Effective 28 September 2026 · version 1.2
In short: Impostor is a party game that runs entirely offline. There is no account, no email, and the player names, settings and round history never leave your phone. We collect anonymous usage statistics and crash reports so we know what breaks and what to improve. They contain nothing that identifies a player, and you can object to this processing. The free Android version shows an ad after every third game, through Google AdMob and only after you have made a choice in Google's consent form; anyone who has bought anything sees no ads. Purchases are verified through RevenueCat.
The controller of personal data processed in connection with the Impostor app is:
Remotion Adrian Cabała
sole proprietorship registered in Poland
VAT ID (NIP): 8652418014
Email: privacy@remotion.pl
Write to that address about anything privacy related. We reply within 30 days at the latest.
The game saves locally: player names, the selected word pack, your settings (language, number of impostors, round length, hint mode, secret ballot) and a short history of recently used words so they do not repeat too soon. This data is never sent to a server. It disappears when you uninstall the app or clear its data in your system settings.
We use Google Firebase, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland):
| Service | What it collects | Why |
|---|---|---|
| Google Analytics for Firebase | An anonymous app instance ID, device model, OS version, language, approximate country (derived from the IP address, which we do not store), app version, and usage events (app opened, round started, screen viewed, purchase made) | To know how many people play, on which devices, and where they get stuck — that is what we base improvements on |
| Firebase Crashlytics | Crash reports: device type, OS and app version, memory state, and the stack trace at the moment of the error | To fix crashes we would otherwise never hear about |
The app instance ID is a random string tied to an installation, not to you. We never link it to anything that could identify you, and we have no way of working out who you are from it. You can reset it by uninstalling and reinstalling the app.
How Google processes this data is described in the Firebase Privacy and Security policy and the Google Privacy Policy.
On Android, the free version shows a full-screen ad after every third finished game, when you tap Play again. The result of a game is never covered. Anyone who has bought anything in the app never sees ads, and the iPhone version currently shows none.
Ads are served by Google AdMob, provided by Google Ireland Limited. To show, count and protect an ad from fraud, AdMob processes the device's advertising ID, the IP address, device and app information (model, OS version, language, app version) and how you interact with the ad.
In the EEA, the UK and Switzerland the app shows Google's consent form before any ad is requested. Ads are personalised only if you agree. If you do not, AdMob may show non-personalised ads, which still use the data above for frequency capping, measurement and fraud prevention. You can change your choice at any time under Settings → Privacy options in the app, and you can reset or delete the advertising ID in your Android settings (Settings → Privacy → Ads).
How Google uses data from apps that show its ads is described at policies.google.com/technologies/partner-sites.
Extra word packs can be bought inside the app. The entire transaction is handled by Google Play Billing or the App Store — they take the payment and verify the purchase. We never see or store your payment details: no card number, no address, no billing data. All we receive is whether a given pack was purchased, so we can unlock it.
To check with the store that a purchase is genuine and to remember what your installation has unlocked (so it can be restored on a new phone), purchases also pass through RevenueCat, provided by RevenueCat, Inc. (San Francisco, USA). RevenueCat receives a random user ID created on your device, the store's purchase receipt (product, price, currency, date, the store country) and the app and OS version. It receives no name, no email address and no card details.
| Purpose | Legal basis (GDPR) |
|---|---|
| Usage statistics and crash reports | Art. 6(1)(f) — legitimate interest: keeping the game working and knowing what to fix. You can object under Art. 21 GDPR by writing to privacy@remotion.pl, or uninstall the app; uninstalling stops all collection immediately. |
| Handling and verifying purchases, including through RevenueCat | Art. 6(1)(b) — performance of a contract |
| Personalised ads | Art. 6(1)(a) — your consent, given in Google's consent form. You can withdraw it at any time in Settings → Privacy options; withdrawal does not affect processing that happened before. |
| Non-personalised ads: showing them, counting them, preventing fraud | Art. 6(1)(f) — legitimate interest: the free version is paid for by ads. Storing or reading identifiers on your device follows the choice you made in the consent form. |
| Answering messages sent to our email address | Art. 6(1)(f) — legitimate interest: replying to you |
Google may process analytics data, crash reports and advertising data on servers in the United States, and RevenueCat processes purchase records there. This happens under the Standard Contractual Clauses approved by the European Commission and, for Google LLC, its participation in the EU‑U.S. Data Privacy Framework. We transfer data to no party other than Google and RevenueCat.
Impostor is not directed at children and we do not knowingly collect data from anyone under 16. The game contains no adult content, but its mechanic — bluffing and arguing around a table — is meant for older teenagers and adults. If you are a parent and believe your child has given us any data, write to privacy@remotion.pl and we will delete it promptly.
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. For usage statistics and crash reports, you can object to processing under Art. 21 GDPR. You can withdraw consent to personalised ads at any time in Settings → Privacy options.
Because we run no user accounts, the fastest way to erase everything tied to your installation is to uninstall the app — local data is gone immediately and analytics stops flowing. If you want historical data deleted on the Firebase side as well, write to privacy@remotion.pl with the date and device model, and we will locate and delete the matching record.
You also have the right to lodge a complaint with a supervisory authority. Ours is the President of the Personal Data Protection Office, ul. Stawki 2, 00‑193 Warsaw, Poland, uodo.gov.pl.
Game data never leaves the device, so there is no server to breach. Communication with Firebase happens only over encrypted HTTPS/TLS. Access to the Firebase console is protected by two-factor authentication and limited to the controller.
If we change what we collect, we will update this page and raise the version number at the top. For material changes — adding advertising, for example — we will ask for your consent inside the app before anything starts running. Previous versions are available on request.
Remotion Adrian Cabała · NIP 8652418014
privacy@remotion.pl