Privacy Policy

Last updated: 30 September 2026

Guezzer is a set of party games you play with friends in your browser at play.guezzer.com and, soon, in our iPhone and Android apps. This policy explains what personal data Guezzer uses, why, who else sees it, how long we keep it and what your rights are. It covers this website, the web game and the apps.

1. Who we are

Guezzer is run by Nexisia. Nexisia is the data controller for the personal data described in this policy (the “veri sorumlusu” under Turkish law).

2. What we collect

You can play without telling us your real name or email address. Depending on how you use Guezzer, we process:

• A device identifier. A random identifier created on your device or in your browser the first time you play, so we can recognise your guest account. It is generated at random and doesn't tell us who you are.
• Your profile. The display name you pick (or the random one we suggest) and your avatar colour. Other players in your room see both. We also remember your language setting.
• Sign-in details, only if you choose to sign in. With email sign-in, your email address; the one-time codes we send you are stored only in hashed form. With Google sign-in, the account identifier and email address that Google shares with us. We never see your Google password.
• Games and results. Which games you played and when, the room language, the number of players, and your score and rank.
• Content reports. If you report a question or item, the report (the item, your reason and any note you add) and your account ID.
• What you type in games. Clues, custom questions and answers, and song searches. They are shown only to the players in your room, used only to run that game and never published. Rooms are held in our server's memory and discarded when they close.
• Technical logs. When your device connects to our servers, they record your IP address, your browser or app details (user agent), the time and what was requested. We use these logs to keep Guezzer secure and running and to fix problems.

We don't ask for your real name, age, location, contacts, photos or payment details.

Where it comes from. You give us most of this directly: your name, your email address and what you type. Your device creates the identifier, and logs are generated automatically when you use Guezzer. If you use Google sign-in, Google sends us your account details.

3. Why we use it

We use personal data only for the purposes below. For each one we give our legal basis under the UK GDPR and the EU GDPR (Article 6) and, for users in Türkiye, under the Turkish Personal Data Protection Law No. 6698, known as KVKK (Article 5).

• Running the games: creating your account, putting you in rooms, showing your name to other players, keeping score, saving results and signing you in. Performing our contract with you, meaning our Terms of Use (GDPR 6(1)(b); KVKK 5(2)(c)).
• Sending sign-in codes by email. Performing our contract with you (GDPR 6(1)(b); KVKK 5(2)(c)).
• Keeping Guezzer safe and working: preventing abuse, cheating and spam, investigating problems, fixing bugs and reviewing content reports. Our legitimate interest in running a secure and fair service (GDPR 6(1)(f); KVKK 5(2)(f)).
• Understanding how Guezzer is used, for example how many games are played, using anonymised results. Our legitimate interest in improving Guezzer (GDPR 6(1)(f); KVKK 5(2)(f)).
• Answering your messages and requests, including privacy requests. Our legal obligation where the law requires an answer, otherwise our legitimate interest in helping you (GDPR 6(1)(c) and (f); KVKK 5(2)(ç) and (f)).
• Complying with the law and handling legal claims. Our legal obligations, and establishing, exercising or defending legal claims (GDPR 6(1)(c) and (f); KVKK 5(2)(ç) and (e)).

We don't use your data for advertising, we don't sell it, and we don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Where we rely on legitimate interests, you can object at any time (see Your rights).

4. Who we share it with

We never sell your personal data. We share it only with:

• Other players in your room, who see your display name, avatar colour, scores and what you type during the game.
• Our hosting provider, whose servers run Guezzer and store its database on our behalf.
• Our email delivery provider, which sends sign-in codes and so receives your email address and the code.
• Google, if you use Google sign-in. Google handles the sign-in under its own privacy policy and tells us your account identifier and email address.
• Apple, in Song Battles. Your song searches go to Apple's iTunes search service, and music previews stream straight from Apple's servers, so Apple can see your IP address.
• Third-party content networks. Some images and previews, such as artist pictures from Spotify or product photos from retailers like Trendyol, Hepsiburada and Amazon, load directly from those companies' content delivery networks (CDNs). Like any server your browser loads content from, they can see your IP address and browser details.
• Authorities, when the law requires it, or when it is needed to protect our users, Guezzer or others.
• A new owner, if Guezzer or Nexisia is ever sold or merged. They would have to keep to this policy.

Our hosting and email providers process the data only on our instructions and only to provide their service to us.

5. Cookies and local storage

• This website, guezzer.com, sets no cookies and uses no analytics or tracking.
• The game keeps a few items on your device: entries in your browser's local storage (or the app's own storage) and a small cookie that remembers your language. We use them only to keep you signed in and remember your settings. They are strictly necessary for the game to work, so we don't ask for consent.
• We use no advertising or tracking cookies and no third-party analytics at this time. If that changes, we will update this policy first and ask for your consent where the law requires it.

6. How long we keep it

• Guest accounts: deleted automatically after 12 months of inactivity, together with the device identifier and display name.
• Accounts with email or Google sign-in: until you delete them.
• Game results: linked to your account while it exists. Once the account is deleted, we keep results only in anonymised form, with no link to you.
• Technical logs: 30 days.
• What you type in games: only while the room is open.
• Sign-in codes: they expire shortly after we send them.
• Content reports and emails to us: as long as we need them to deal with the matter.

You can delete your account at any time: see Delete your account.

7. Your rights

Under the UK GDPR and the EU GDPR you can ask us to:

• give you a copy of your personal data;
• correct data that is wrong or incomplete;
• delete your data;
• restrict how we use it, or stop using it where we rely on legitimate interests;
• give you your data in a portable format, or send it to another service.

If you are in Türkiye, Article 11 of KVKK also lets you find out whether we process your data, for what purpose and whether it is used for that purpose, and which third parties in Türkiye or abroad receive it; ask us to tell those third parties about a correction or deletion; object to a result against you that comes solely from automated analysis; and claim compensation if unlawful processing causes you harm.

How to use your rights. Email info@nexisia.com, from the address linked to your account if you have one. It's free. We reply within one month (within 30 days under KVKK) and may ask for details to confirm the account is yours.

Complaints. Please contact us first so we can try to put things right. You can also complain to a data protection authority:

• United Kingdom: the Information Commissioner's Office (ICO), ico.org.uk/make-a-complaint.
• European Union: the data protection authority in the country where you live or work.
• Türkiye: the Personal Data Protection Authority (KVKK), kvkk.gov.tr. Under KVKK you apply to us first. If we reject your request, you find our answer insufficient or we don't answer within 30 days, you can complain to the Personal Data Protection Board within 30 days of learning our answer, and in any case within 60 days of your request.

8. Children

Guezzer is not directed at children under 13, or under 16 where the law of their country sets a higher age. We don't knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

9. International transfers

Nexisia is based in the United Kingdom, and our providers (hosting, email delivery, Google, Apple and the content networks above) may process data in other countries, including the United States. When personal data leaves the UK or the European Economic Area for a country without an adequacy decision, the transfer is protected by safeguards recognised by law, such as the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or the provider's certification under the EU-US Data Privacy Framework and its UK Extension.

If you use Guezzer from Türkiye, your data is transferred abroad, because our servers and providers are located outside Türkiye. We make these transfers under the conditions of Article 9 of KVKK.

10. Security

We use HTTPS encryption, restrict access to our systems and keep as little data as we can. Sign-in codes are stored only in hashed form. No system is perfectly secure, but if a breach affects your data we will tell you and the authorities where the law requires.

11. Changes to this policy

We will update this policy as Guezzer changes, for example when our mobile apps launch. The date at the top shows the current version. If a change is significant, we will announce it on this website or in the game before it takes effect.

12. Contact us

Questions or requests about your data: info@nexisia.com. By post: Nexisia, Flat 52 Windsor House, 4 Fairfield Avenue, Staines-Upon-Thames, TW18 4JW, United Kingdom.