Tinteca
A game by Mixiuh
Privacy policy
What data Tinteca uses, who receives it and what you can do about it.
Last updated:
Draft for legal review
This text describes what the game does today. Points marked “Legal review” must be confirmed by a lawyer before the game is published, and anything marked “PENDING” is missing information.
On this page
1.The short version
- Tinteca does not ask for your name, email, phone number, photos or location, and it has no accounts. Your progress is saved on your phone.
- Mixiuh runs no servers for the game: we do not receive what you do in it, or your age.
- The only third-party services are Google’s, for ads (AdMob) and consent (UMP), and your phone’s store (Google Play or the App Store) for the one-time purchase. Section 6 says what each one receives.
- None of that starts before the age screen is answered. Ads are optional: they only play when you tap a button that says so.
- For anyone under 13, and anyone who picks “Prefiero no decirlo” (I would rather not say), ads are not personalized, carry Google’s child treatment, and are served without the phone’s advertising ID.
- To delete everything, clear the game’s data or uninstall it.
2.Who is responsible
Tinteca is a game by Mixiuh, a software studio based in Guadalajara, Jalisco, Mexico. Mixiuh is responsible for this policy and for any data you send us.
Legal name, address and phone number of the controller: [PENDING: full legal name (individual or company), address and phone]
Privacy contact: mixiuhonline@gmail.com.
This policy covers the Tinteca app for Android and for iPhone and iPad (identifier com.mixiuh.tinta) and its support pages.
Legal review: Mexico’s LFPDPPP requires the controller’s identity and address in the privacy notice, and the US COPPA Rule requires the operator’s name, address, phone number and email. The developer name shown on Google Play and the App Store must match the one here.
3.The game in brief
Tinteca is a game for all ages. It is free and is paid for by two things only: optional rewarded ads and a one-time purchase, the Mecenas del Taller, which removes the ads. It has an energy, the blank notebooks (“cuadernos en blanco”), that refills over time or instantly with an ad, and that is never sold.
There is no chat, no public profile, no content from other people and no links to social networks. The game sends no notifications. It includes no analytics or crash reporting tools, our own or third-party, apart from what Google’s ad SDK collects on its own (section 6). It never asks about diagnoses or your health.
4.The age screen
When the second page of the first notebook ends, the game asks “¿Cuántos años tienes?” (How old are you?). You can type a number or pick “Prefiero no decirlo”. Nothing is preselected and no birth date is asked for.
Until that answer, the game starts no third-party service and makes no network connections. The answer picks one of three profiles:
- Child: under 13; in the European Economic Area and the United Kingdom, under each country’s age of digital consent; if the game does not know your region, under 16; anyone who picks “Prefiero no decirlo”; and any answer that cannot be read.
- Teen: 13 to 17 (or from that digital age up to 17).
- Adult: 18 or older.
The answer is stored only on your phone and is sent to no one. Google’s services only receive the treatment that matches the profile (for example, child treatment), never your age or date. To apply your region’s rules, the game reads the region set on your phone; it does not use your location or IP address for that.
5.What stays on your phone
All of this lives in the game’s storage on your phone. Mixiuh does not receive it:
- Your progress and settings.
- Your answer to the age screen (the number you typed, or that you preferred not to say) and the resulting profile.
- If you have the Mecenas del Taller: the purchase status confirmed by the store.
- Ads you report: the date, where it appeared and the number the ad network gives that ad. Nothing about the player. The last 50 are kept.
- Whether you turned on “Anuncios según tus intereses” (interest-based ads; adults only).
- A random number created when the game is installed, for the two-price test of the Mecenas del Taller (section 6.3). It never leaves the phone.
- Where it applies, your consent choice, which Google’s tool stores on the phone (section 6.2).
6.What others receive, and why
Mixiuh
Nothing from the game. Only what you email us, if you do, and whatever you choose to paste into that email (for example, reported ads).
Google: AdMob and UMP
Technical data to show the ads you ask for and, where it applies, for your consent. Sections 6.1 and 6.2.
Google Play or Apple
The payment for the Mecenas del Taller, with your store account. The game never sees your card. Section 6.3.
Your phone’s system
The screen lock, so an adult can confirm some actions, and your photo library if you save an image. Section 6.4.
6.1 Google AdMob: ads
When. The game starts Google’s ad SDK only after the age screen. Ads are offered from the second time you play, never when the game opens, and only play when you tap a button that says so, in exchange for something shown beforehand. They are Google ads shown on top of the game. With the Mecenas del Taller there are no ads.
What Google collects. According to Google’s documentation for its SDK (checked on October 5, 2026), the SDK automatically collects and shares, for advertising, analytics and fraud prevention:
- The device’s IP address, which may be used to estimate its general location.
- Product interactions, such as app launches, taps and video views.
- Diagnostic and performance information, such as launch time, hang rate and energy use (on iPhone and iPad, also crash logs).
- Device identifiers: on Android, the advertising ID, the app set ID and, if applicable, identifiers of accounts signed in on the device; on iPhone and iPad, the advertising identifier or other app- or developer-scoped identifiers.
- On iPhone and iPad, advertising data, such as ads that have been seen.
On Android, Google states that all of this data is encrypted in transit (TLS). Sources: Google Play data disclosure and App Store data disclosure.
How we limit it. With every ad request, the game tells Google how to treat it, by profile:
Child
Google’s child treatment. According to Google, it disables personalized ads and remarketing, disables requests to third-party ad vendors (such as measurement pixels), and the Android and iOS advertising IDs are not transmitted.
Also: content for general audiences (G), Google ads only with no other networks, and never the consent form or the tracking prompt.
Teen
Non-personalized ads, with the same Google child treatment and content up to PG.
Adult
Non-personalized by default, up to PG. Only if you turn on “Anuncios según tus intereses” in Ajustes (Settings) and give your permission (consent where the law requires it and, on iPhone and iPad, Apple’s tracking prompt) may Google choose ads by your interests.
According to Google, non-personalized ads are not based on past behavior: they use context, such as the app’s content and a general (city-level) location. Even so, Google uses identifiers for frequency capping and aggregated ad reporting (AdMob Help).
- On Android, the game holds the advertising ID permission only for the adult who turns on interest-based ads; with child treatment, Google does not transmit it.
- On iPhone and iPad, the advertising identifier is only available to an app if you allow it in Apple’s tracking prompt. The game only shows that prompt to an adult who turns on interest-based ads.
- We ask AdMob not to show ads about gambling, dating, alcohol, weight loss, health or medicines. [PENDING: confirm these categories are blocked in the AdMob console]
More on how Google uses this data: How Google uses information from sites or apps that use its services and the Google Privacy Policy.
6.2 Google UMP: your consent
In the European Economic Area, the United Kingdom and Switzerland, and whenever the game does not know your region, before the first ad you choose the game uses Google’s User Messaging Platform (UMP) to ask for the consent the law requires. That tool checks with Google whether asking is needed and stores your choice on the phone, using the IAB TCF standard.
It is never used with the child profile. For teens it carries the under-the-age-of-consent tag; according to Google, with that tag it does not request consent. You can change or withdraw your choice in “Opciones de privacidad” (Privacy options; section 8). If you do not consent, Google may show limited, non-personalized ads.
Legal review: the legal basis for showing contextual ads to minors in the European Economic Area, and the decision on AdMob’s “programmatic limited ads”, which according to Google use local storage to detect invalid traffic without consent.
6.3 Purchases: Google Play and the App Store
The Mecenas del Taller is a one-time payment, not a subscription. Payment is processed by your phone’s store (Google Play or Apple’s App Store) with your account, under its own terms and privacy policy. The game never sees your card or payment details. On the phone it receives the purchase confirmation (which product, its status and a receipt signed by the store) to unlock and restore it, and does not send it to Mixiuh.
In the child profile, before the store opens, an adult confirms with the phone’s screen lock; then the store’s family controls apply (Apple’s Ask to Buy or Google’s Family Link).
Two-price test. Adults may get one of two prices for the Mecenas del Taller. It is decided by the random number created on the phone at install, which never leaves it, and it does not change. The game says so in “Cómo nos mantenemos gratis” (How we stay free). Teens and the child profile always get the lower price.
Legal review: the price test under the EU Omnibus Directive (personalized pricing).
Store privacy policies: Google and Apple.
6.4 What the phone itself does
- Adult confirmation. The game asks the system for the screen lock (fingerprint, face or passcode). The system does the check: the game only receives “yes” or “no”, never biometric data. It is used before buying, saving images or copying reported ads in the child profile, and to correct the age to an older profile.
- Photos. If you save one of your watercolors, the game adds it to the phone’s photo library. On iPhone and iPad it asks for add-only access: it cannot see your other photos.
- Clipboard. Only when you tap “Copiar los reportes” (Copy reports). You decide where to paste it.
7.Children and “Prefiero no decirlo”
Tinteca is for all ages and we know children play it. That is why the child profile, which anyone who picks “Prefiero no decirlo” also gets, works like this:
- We do not ask children for a name, email, location or photos, and there is no way to share data with other people.
- Ads are rewarded and optional: they only play when a button is tapped, after an in-game sheet that says “Ahora viene un anuncio. No es parte del juego.” (An ad is coming. It is not part of the game.). They carry Google’s child treatment, general-audience content and Google ads only, with no interest-based ads or remarketing.
- Children never see Google’s consent form or Apple’s tracking prompt, and never see the Mecenas del Taller next to an ad or when the blank notebooks run out.
- Buying and saving images first requires an adult to confirm on the phone.
- After every ad they can tap “Reportar este anuncio” (Report this ad).
Technical data Google receives. Even with child treatment, Google’s SDK receives technical data such as the IP address, interactions and diagnostics (section 6.1). In this profile we use Google only to show contextual ads, cap how often they are shown and prevent fraud, which the US COPPA Rule calls “support for internal operations”. We do not use it for behavioral advertising or to build profiles.
For parents and guardians. In the child profile’s Ajustes (Settings) there is a switch, “Anuncios en este perfil” (Ads in this profile), marked “Para el adulto” (For the adult). It is on by default; when off, no ads appear in that profile and the blank notebooks refill over time only. You can delete all of the game’s data at any time (section 9) and write to us at mixiuhonline@gmail.com.
If you are under 13 and want to write to us, ask an adult to do it. If someone under 13 writes to us, we use their email only to reply once and then delete it.
Legal review: the full COPPA notice: the internal operations for which a persistent identifier is used (312.4(d)(3)), the written retention policy (312.10) and the security program (312.8); the UK Children’s Code and its impact assessment; and Mexico’s rules for minors (consent through whoever holds parental authority).
8.Your choices
- Privacy options. In Ajustes (Settings), “Opciones de privacidad” appears when Google’s tool requires it (European Economic Area, United Kingdom and Switzerland). There you can change or withdraw your consent, as easily as you gave it.
- Interest-based ads (“Anuncios según tus intereses”, adults only). Off by default. Turn it on or off at any time in Ajustes.
- Tracking on iPhone and iPad.In the iPhone’s Settings, Privacy & Security, Tracking (Apple Support).
- Advertising ID on Android. You can reset or delete it in Android’s settings, in the ads section.
- Your ads on Google. In My Ad Center, if you use a Google account.
- Not watching ads. Just do not tap them: everything free stays free. The Mecenas del Taller removes them for good, and in the child profile an adult can turn them off.
- Reporting an ad. “Reportar este anuncio” (Report this ad), after every ad.
9.Retention and deletion
- On your phone: until you clear the game’s data or uninstall it. On Android: Settings › Apps › Tinteca › Storage › Clear data. On iPhone and iPad: delete the app. Your progress is deleted; the Mecenas del Taller comes back with “Restaurar compras” (Restore purchases).
- On Android, the game’s data is excluded from Google’s cloud backup, though it can move to a new phone with a direct device-to-device transfer. On iPhone and iPad, system backups (iCloud or your computer) may include app data, depending on your settings.
- At Google: under its own rules (how Google retains data).
- At the store: your purchase history stays in your Google Play or Apple account, under their policies.
- At Mixiuh: only the emails you send us. We keep them while we handle your request and for up to 12 months after the last reply; then we delete them. You can ask us to delete them sooner.
Legal review: the retention period for support emails (written retention policy, COPPA 312.10).
10.Your rights
Depending on where you live, the law gives you rights over your data:
- Mexico: access, rectification, cancellation and opposition (ARCO rights), and withdrawing your consent.
- European Economic Area and United Kingdom: access, rectification, erasure, restriction, portability, objection and withdrawing consent at any time, plus lodging a complaint with your country’s data protection authority.
- United States: parents and guardians can ask to review or delete their children’s information and refuse further collection.
Mixiuh does not hold the game’s data: it lives on your phone and you delete it yourself (section 9). For emails you sent us or any question, write to mixiuhonline@gmail.com and we will reply within the time the law sets. For data held by Google or the store, use their tools or contact them; we can help you find how.
In Mexico, the authority for personal data is the Secretaría Anticorrupción y Buen Gobierno.
Legal review: rights, deadlines and authority under the current LFPDPPP (DOF 2025), the GDPR and any applicable US state laws.
11.Security and transfers
- The game’s data stays inside the sandbox the system gives each app.
- The game only loads its own content, bundled in the app, and does not let you browse to other sites.
- Mixiuh runs no servers for the game, so it keeps no copies of your data.
- We only share data with Google and the stores, which handle it under their policies and their commitments to us and to the stores, with protection at least equal to what this policy describes.
- Google and Apple may process data outside your country, including in the United States, under their policies.
Legal review: the equivalent-protection confirmation Apple requires (guideline 5.1.1), international transfers, and whether Google acts as controller or processor in each case.
12.Privacy notice (Mexico)
- Controller: Mixiuh (section 2).
- Data: we collect no identifying data. Your age answer is stored on your phone; through Google, the technical data in section 6.1; through support, your email and what you write.
- Necessary purposes: showing the rewarded ads you ask for with the protections for your age, processing and restoring the Mecenas del Taller purchase, and answering your messages. There are no secondary purposes: we do not use your data for marketing and we do not sell it.
- Sensitive data: none. We never ask about your health.
- Third parties: Google (ads and consent) and your phone’s store (purchases), as explained in section 6.
- ARCO rights and withdrawal: by email to mixiuhonline@gmail.com, with your name (or your representative’s), what you request and a way to reply to you.
- Changes: on this page, with its date.
Legal review: the full privacy notice under the LFPDPPP (DOF 2025): disclosure or transfer to Google and the stores, tacit consent, and the means to limit use or disclosure.
13.Changes to this policy
If what the game does with data changes, we update this page and its date before the change reaches the game. If the change is significant, we will also mention it in the store’s release notes.
Questions? Write to mixiuhonline@gmail.com or visit Tinteca support.