Privacy Policy — Gallery Chameleon

Last updated: 12 July 2026

This Privacy Policy explains how Gallery Chameleon ("the app", "we", "us") collects, uses, and shares information.

Information we collect

• Photos you choose. When you create a hide, you select an image from your device. That image, with your painted character composited onto it, is uploaded to our backend so other players can search it. We only access photos you explicitly pick — we do not scan or index your photo library.
• Game content. The character's position, the finished image, and gameplay results (how many players searched for your character and how many found it) are stored so the game can run.
• An anonymous identifier. We create an anonymous account (via Firebase Anonymous Authentication) so the game can tell games apart and protect against abuse. It is not linked to your name, email address, or any login.
• Diagnostic data. If the app crashes, we collect basic error information (the error message, where in the code it happened, your device's operating system version, and the app version) so we can fix it.

We do not collect your name, email address, contacts, or location.

How we use information

• To provide the core game: create hides, share them via join codes, and let other players seek them.
• To operate, secure, and improve the app, and to keep it free of objectionable content.

How information is shared

• With other players. An image you hide, and its gameplay tally, are visible to anyone you give the game's join code to. Only share a code with people you want to see that image.
• With service providers. We use Google Firebase (Cloud Firestore, Cloud Storage, and Authentication) to host game data and images. Google's handling of that data is governed by its privacy policy: https://policies.google.com/privacy
• We do not sell your information, and we do not use it for advertising.

Data retention

• Uploaded games are automatically deleted 7 days after they are created. This is enforced automatically by our backend: both the game record and the uploaded image are removed. After that, the join code no longer works.
• A copy of your own artwork stays on your device. So that you keep your finished paintings, the app saves each hide you create to your phone's own storage. That copy never leaves your device and is deleted when you delete the app.
• Crash reports are retained only as long as needed to diagnose the problem.

You can delete anything you created, at any time. Open My Hides and tap Stop sharing on a hide. This removes the game and its image from our servers immediately, so the join code stops working. Your painting stays saved on your own device, and you can delete that too (Delete) whenever you want. You can also email us at the address below and we will delete it for you.

Children's privacy

The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with information, contact us and we will delete it.

User-generated content and safety

Players can upload and share images, so the app contains user-generated content. We have zero tolerance for objectionable content. Within the app you can:

• Report any shared image, and
• Block a creator so you no longer see their content.

We review reports and remove violating content within 24 hours. An image that receives multiple reports is hidden automatically while it awaits review. See our Terms of Use for the full policy.

Your choices

• Don't upload photos that contain sensitive or personal information — remember that anyone with the join code can see the image.
• Stop sharing any hide you created, at any time, from the My Hides screen.
• Uninstalling the app deletes the anonymous identifier and every painting saved on your device.

Security

Access to our backend requires authentication, and our security rules restrict who may read and write each piece of data. No method of transmission or storage is 100% secure, but we use industry-standard measures to protect your data.

Changes to this policy

We may update this policy. Material changes will be reflected in the "Last updated" date above.

Contact

Questions, deletion requests, or content reports: accessible.ethical@proton.me