This policy explains what information Gallery Eye ("the App," "we," "us") collects, how it's used, and the choices you have. It applies to the Gallery Eye Android app and any associated web version.
gallery-eye.app, contactable at email@gallery-eye.app, is the developer of the Gallery Eye app.
By default, Gallery Eye collects nothing. Your streak and best-score are stored locally on your device and never leave it — unless you choose to use the optional Leaderboard or Friends Boards features.
The App includes an opt-in public Leaderboard. Nothing about your device or your score is sent anywhere until you save a display name on the Leaderboard panel yourself — simply opening the panel to look at it does not create an entry or send anything about your device. The moment you save a name, we generate a random device identifier (not tied to your real name, email, or any account) and store it, along with your current best streak and the display name you chose, in our database. From that point on, any new personal best is synced automatically — no further action needed, and no further prompts.
This information is public. The Leaderboard shows the top scores to everyone who opens it, including whatever display name you chose. Don't use your real name or anything identifying as your Leaderboard name unless you're comfortable with other players seeing it.
You can stop participating at any time by not saving a name again — your existing entry will simply stop updating. To have your entry removed entirely, contact us at email@gallery-eye.app with your Leaderboard display name and your approximate best score and roughly when you played, so we can locate and remove it.
The App also lets you create or join a private, password-protected Friends Board to compare streaks with a small group of people you choose. If you create or join one, we store: a random device identifier for your device, the display name you chose for that board, your best streak on that board, and — for the board's creator only — a password used to manage the board. The password is never stored as readable text; it's stored as a one-way cryptographic hash that can't be reversed back into the original password, even by us.
A Friends Board's members and their scores are visible only to other people who know that board's join code — never to the public, and never mixed with the public Leaderboard. You can leave a board at any time from within the App, which removes your entry from it immediately. The board's creator can delete the entire board (removing every member's entry) using the admin password.
Leaderboard and Friends Board data is kept for as long as you keep using that feature — there's no automatic expiry. If you simply stop playing, your entry doesn't update anymore but isn't automatically deleted; it stays on the board until you remove it yourself (Friends Boards, from within the App) or ask us to (Leaderboard, via the contact process above). Once a deletion request or an in-App board departure is processed, the corresponding device identifier, display name, and score are removed outright — we don't retain a separate copy afterward.
Playing the App causes your device to make requests to a small number of third-party services, each of which may see standard technical information (such as your IP address, device type, and approximate location derived from your IP) as an ordinary part of serving that request. We don't control what these services log; each is governed by its own privacy policy, linked below.
Gallery Eye's paintings, artist information, and images are served from our database hosted on Supabase. If you opt into the Leaderboard or a Friends Board (Section 2), the data described there is also stored there. Requests to load painting content use a public, read-only key; Leaderboard and Friends Board reads and writes go through access-controlled database functions with no ability to read or modify anything beyond what those features need.
Supabase's privacy policy: supabase.com/privacy
To show background information about a painting or artist ("More about this work") and to occasionally discover additional public-domain artwork, the App makes live requests to the Wikimedia Foundation's public APIs. These are standard, anonymous web requests — we don't send any personal information as part of them, but the Wikimedia Foundation's own servers will see your IP address, same as visiting any website.
Wikimedia Foundation's privacy policy: wikimediafoundation.org/privacy
Gallery Eye is supported by advertising served through Google AdMob. AdMob may collect device identifiers (such as your Android Advertising ID), approximate location, and app usage information to serve and measure ads, and — where you've given consent — to personalize the ads you see.
Where required by law (including the EU, UK, and California), you'll be asked to make a choice about ad personalization the first time you open the App. You can change that choice at any time by tapping "Privacy Options" at the bottom of the App, or through your Android device's own ad settings (Settings → Privacy → Ads → Opt out of ads personalization). Declining personalization means you'll still see ads, just not ones tailored to your activity.
Google's own privacy policy explains what it collects in more detail: policies.google.com/privacy, and its policy specific to AdMob: support.google.com/admob
Here's how to delete data Gallery Eye holds about you, and what happens when you do:
To make any request or ask a question about this policy, contact email@gallery-eye.app.
Gallery Eye is a general-audience app about art history and is not directed at children. We do not knowingly collect personal information from children under 13 (or the relevant minimum age in your country). If you believe a child has provided us with personal information, contact us at email@gallery-eye.app and we'll address it.
We take reasonable measures to protect the App and its infrastructure, including restricting our database so most of the App can only ever read data, never write or modify it, and storing any Friends Board password only as a one-way cryptographic hash, never as readable text. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.
If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, note it in the App's update notes.
gallery-eye.app
email@gallery-eye.app