¡Cerebritos! Privacy Policy

Last updated: August 12, 2026 · Español

¡Cerebritos! is a family trivia game by Salamin Labs. This policy explains, in plain language, what data the app handles and why. We wrote it with kids and families in mind: we collect as little as possible, never sell it, and never use it for ads or tracking.

The short version

You can play in local mode (passing the phone) without giving any data or connecting to the internet. Only if you create a profile to compete online do we store a nickname, your avatar, and your scores. We do not ask for your real name, email, age, or location.

What we collect and why

• Nickname and avatar: you choose them. Nicknames go through a filter that blocks offensive words. They identify you in the game.
• Scores, games played and won, best streak, and medals: to track progress and rank leaderboards.
• Account ID: our provider (Supabase) creates an anonymous ID so your profile is yours. If you back up your account with Sign in with Apple, your Apple ID is linked so you can recover the profile on another phone. We use Apple’s option that does not share your name or email: we do not ask for them and we do not receive them.
• Friends, invites, blocks, and reports: we store your friend list and room invites. If you block someone, we store that block; if you report someone, we store who you report and the reason you write, so we can review it.
• Notification ID: if you enable alerts, we store a technical device token to notify you when a friend invites you to a room. It is only used for that, and you can turn it off in settings.

What other players can see

For rankings and social play to work, other players can see your nickname, avatar, scores, and games. Nothing else: not your real name, email, or any contact detail.

How contact works: your nickname appears on the global ranking, so anyone with the app can see it and send you a friend request knowing only that nickname. If you accept, that player can invite you to rooms and, with alerts on, send you a notification. You can decline any request, block any player, and report them at any time. If a child uses the game, we recommend an adult supervise who they accept.

What we don’t do

• No third-party advertising.
• No tracking your activity across apps or websites.
• We do not sell or rent your data to anyone.
• We do not collect location, contacts, photos, email, or real name.

Who processes your data, and under which rules

The data controller is Salamin Labs, based in Santiago, Chile, reachable at contacto@salaminlabs.com. Because we are established in Chile, we are governed by Law No. 21,719 on the protection of personal data. If you use the app from the European Union, we also apply the GDPR.

Legal basis

We process this data on these grounds:

• Your consent, given when you create a profile and turn on the online features. You can withdraw it at any time (see Your rights).
• Performing the service you asked for: creating your profile, playing online and competing in the rankings.
• Our legitimate interest in keeping a safe space for families, which supports moderation: the offensive-nickname filter, blocks and reports.

When the player is under 14, consent must be given by their mother, father or whoever has legal custody, as Chilean law requires. The same applies in the European Union at the age each country sets (for example, 14 in Spain). See the section on children and teenagers below.

Where data lives and who we share it with

Profile and game data are stored with Supabase (database) and notifications are sent through Apple (APNs). We use no other third parties. Both act only as processors on our behalf and are contractually required to protect your data to the same standard described here. We do not share it with anyone else.

Where data is processed (international transfer)

The database we use is hosted in South America and Apple APNs operates globally, so your data is processed outside Chile. That transfer relies on your consent and on being necessary to provide the service, and in both cases the provider is contractually bound to keep the same protections this policy describes. We do not transfer your data to anyone else.

Security

Communications with our servers are encrypted (HTTPS/TLS). In the database, access is restricted with row-level rules so each account only reaches its own data. No system is perfect; we take reasonable steps to protect you.

If a breach occurs affecting your data, we log it, notify Chile's Data Protection Agency within 72 hours of becoming aware of it, and tell you — in the app or by whatever means we have — when it may pose a risk to your rights.

How long we keep data

We keep each piece of data only while it is still needed for what it was collected for:

• Profile and stats (nickname, avatar, level, scores, badges): while your account exists. If you delete it, they are erased with no copy left.
• Notification identifier: while you keep alerts on. It is deleted when you turn them off or delete your account.
• Accounts with no profile: opening the app creates an anonymous identifier even if you never pick a nickname. If that account never created a profile and sits 12 months without activity, we delete it.
• Game rooms and invitations: temporary, discarded shortly after the game ends.
• Blocks and reports: while needed to keep the space safe, or until you delete your account.

Your rights

• Access: ask us for a copy of your account data at contacto@salaminlabs.com.
• Rectification: change your nickname and avatar anytime from your profile.
• Deletion: in Profile → Delete my account we permanently remove your nickname, points, medals, friends, blocks, reports, and notification ID. No copy remains.
• Portability: ask us for your data in a readable format at the same email.
• Objection: you can object to us continuing to process your data; in practice, deleting your account stops all processing.
• Withdraw consent: sign out, turn off notifications, or delete your account, whenever you want. Withdrawing it does not affect processing done before.

We answer these requests free of charge and within the deadlines the law sets. If you are a parent or guardian, you can exercise these rights on behalf of the child in your care.

If you are not satisfied with how we handle your data or answer a request, you can complain to Chile's Data Protection Agency. We would appreciate hearing from you first: it is almost always solved in one email.

Children and teenagers

The game is meant for the whole family. We do not ask for age or identifiable data such as real name, email, phone, or location. What we store for a player — including a child — is a chosen, filtered nickname, an avatar, scores, and the technical IDs described above (account and notifications), used only so the game works and to send invites.

Local mode requires nothing. Playing on a single phone, with no account and no internet, processes no personal data at all. It is the mode we recommend for the youngest players.

Online features are enabled by an adult. Creating a profile, appearing on the global ranking, having friends and receiving invitations require the consent of the mother, father or whoever has legal custody of a child under 14. By enabling them on a child's device, that adult states they give consent and agree to supervise the child's use. We do not verify the age of whoever is playing — we never ask for it — so that check is the responsibility of the adult in charge.

Difficulty level. When creating a profile you pick a level (Pequeños, Medianos, Grandes or Adulto), which sets question difficulty and suggests an age range. It is used only to pick suitable questions. It is never used for commercial purposes, advertising or profiling, and it is not shared with third parties.

Best interests and progressive autonomy. We process children's and teenagers' data solely for their benefit: making the game work and keeping it safe. Never for advertising, sale, transfer to third parties or targeting. We designed the app to ask for the bare minimum, and that principle overrides any other use.

Parents' and guardians' rights. If a child in your care uses the game and you want to access, correct, delete or object to the processing of their data, or withdraw consent, write to contacto@salaminlabs.com and we will do it free of charge. You can also delete the account directly from Profile → Delete my account.

Changes

If we change this policy, we will update the date above and, for important changes, notify you in the app.

See also our Community guidelines.

← Back to home