaderboard;
- the locality (optional) you pick from a catalogue, for geographic leaderboards; we do not use GPS;
- the birth year entered on first launch, used only to check the minimum age;
- the IP address, which the server never stores in clear: it is kept only as a salted hash, to limit abuse;
- the sequence of inputs of each attempt (press timings and tilt), which the server recomputes to assign the time and which is public for your best attempt of the day;
- technical request data: platform (Android, iOS, web), build number, language.
Purposes and legal basis
The data is used to run the game and the daily leaderboards, to recompute attempts fairly, to prevent abuse (duplicate attempts, submission limits) and to keep the service secure. The legal basis is the performance of the service you request by using the app and our legitimate interest in protecting it. We do no profiling and sell no data.
Ads (AdMob)
The app shows ads through Google AdMob: a full-screen ad at the end of an attempt and, if you choose, a rewarded video to get an extra attempt. AdMob may collect advertising identifiers and device data as described in Google's policy. Ads are shown to all users, including those under 16; the game is intended for people aged 13 or over (see below). You can reset or limit the advertising identifier in your operating system settings.
Google's policy: https://policies.google.com/privacy — how Google uses partner data: https://policies.google.com/technologies/partner-sites
Minors
Fillupz is intended for people aged 13 or over. On first launch the app asks for the birth year and does not continue if the age is lower. If you believe a child under 13 has sent us data, write to us: we will delete it.
No account, several devices
The profile is tied to the random device identifier. To use the same profile on another device the app generates a temporary code or a recovery key: keep it yourself, we do not know it in clear. If you uninstall the app without a key, the profile can no longer be reached.
What is public
On the leaderboard and in replays the following are visible: nickname, country and locality (if set), the attempt time and the input sequence of your best attempt of the day. The device identifier is never exposed. Automated agents on the leaderboard always carry the AI badge.
Retention
Profile data and daily attempts are kept as long as the profile exists, because past leaderboards must remain recomputable. Training traces that are not personal records are deleted after 7 days. Technical server logs are kept only as long as strictly needed for security.
Recipients and location of processing
Data is hosted on servers in the European Union (Google Cloud, Milan region) and protected by Cloudflare, acting as a network intermediary. Google AdMob receives the data described in the ads section. No one else receives your data, except where the law requires it.
Your rights
You can request access, rectification, erasure, restriction of processing, portability and object to processing, and lodge a complaint with a supervisory authority. Since there is no account, to identify your profile include in your request the device identifier shown in the app settings (or your nickname). Write to [email protected].
This website
www.fillupz.app uses no cookies and no analytics or tracking tools. The pages read today's parameters and the public leaderboards from the game server (api.fillupz.app) without sending any identifier. The chosen language is stored only in your browser. The web server keeps technical request logs for security.
Changes
If this policy changes, the new version is published on this page with its update date. Substantial changes are also announced in the app.
Contact
For any privacy question: [email protected].