Skip to content
Invaders Finder

Privacy policy

Mobile app Invaders Finder (iOS) and website invaders-finder.com. Last updated: July 2026.

1. Data controller

The app is published by the person or entity responsible for the developer account associated with Invaders Finder. For any question about data processing, use the contact information available on the Support page.

2. Data you provide

Account (optional). If you create an account or sign in:

  • Authentication is handled by Supabase (email/password, Sign in with Apple, or Google depending on your choice). Credentials are processed according to that service’s practices.

3. Data stored when using the app

The items below describe the current behavior of the app when communicating with the server.

Flashed invaders — When signed in, the list of invader IDs you mark as found can be synced and stored server-side (dedicated table linked to your account).

Technical profile — During sync or account-related actions, the app may record: last sync date, app version, a local technical install identifier (generated and stored locally, distinct from Apple’s advertising identifier), and mini-game related information (e.g. high score if you play it and sync runs).

Push notifications — If you accept notifications, an Apple-provided token (APNs) may be transmitted to the server together with the install identifier above, to be able to deliver notifications. This may happen even without an account, based on the current behavior of the app.

Invader catalog — The app downloads public data about mosaic locations and metadata (files or API) to display the map and lists. It is not personal data you enter.

Location — With your consent (“while the app is in use”), the app uses your position to display your dot on the map on the device. This location is not sent to our servers; it is only used for local map rendering and related interactions.

4. Data stored on device only

Settings, preferences and lists of flashed invaders can be kept locally on your iPhone or iPad (e.g. via the system’s storage). Without an account or sync, these data are not sent to the server.

5. Website (invaders-finder.com)

When you browse this website without using the app, the processing below applies. The iOS app does not include the script described here.

Audience measurement — We use Google Analytics 4 (Google Ireland Limited / Google LLC, measurement ID G-5J57V909K7) to understand how pages are used (pages viewed, approximate referral source, device and browser type, inferred country or region). This helps us improve the website; it is not used to identify you by name in the context of the mobile app.

Cookies and similar technologies — Google Analytics may set cookies or use similar technologies in your browser (e.g. _ga, _ga_*). Further information: Google Privacy Policy and how Google uses cookies.

Legal basis (GDPR) — Legitimate interest: aggregated audience measurement and website improvement. You may object to this processing (section 9), or limit cookies via your browser settings, a tracker-blocking extension, or tools offered by Google.

Transfers outside the EU — Data may be processed in the United States by Google, under safeguards provided by that processor (standard contractual clauses or an equivalent mechanism).

Retention — According to the Google Analytics configuration and account retention settings; in practice, limited periods set in the Google Analytics interface (often on the order of a few months for event data, depending on chosen settings).

6. Purposes

  • Provide the map, list and detail features;
  • Enable backup and sync of your progress when using an account;
  • Ensure technical operation (app version, install identifier to correlate data server-side when needed);
  • Send notifications if you have authorized them;
  • Measure and improve website traffic (section 5).

We do not resell your personal data to third parties. Advertising shown in the app is described in section 6a. The website does not display third-party advertising beyond the audience measurement described in section 5.

6a. Advertising in the app

The app displays advertising provided by Google AdMob (Google Ireland Limited / Google LLC): banners in lists and on the map, an occasional full-screen ad, and an optional “Support the app” video you choose to watch.

  • Data processed — To serve and measure these ads, Google may process advertising or device identifiers, IP address (approximate location), usage and ad interaction data, and technical information about the device and app.
  • Your consent (EU/EEA and UK) — A consent screen compliant with the IAB TCF framework is displayed through Google’s User Messaging Platform. You choose whether to accept or refuse personalized advertising; if you refuse, non-personalized ads may still be shown.
  • Change your choice — Anytime in the app: Settings → About → Manage ad consent.
  • App Tracking Transparency — The app does not request Apple’s tracking permission; no IDFA identifier is used for cross-app tracking.
  • Apple attribution — Apple’s privacy-preserving SKAdNetwork framework may be used to measure installs without identifying users.
  • Learn more — How Google uses data.

6b. In-app usage measurement

The app uses TelemetryDeck (TelemetryDeck GmbH, Germany) to understand which features are actually used, in an anonymous way.

  • Data sent — Aggregated usage events only: app launch, mosaic flashed (with the city prefix only), city completed, share image generated, ad displayed, Unlimited offer viewed.
  • Data never sent — No GPS coordinates, no precise mosaic identifier, no email address, no account identifier, no advertising identifier.
  • Anonymity — TelemetryDeck receives no identifier that could recognise you; the data cannot identify or locate you.
  • Legal basis (GDPR) — Legitimate interest: improving the app based on anonymous statistics. No consent is required, as this data is not personal data.

7. Processors

  • Supabase — data described in sections 2 and 3 (account, sync, notifications).
  • Google (Google Analytics 4) — website audience measurement data (section 5).
  • Google AdMob and its advertising partners — serving and measuring in-app ads, and collecting consent through the User Messaging Platform (section 6a).
  • TelemetryDeck — anonymous in-app usage statistics (section 6b).

8. Retention

Account-related data is kept as long as the account exists and sync is being used. Account deletion is available directly from the app settings.

9. Your rights

Under applicable law (notably GDPR in the European Union), you may have rights of access, rectification, erasure, restriction, opposition and portability. To exercise these rights, including objecting to website audience measurement (section 5): Support page. You may also lodge a complaint with the relevant data-protection authority (in France: CNIL).

10. Changes

This policy may be updated as processing evolves. The date at the top will be adjusted accordingly. Continued use of the app or website after publication constitutes acknowledgement of significant changes, to the extent permitted by law.

11. Contact

invaders-finder.com/en/support — privacy and support contact.