Effective date: 2 November 2026.

This page is Skystone Properties LLC’s personal data processing policy for Gringo Meter.

Who is responsible and how to reach us

Gringo Meter at gringometro.com is operated by Skystone Properties LLC, a Texas (USA) limited liability company, 2009 Woodhead, Houston, TX 77019, USA. It is responsible for processing your personal data. Privacy team (questions and complaints): [email protected] · +57 301 246 3527.

What we use

Before issuing a player code, we ask you to accept this notice. The checkbox is optional. You can keep browsing without it. We retain the notice version (which identifies the purposes you accepted), language, time and method of your authorization so we can answer requests for proof. An email account still requires a separate verification code.

You can browse without an email account. To remember play and protect an account, we use a player code, device sessions and secure session cookies. If you create or recover an email account, we use your email, verification times, hashed verification codes and sign-in links, and session records. Verification email is delivered by Resend. Your email is not shown on your public profile.

You may add a display name, handle, biography, profile photo, flag preference, and self-declared country or city of origin and residence. These places can determine a self-declared player group, flag, and price display; they are not verified nationality or residence. A device-language country suggestion stays on your device until you choose it. Public contributions and profiles can show your chosen name, handle, approved photo, flag, group-related attribution and earned participation history. Editing your places or flag preference does not silently rewrite earlier contribution snapshots or votes.

When you contribute, we keep the place, item, price, date, source, description, language, review state, author and related timestamps. Optional uploads include public photos and private receipts, menus or booking evidence. Private evidence is for review and is not a public card photo. Upload records include file type, size, hash or version, purpose and owner. We strip image metadata on the server. Optional image extraction sends an image to Cloudflare Workers AI to suggest editable fields; the feature falls back to manual entry when unavailable. Do not upload unnecessary personal or payment information.

We keep votes, saves, visits, price confirmations, group picks, rewards, notices and their timestamps. A group pick records its two public finds, its creator, link hashes, voters, optional poll-only names, votes, chosen plan and expiry. People with a link can see the public choices and join; the creator and voters can see the split and participant names. Links can be forwarded. Group picks stop being accessible after 30 days; related records are deleted in bounded batches when poll activity runs, so physical deletion may occur later. Browser copies and messages are outside that cleanup. An older price-check server route can still retain a player, find, guessed price, declared group and day if an older client uses it.

Business accounts use verified email and a declared role to request a place claim. We store domain checks, claim decisions, hashed invitation links, team membership and changes, official price lists, public replies with revisions, and administrative audit records. Current teammates can see the team identity needed to manage access. Public business prices and replies are labelled as such; private claim contact and email remain in account and review functions. Removing team access does not erase attributed historical activity. Businesses see activity and daily aggregate counters for their places, not a list of private customer identities.

If you run a business on Gringo Meter, we email you a weekly recap about your place (views, prices to check, customer prices). Each email has a one-tap link to stop them.

When you pick between two places in This week's question, we save your side (Paisa or Gringo) with that pick. We show only totals per place, never one person's picks.

When we send a business a personal invite link, we keep only a scrambled copy (hash) of the link's code, the business name, a short private note about who we sent it to, and counts of how often the link led to visits, sign-ins and claims. Only our moderators see these. The link alone never proves who runs a business.

When a business claims a place, we give it a private code to show it runs the business. If it sends the code by Instagram or WhatsApp, a moderator reads that message in the app to match it, without copying it into Gringo Meter.

To help businesses and check claims, our moderators can open a read-only copy of a business's dashboard (its private prices, stats and claim status), and we log each time they do.

The app uses the connection IP or normalized network to produce salted abuse-control hashes and short-lived rate buckets. We do not store the raw IP in the application database. Cloudflare may hold separate request and infrastructure logs under its own terms. We receive limited screen-error reports with email addresses and long numbers removed; these go to server logs, not the application database. Count-only product analytics store categories such as day, source, language and screen or event type without a player, device or IP identifier. The underlying participation records do contain player identifiers and may be used as described below.

Cookies and browser storage hold session and interface state, preferences, referrals and drafts. A draft photo may remain in your browser’s IndexedDB. Clearing browser storage does not erase server records and may remove access to an anonymous profile or unsent draft.

Children. Gringo Meter is for people 18 years or older. Do not create an account or post if you are under 18. Do not submit personal data about children. If we learn that we hold such data, we may restrict or remove it and handle requests as applicable law requires.

Sensitive data. Do not submit sensitive data (health, biometrics, racial or ethnic origin, political or religious affiliation, sex life, or payment-card numbers). We do not ask for it. If we ever did, that would need a separate optional consent, and the service would still work without it.

We do not currently collect payment information. If we later offer paid features or subscriptions and that requires additional personal data, we will update this notice and, where the purpose changes, seek new authorization before processing that data.

Why and with whom

We use this information to:

• provide account access, contributions, recommendations, boards and game results
• display public content and attribution
• review submissions and run moderation
• prevent abuse, fraud and security incidents
• operate, debug, measure and improve the product
• produce statistics, research and anonymized or aggregated insights
• meet legal duties and defend claims
• transfer the service to a successor in a merger, acquisition or sale of assets, under this notice

Public material can be viewed and shared by anyone. Copyright in posts and photos is licensed under the Rules, not this page.

We may use automated systems, including AI, on data you have authorized, to operate, moderate, extract suggested fields from images you upload, and improve Gringo Meter. Sending identifiable data to train a third party’s general models is a separate optional consent. We do not do that today.

Once records are aggregated or anonymized so they cannot reasonably identify you, they are no longer personal data. We may use, license and sell those insights, including to businesses. We will not reverse that process to identify you. If a slice is still reasonably identifiable (for example a tiny barrio sample), we treat it as personal data and we do not sell it.

Authorized administrators and moderators see information needed for their roles.

We share personal data with processors who process it on our instructions: Cloudflare (hosting, database, media storage, optional Workers AI); Resend (account email); Porkbun (forwards incoming contact mail to our monitored mailbox). They may process data in the United States and in other countries where they operate. The United States is on the list of countries with an adequate level of protection (Circular Externa 005 de 2017, compiled in Title V of the Circular Única) kept by Colombia’s data protection authority, the Superintendence of Industry and Commerce (SIC). For other countries we rely on your authorization for international transfer (Law 1581, art. 26(a)) and on transmission contracts with processors (Decree 1377, arts. 24–25).

We do not currently sell identifiable personal information. Sale or rental of identifiable personal data to another organisation for its own purposes is a separate optional consent. It is off unless you tick that box. We do not offer that box today.

Marketing email, SMS or messaging (offers, newsletters, commercial messages that are not strictly about the account or a post you made) is a separate optional consent, off unless you tick that box. We do not operate that list today. You can cancel it at any time. Hours and exclusion lists in Law 2300 of 2023 apply if we send such messages.

Retention and your choices

We use access controls, input checks, rate limits and review controls to reduce unauthorized access and misuse. No online service can promise absolute security. If a security incident requires notice, we will follow applicable law, including notice to the SIC where required (Law 1581, art. 17(n)).

You can edit supported profile fields and choose what to contribute or share. The app does not provide a general self-service account deletion control.

We keep personal data for as long as it is reasonable and necessary for the purposes above, including administrative, accounting, tax, legal and historical needs, and for as long as a legal or contractual duty requires it (Decree 1377, art. 11 = Decree 1074, art. 2.2.2.25.2.8). The application databases remain in use while the service operates, subject to those purposes, those duties, and deletion rights. Apart from specific expiry paths such as group picks and temporary uploads, account, contribution, vote, audit and evidence records do not currently have a fixed automatic deletion date. A post removed from public view may leave a private review or audit record. Cloudflare’s D1 recovery history can retain prior database states for up to 30 days; provider logs and backups have their own retention periods.

Approved public prices that other people have confirmed may be kept without your name or handle so the price history stays correct.

To consult your data or request proof of authorization, correction, update, deletion, revocation or another applicable right, email [email protected]. Tell us enough to locate your record, such as your account email or public handle. Do not send a verification code or recovery link. We may ask you to verify control of the relevant account before disclosing or changing private information. The privacy team will acknowledge, request any missing information, and respond within the legal time limits: 10 business days for a question (extendable by 5 with notice) and 15 business days for a complaint (extendable by 8 with notice) (Law 1581, arts. 14 and 15). If a complaint is incomplete we will ask for the missing pieces within 5 days. We will mark a complete complaint as “in progress” within 2 business days. We may retain a record where a legal or contractual duty requires it, and will explain a denied request. You may complain to the SIC after you have used this question or complaint path (Law 1581, art. 16).

Revocation and deletion are available at any time unless a legal or contractual duty requires the record to remain (Decree 1377, art. 9).

Changes

We will date changes to this page. If a change in who controls your data, or in its purpose, can affect the authorization you already gave, we will tell you before or at the moment we implement it, and we will ask for a new authorization when the purpose changes (Decree 1377, art. 5).