Privacy policy

Controller: Aitor Palleja. Contact: support@mamporro.com.

What data we process

• Your fighter’s name, which is public: other players see it in rivals, ranking and fight nights.
• Your fights and progress: level, gear, wins and losses. Each fight’s replay is kept for a month, unless someone shares it: then it is kept as long as the fighter exists, so the link keeps working.
• Your friends and the friend requests you send or receive. Only you see the list; others see how many friends your fighter has, not who they are.
• Your clan, if you join one: the points you add each week, the invitations you send or receive and the clan chat messages, which all members can read. Messages go through an automatic filter that masks insults and blocks links, phone numbers and other social accounts, and any member can report them. Clan activity, including messages, is deleted after 14 days.
• A push notification identifier, if you allow notifications: it is generated by Expo’s notification service so we can tell you about friend requests, challenges and clan news. It is deleted when you switch or delete your fighter.
• A token identifying your phone and, if you set up an account, your username and password. Of the token and the password we store only a hashed digest, never the value.
• Reports you make or receive about fighter names.
• The IP address of each request, only in memory for a few minutes, to limit abuse. It is not stored.
• Where you came from, when you create a fighter: a random installation identifier (we store only a hashed digest) and the channel you arrived through (for example, an invitation link). They are used so that someone who invites themselves does not count as a friend, and to know where players come from. They cannot be tied to a person outside the game and are deleted with the fighter.
• The days you open the game, to know how many people come back (it is calculated on our server). Deleted after 120 days.
• How the app is used, anonymously: which screens are opened, how long they stay open and which game actions happen (fighting, levelling up, sharing…). It is collected by Aptabase, which uses no device or user identifiers and no cookies, together with the app and system version. It does not include your fighter’s name. It helps us know what to improve.
• Error reports: if the app or the server fails, Sentry receives the error, where in the code it happened, the phone model and the system version. It does not include your name, your fighter or your IP address. It helps us fix it.
• The ads you choose to watch to earn an extra fight: when, and whether they were completed, so the fight is only given once.

We do not ask for an email or a phone number, and giving your fighter a username and password is optional. Neither the app nor this website uses cookies. Daily reminders are scheduled on your own phone and do not go through our server.

Ads

The app only shows an ad when you ask for one, to earn an extra fight; they never appear on their own. Ads are served by Google AdMob, which processes your phone’s advertising identifier, your IP address and technical device data for this, under Google’s policy. In the European Union we ask first, with Google’s consent form: if you do not consent, ads are not personalised. You can change your choice at any time in Settings → Ad privacy. The legal basis for personalised ads is your consent. We do not send Google your fighter’s name or any other game data.

What for

To run the game: store your fighter, resolve fights, show rankings and remove offensive names. The legal basis is providing the service you request by playing.

How long

As long as your fighter exists. You can delete it at any time from the app (Settings → Delete my fighter) or from this page with your username and password: your fighter, its fights, its friendships, its clan points and messages, its link to your account and related reports are removed. The account is deleted along with its last fighter. Backups rotate automatically: deleted data is gone from them too within four days at most.

Who with

We do not sell or share data with anyone. The server is hosted on Fly.io and backups are stored on Tigris, both acting as data processors, and push notifications are sent through Expo (and from there Google or Apple), which only receive the notification identifier and its text. If you watch an ad, Google AdMob processes the data described above. Aptabase (anonymous analytics) and Sentry (error reports) only receive what is described above, also as data processors.

Children

Mamporro is rated for ages 12 and up on the app stores. Spanish law requires the consent of a parent or guardian to process the personal data of children under 14: if you are under 14, play with their permission.

Your rights

You can access, correct or delete your data, or object to its processing, by writing to support@mamporro.com, and you can complain to your data protection authority.