Privacy Policy

Effective October 21, 2026. Version 3. The Spanish version is the original; this translation is provided for convenience.

This policy explains what data the Mente Alegre games use, who receives it and what you can decide. If anything is unclear, write to hola@mentealegre.com.

1. Who is responsible and what this covers

The data controller is Uigurus S.A. (MYConsultingCR), corporate ID (cédula jurídica) 3-101-714694, a company incorporated in Costa Rica, with its registered office in San José, Costa Rica. Contact: hola@mentealegre.com.

This policy covers every app published under the Mente Alegre brand on Google Play and the App Store, which today are "Sopa de Letras: Mente Alegre", "Diferencias: Mente Alegre", "Crucigrama: Mente Alegre" and "Solitario: Mente Alegre", and this website (mentealegre.com). If an app ever does anything different from what is described here, we will say so in its store listing and on this page.

2. What we do not do

• We do not create accounts or ask you to register, set a password or sign in.
• We do not ask for or directly collect personal data: no name, email, phone number, address, photos, contacts or precise location.
• We store no data about you on servers, with one exception: if you join the optional weekly league, Firebase (Google) stores an anonymous identifier, the nickname and picture you picked from a list, and your stars for the week (section 7). The only external services are the Google services described below and the app stores.
• We do not sell personal data. There is no chat, no public profiles and no content written by other people: the weekly league only shows nicknames and pictures picked from a list.
• We do not show gambling, casino or dating ads: the maximum ad content rating is set to "general audiences" (G).

3. Data stored on your device

Each app stores, in the memory of your phone or tablet and nowhere else:

• your progress (completed levels and games, themes, daily streak, Daily Challenges, missions, stars, your garden, your album and your play statistics);
• your settings (text size, difficulty, sound, vibration and each game's own options);
• your available hints, what your Piggy Bank holds, the purchases you activated and how long your subscription is valid;
• if you joined the weekly league, the nickname and picture you chose;
• your ad consent choices;
• a session and level counter used to decide when an ad may be shown.

This data does not leave the device (unless your operating system backs up the app together with the others, according to your Android or iOS settings). It is deleted when you uninstall the app. It is not linked to your identity.

4. Ads: Google AdMob

The games are free and funded by ads served by Google AdMob (Google LLC) through the Google Mobile Ads SDK. There are two kinds: full-screen ads between levels, and optional "rewarded" ads that you choose to watch in exchange for an in-game help (for example, a hint). There are no banners. No ad interrupts a game in progress. The "Remove ads" purchase and the Mente Alegre Plus subscription remove the ads between levels or games; rewarded ads remain available because they only appear when you ask for them.

Contextual by default, personalized only if you accept

By default we request contextual (non-personalized) ads from Google: they are chosen by the kind of app, the language and the approximate location, not by a profile of you. Personalized ads, based on your advertising identifier and your activity in other apps, are shown only if you accept them.

To ask, we use Google's User Messaging Platform (UMP), which shows a consent form when the app opens:

• In the European Economic Area, the United Kingdom and Switzerland (GDPR): a form where you can consent, decline or manage options by purpose and by vendor, following the IAB Europe Transparency and Consent Framework (TCF). You can change your choice at any time from Settings → Privacy options inside the app.
• In US states with privacy laws (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Florida and others Google adds): a notice to opt out of the sale or sharing of your information for targeted advertising. It is also available under Settings → Privacy options.
• Elsewhere no form is shown and ads are contextual.

On iPhone and iPad we do not request Apple's tracking permission (App Tracking Transparency), so the app does not access Apple's advertising identifier (IDFA) and is not used to track you across other companies' apps. If we ever decided to request it, you would see it as a system prompt you can decline, and we would update this policy and the store listing first.

What Google receives when an ad is shown

According to Google's documentation, the Google Mobile Ads SDK automatically sends to Google, encrypted in transit:

• your IP address, to estimate the device's general location (country or region) and to prevent fraud;
• device identifiers: on Android, the advertising ID (which you can reset or delete in Android settings) and the App Set ID, and on phones that have them turned on, Android's ad privacy features (topics and ad measurement), which you control in Android settings; on iOS, without tracking permission, the IDFA is not accessed;
• ad interactions: impressions, taps, whether a video was watched to the end;
• diagnostic and device information: model, OS version, language, app version and SDK performance;
• your consent status, so that Google and its advertising partners honor it.

Google uses this data to serve and measure ads, limit how often you see the same one, detect fraud and, only with your consent, personalize advertising. Google acts as an independent controller of that data. You can read how Google uses information from apps that use its services, the Google Privacy Policy and the list of ad technology providers AdMob may share data with when you consent.

How to change your ad choices

• Inside the app: Settings → Privacy options (shown in regions where a form applies).
• Android: Settings → Google → Ads lets you "Delete advertising ID" or reset it.
• iPhone and iPad: Settings → Privacy & Security → Apple Advertising and Tracking.
• You can also buy "Remove ads" or subscribe to Mente Alegre Plus in the app to stop seeing ads between levels or games.

5. Usage and stability: Firebase Analytics, Crashlytics and Remote Config

We use three Firebase services (Google LLC) to understand how the games are played and to fix crashes. None of them receives your name, email or a user ID of ours: we do not create one for these services. (The anonymous identifier of the weekly league is separate and only exists if you join it; see section 7.)

Google Analytics for Firebase

It records aggregated usage events: when a level starts and ends and at which difficulty, how long it took, whether you used a hint and which kind, whether an ad was shown and at which point of the game, whether you made a purchase or subscribed (only the product name, for example "remove ads" or "plus monthly"), which text size and difficulty you chose, whether you left a game unfinished, whether you completed a theme, whether you shared a postcard (only which theme), whether you opened or completed a seasonal event, when a plant in your garden grows, whether you tapped the link to another Mente Alegre game, whether you opened the Shop or the Mente Alegre Plus screen, whether you started a purchase and whether you completed it, cancelled it or it could not be made (without the store's message), how many purchases came back when you tapped "Restore purchases", and whether you opened the league tab and joined the league (without your nickname, picture or league identifier). In Solitario, also the number of moves and of undos. Also Firebase's automatic events: first open, game session start, app update and screens viewed. We do not record which words you found, your taps on the grid or what you share.

With each event, Firebase collects: an app-instance ID (random, specific to that installation; it does not identify the person or the physical device), the device model, OS version, language, app version, the approximate location (country or region) derived from the masked IP address, and on Android the device's advertising ID. On iOS, without tracking permission, it does not access the IDFA. Data travels encrypted.

Firebase Crashlytics

If the app crashes, it sends a report with the error trace, the state of the app at that moment (for example, the level you were on and the text size you chose), the device model and OS version, available memory and a random Crashlytics installation identifier used to count how many installations are affected. It also records non-fatal errors the app detects itself. This is used to fix bugs and keep the app stable.

Firebase Remote Config

It lets us adjust the ad frequency and switch ads off if needed, turn features on or off (the weekly league, seasonal events, the garden) and update the "More games" list, all without updating the app. For that, the device sends Firebase the country, language, time zone, OS and app version, the app's Firebase ID and the Firebase installation ID.

Firebase installation ID

All three services use a Firebase installation ID (FID), generated at random when the app is installed, which does not identify a person or a physical device and changes on reinstall.

6. In-app purchases

Optional purchases (remove ads, hints, unlimited hints, the Piggy Bank, level packs) and the Mente Alegre Plus subscription (monthly or yearly) are processed by Google Play (Google LLC) or the App Store (Apple Inc.) with the account and payment method you have in your store. We do not receive your name, email, address or payment details. The app receives from the store only a transaction identifier, the product purchased and its state, and stores them on your device to activate the purchase and allow restoring it. If you have Mente Alegre Plus, each time you open the game with a connection it asks the store whether the subscription is still active and stores on your device how long it is valid; no server of ours is involved. How it renews and how to cancel is in the terms of use. Google Analytics receives the product name (and on iOS, through Firebase's automatic StoreKit integration, possibly the price) for our revenue reports, with no data that identifies you.

Purchase history, receipts and refunds are handled by the store under the Google Privacy Policy or the Apple Privacy Policy.

7. Weekly league (optional)

The league is switched on game by game and may not be available in yours yet. When it is, it is a weekly league: a table you share for one week with a group of up to 30 people who play the same game. It is a separate tab and it is optional. If you never join the league, the app sends none of the data in this section. Opening the app or playing does not enroll you.

When you choose to join the league, and only then, this data is used:

• An anonymous identifier, created at random by Firebase Authentication (Google LLC) at that moment. It is not an account: it has no name, email, phone number or password, there is no sign-in screen, and it cannot be used to identify you outside that app's league. It changes if you reinstall the app.
• A nickname and a picture you pick from a list (for example, "Girasol Alegre"). You cannot type free text or upload photos: nobody can enter their real name or any other detail of their own.
• Your stars for the week: a number that goes up when you complete levels, the daily challenge and missions. How long you take to solve a level is not sent. The time of the last update is stored next to the number and is used only to apply an hourly cap and prevent cheating.
• Your division in the league and last week's result (your place in the group).

Who sees it. The people in your group see your nickname, your picture and your stars for the week, just as you see theirs. They do not see your identifier or anything else. There is no global table, no messaging and no way to contact another person.

Where it is stored. In Firebase Authentication, Cloud Firestore and Cloud Functions (Google LLC), in the United States; Google acts as a processor on our behalf. As with any internet connection, when you use the league Google receives your device's IP address, which it uses to operate and protect the service and which we do not store with your league data. This data is not used for advertising or analytics and is not shared with anyone else.

How to leave. On the league screen, "Salir de la liga" (Leave the league) immediately deletes your anonymous identifier, nickname, picture, division and place in the table. Your stars and progress stay stored on your device.

8. Sharing and challenge links

When you finish a level or a Daily Challenge you can tap Share or Challenge a friend. Both are optional and only do something when you tap them.

• Share builds, on your device, a picture and a text with the celebration message or your result (for example, "no hints"), the name of the game and "mentealegre.com", and opens your phone's share menu. It does not include your name, times or any identifier.
• Challenge a friend shares a text with a link such as mentealegre.com/r/sopa/2026-10-04. The link only says which game and which day; it carries no data about you and does not reveal who sent it.
• What you share goes only to the app and the person you choose in that menu (for example, your messaging app), and from there that app's privacy policy applies. Nothing goes through us or is stored on any server of ours.
• Someone who opens a challenge link and has the game installed goes straight to the challenge. If they do not, they land on a page of this site that only sends them to the game's store listing; that page uses no cookies or identifiers (see This website).
• On iPhone and iPad, if you choose Save Image in the share menu, the system asks for permission to add that picture to your photos. The game never reads your photos.

9. Permissions and internet

The apps work offline: all content is included. Internet is used only for ads, purchases and the subscription, the Firebase services described above and, if you join it, the weekly league. Offline, the league does not update; the rest of the game works the same.

The apps do not request access to location, camera, microphone, contacts, calendar or notifications, and they do not read your photos. The only permission that may appear is the one to add a picture to your photos, on iPhone and iPad, when you choose to save a shared picture (section 8). If a future feature needed a new permission, we would ask for it when you use that feature and explain it here.

Two features use your store's services without sending us anything: the invitation to rate the game, which is shown by Google Play or the App Store, and the More games screen, which checks on your own device whether you already have another Mente Alegre game installed, to offer to open it instead of installing it. That check does not leave the device.

10. Children

The apps are made for adults: that is the audience we declare to the stores. Their content is rated for everyone (Everyone on Google Play, 4+ on the App Store), but they are not directed to children and are not part of the stores' family or kids programs, and we do not ask ad providers for any child-directed treatment.

We do not knowingly collect personal information from children under 13 (or under the minimum age set by your country's law, for example 16 in parts of the European Union). If you are a parent or guardian and believe a child in your care has provided us with data, or that a third-party service has received it through our apps, write to hola@mentealegre.com and we will take reasonable steps to delete it.

11. Legal bases and international transfers

If you live in the European Economic Area, the United Kingdom or Switzerland, these are the legal bases we rely on:

• Consent (Art. 6(1)(a) GDPR): personalized ads and storing or reading identifiers on your device for that purpose. You can withdraw it at any time under Settings → Privacy options, without affecting what was done before.
• Legitimate interest (Art. 6(1)(f)): showing contextual ads to fund free apps, measuring usage in aggregate, detecting fraud and fixing crashes. You can object by writing to us.
• Performance of a contract (Art. 6(1)(b)): processing and restoring your purchases, checking your subscription, and providing the weekly league when you choose to join it.
• Legal obligation (Art. 6(1)(c)): answering requests from authorities and keeping purchase records where the law requires it.

Google LLC and Apple Inc. are based in the United States and may process data in other countries. For transfers from the EEA, the UK and Switzerland, Google and Apple rely on the EU-US Data Privacy Framework and its extensions, and on the European Commission's standard contractual clauses. In Costa Rica, Law 8968 on the Protection of Individuals regarding the Processing of their Personal Data applies.

Representative in the European Union. Uigurus S.A. (MYConsultingCR) has no establishment in the European Union and has not yet appointed a representative there. For any request about your data, from any country, the contact is hola@mentealegre.com.

12. How long data is kept

• On your device: until you uninstall the app or clear its data from the system settings.
• Google Analytics: data linked to the app-instance ID is kept for at most 14 months; after that only aggregated reports without identifiers remain.
• Crashlytics: crash reports are kept for 90 days.
• AdMob: Google keeps advertising data under its own policy; for example, it anonymizes IP addresses in ad logs after 9 months.
• Weekly league: each week's table is deleted when the following week closes. Your anonymous identifier, nickname, picture and division are kept while you remain in the league; they are deleted immediately if you choose "Salir de la liga" (Leave the league), and automatically after 12 weeks without activity in it.
• Stores: purchase and subscription history is kept by Google Play or Apple under their policies.
• Support emails: kept while the conversation lasts and up to 2 years afterwards, in case you write again.

13. Your rights and how to exercise them

Depending on where you live, you have the right to know what data we process about you, access it, correct it, delete it, restrict or object to its processing, take it to another service, withdraw your consent and not be discriminated against for exercising these rights.

• GDPR (EEA, UK, Switzerland): access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may lodge a complaint with your data protection authority (in Spain, the AEPD; in the UK, the ICO).
• California (CCPA/CPRA) and other US states: the right to know, to delete, to correct, to opt out of the "sale" or "sharing" of personal information for targeted advertising, and to limit the use of sensitive information (we process none). We do not sell personal information. Personalized ads may count as "sharing"; you can opt out in the notice shown in your state and under Settings → Privacy options. Since browser opt-out signals cannot be recognized inside an app, that is the way to exercise the opt-out.
• Costa Rica (Law 8968): access, rectification, deletion and withdrawal of consent; you may contact PRODHAB.
• Other countries (for example Mexico, Colombia, Argentina, Chile, Peru, Brazil): the ARCO rights or equivalents recognized by your law, through the same contact channel.

How to exercise them

Write to hola@mentealegre.com stating the app, whether you use Android or iPhone and what you need. We answer within 30 days at most (45 days for requests under US state laws, extendable where the law allows). There is no charge. Keep in mind that, since there are no accounts, we cannot identify you by name or email: almost all data lives only on your device or is processed by Google under random identifiers.

• To delete everything the app stores on your device, uninstall it.
• To delete your weekly league data, use "Salir de la liga" (Leave the league) on the league screen before uninstalling. If you have already uninstalled the app, we cannot tell which row was yours (nothing links it to you): it is deleted automatically after 12 weeks without activity.
• To delete the analytics data linked to your installation, write to us; we will explain how to obtain the app-instance ID and, with it, ask Google to delete it.
• To unlink advertising from your device, reset or delete the advertising ID in Android settings, or manage Apple Advertising on iOS.
• For your purchase or subscription data, use Google Play or App Store support, which is where it is held. Cancelling the subscription is done in the store (see the terms of use).

14. Security

All communications with Google and the stores are encrypted (TLS). The only data we keep outside your device is the weekly league data, if you join it: it is held in Firebase (Google), no app can read or write it directly, and it is only reached through functions that check every value. Data stored on your device is protected by its operating system. If we detected an incident affecting personal data, we would report it as required by law.

15. This website

mentealegre.com uses no cookies, analytics, forms or third-party fonts: everything is served from the site itself. The only page with code of its own is the challenge-link page (/r/…), which looks at what kind of phone you have only to send you to the right store and stores nothing. It is hosted on Firebase Hosting (Google), which logs the IP address of each request in its access logs for a few months to detect abuse and keep the service running, as described in the Firebase privacy policy. If you email us, we keep your message and address only to reply.

16. Changes to this policy

If anything changes (for example, if an app started requesting tracking permission on iOS or added a new service), we will publish the new version here with its effective date and, if the change is significant, announce it inside the app or in its store listing before it takes effect. Previous versions are available on request by email.

17. Contact

Uigurus S.A. (MYConsultingCR), corporate ID (cédula jurídica) 3-101-714694, San José, Costa Rica · hola@mentealegre.com