Privacy Policy

About this policy

Updated 4 November 2026. This policy covers the Pulse Android app, optional usage collection and the support pages linked here. It replaces the policy dated 28 October 2026. Optional usage sharing remains off by default.

Controller and contact

Pulse: Target Practice, package com.lluisgasso.pulse, is provided by Lluis Gasso Villarejo (Lluís Gassó), NIF 52599019C. Avinguda Joan XXIII 7, àtic 2, 08930 Sant Adrià de Besòs, Barcelona, Spain. Privacy and support: hello@lluisgasso.com.

What stays on your device

Settings, audio preferences, personal records, up to 100 score-history entries and 200 playtest attempts remain in Android app-private storage. Local logs can include timestamps, configuration, run time, mistakes, interruptions, input method and optional feedback. Android backup is disabled. You can play with usage sharing off. Rewards progress (XP, badges, unlocked cosmetics and daily streak) is stored only on your device.

Optional usage sharing

If you explicitly opt in, Pulse sends future usage snapshots: app build and Android/browser platform; settings such as track, starting difficulty, game mode, theme, audio toggles and volume; foreground visit duration; active gameplay duration; run starts and retries; scores, decision and error counts; pauses and how a run ended; and return visit dates. Foreground duration may include idle time. Optional feedback answers, exact tap positions, screen size, recordings and your existing history are not automatically uploaded.

A cryptographically random, resettable installation credential connects visits and lets this installation request deletion. Its hash identifies stored reports. This is pseudonymous data, not anonymous data. We do not request your name, email, advertising ID, hardware identifiers, contacts, location, microphone, camera or photos for analytics. Pulse has no ads, purchases, account registration or cross-app advertising tracking.

The purpose is to understand game settings, engagement, usability and voluntary return visits and improve Pulse. The developer can view aggregated results in a sign-in-protected dashboard. The first-party collector is hosted through OpenAI Sites and Cloudflare infrastructure. HTTPS encrypts transmission. Network providers necessarily process request IP addresses and technical metadata to deliver and protect the service; Pulse does not add them to gameplay reports or use them for location analysis. Hosting providers may process operational logs under their own security and retention practices.

Your choice and deletion

Choose Keep private to decline. You can change your choice under Usage sharing in Settings. Stop sharing & delete shared usage immediately stops collection, clears unsent usage snapshots and requests deletion of shared gameplay reports for the current installation. If offline, the deletion credential is kept locally and the request retries when the app is open and connected. A pending deletion must complete before sharing can be enabled again. Enabling again creates a new installation identity. Scores and game preferences are preserved.

Unsent usage snapshots are bounded to 200 items and are retried for up to seven days; older or excess items are discarded. Gameplay reports stop appearing in analytics after 90 days. Expired stored records are removed when the service next processes a request. Deletion removes gameplay reports earlier; a hashed revocation marker can remain for 90 days to reject delayed uploads.

Clearing app data or uninstalling removes the installation credential and does not itself contact the server. Request deletion in the app first while connected. If the credential has already been removed, we cannot reliably identify that installation from your email; remaining reports expire under the retention rules above. Local data is removed through Android app-storage settings or uninstalling.

Exporting a report is your choice

Export creates a JSON file through Android's system file picker. You choose whether and where to save it. It can contain timestamps, game configuration, performance and optional feedback. Export does not send it to the developer. Files exported or shared with another provider are separate copies governed by that provider's practices; deleting the app does not remove those copies.

Sharing a score is your choice

Share score opens Android's share sheet with your score, setup, duration and a closed-test invitation link. You choose the app and whether to send. It does not include your full play history or installation credential.

Contact and audience

If you voluntarily email support or send a report, we receive your sender address, message and supplied information and use it to respond and investigate feedback. To request deletion of material sent directly, contact hello@lluisgasso.com. We cannot delete copies held by another recipient.

The closed test is for adults. Pulse is a game, not a medical assessment or treatment. We will revise this policy if data practices change. Neither consent nor gameplay requires a purchase.

Purposes and legal bases

Optional gameplay analytics relies on your consent (Article 6(1)(a) GDPR). Keep private declines it; Stop sharing & delete shared usage withdraws consent without affecting earlier lawful processing. Playing and rewards do not require consent. Responding to voluntary support requests and securing the service rely on our legitimate interests in assisting users and operating a safe service (Article 6(1)(f)), or steps you request in relation to a contract (Article 6(1)(b)) where applicable. Compliance with legal obligations relies on Article 6(1)(c). No advertising profiles or automated decisions with legal or similarly significant effects are made.

Recipients and international transfers

The developer accesses aggregate gameplay reports. OpenAI Sites and Cloudflare provide collection/hosting infrastructure; the email providers used for correspondence process voluntary support messages. Information may be processed outside the EEA, including in the United States. Where required, transfers use an applicable adequacy decision or standard contractual clauses with supplementary safeguards. See the ChatGPT Sites Data Processing Addendum and Cloudflare Data Processing Addendum. Contact us for applicable safeguard information. We do not sell personal information.

Support retention and website visits

Routine support messages are retained for up to 12 months after the last substantive response, then reviewed for deletion. Material needed for an unresolved request, a legal obligation or a specific legal claim is kept only for that purpose and the applicable period. Gameplay retention and deletion are described above. These static support pages use Cloudflare without scripts, analytics, advertisements, cookies or external fonts. Its network processes IP addresses, request time and technical metadata to deliver and secure pages under its service/security retention rules. Google processes visits to the historical Google Docs policy under its own privacy practices; the static pages do not embed it.

Your privacy rights

Where applicable, you may request access, correction, deletion, restriction or portability and object to legitimate-interest processing. Contact hello@lluisgasso.com. The in-app deletion control is the reliable way to identify your pseudonymous installation; we do not request additional identity data merely to identify records after its credential is removed. We may verify requests. We normally respond within one month and explain permitted extensions. You may complain to the Spanish AEPD or your competent supervisory authority. There is no Pulse account to delete. Providing support information is voluntary; without relevant details we may be unable to answer.