Privacy policy
Last updated: September 8, 2026
1. Data controller
The Mentaro website is published by Olivier Medina. For any question regarding your personal data, you can write to contact@mentaro.app.
2. Data we collect
Mentaro only works with a Google sign-in. When you sign in, we retrieve from Google:
- your display name;
- your email address;
- your profile picture (Google avatar URL).
You then provide yourself:
- a public username;
- optionally a country, shown on the leaderboard.
While you play, we record:
- your daily challenge attempts: answers, response times, scores per round and total score;
- the friend relationships you create with other players;
- minimal technical data related to the proper operation of the service (server logs, session cookie).
3. Purposes and legal basis
- Providing the service (account, daily challenge, leaderboard, friends) — performance of the contract that binds us when you use Mentaro;
- Security and anti-cheat (server-side score validation, logs) — legitimate interest;
- Authentication via Google — your consent, given by choosing this sign-in method.
4. Cookies and audience measurement
Mentaro sets a session cookie required to keep you signed in (exempt from consent). Your theme choice is stored locally in your browser (localStorage) and is never transmitted to us.
We use Google Analytics 4 to measure site usage (page views, referrers, device). This service is only loaded and only sets cookies after your explicit consent via the banner shown on your first visit. You can change your choice at any time by clearing the site data in your browser. The IP address is anonymized (anonymize_ip). No advertising cookies are used.
5. Data sharing
Your data is neither sold nor transferred. It is processed by:
- Google — for authentication (OAuth) and, if you consent, for audience measurement (Google Analytics);
- our host, IONOS, for storing the database and running the application.
Your username, country and scores are public on the site's leaderboards.
6. Retention period
Your account and game data are kept as long as your account exists. When your account is deleted, they are erased within 30 days, except for technical logs (kept for a maximum of 12 months) and data whose retention is required by law.
7. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. You can exercise these rights by writing to contact@mentaro.app. You can also file a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Changes
This policy may be updated. The last update date appears at the top of this page.