Effective date: 1 November 2026.

Who is responsible and how to reach us

Gringo Meter at gringometro.com is operated by Skystone Properties LLC, a Texas (USA) limited liability company, 2009 Woodhead, Houston, TX 77019, USA. For privacy questions, consultations or claims, contact our privacy team at [email protected] or +57 301 246 3527.

What we use

Before issuing a player code, we ask you to authorize the data use described here. The authorizing button is optional; you can keep browsing without it. We retain the notice version, language, time and method of your authorization so we can answer requests for proof. An email account still requires a separate verification code.

You can browse without an email account. To remember play and protect an account, we use a player code, device sessions and secure session cookies. If you create or recover an email account, we use your email, verification times, hashed verification codes and sign-in links, and session records. Verification email is delivered by Resend. Your email is not shown on your public profile.

You may add a display name, handle, biography, profile photo, flag preference, and self-declared country or city of origin and residence. These places can determine a self-declared player group, flag, and price display; they are not verified nationality or residence. A device-language country suggestion stays on your device until you choose it. Public contributions and profiles can show your chosen name, handle, approved photo, flag, group-related attribution and earned participation history. Editing your places or flag preference does not silently rewrite earlier contribution snapshots or votes.

When you contribute, we keep the place, item, price, date, source, description, language, review state, author and related timestamps. Optional uploads include public photos and private receipts, menus or booking evidence. Private evidence is for review and is not a public card photo. Upload records include file type, size, hash or version, purpose and owner. We strip image metadata on the server. Optional image extraction sends an image to Cloudflare Workers AI to suggest editable fields; the feature falls back to manual entry when unavailable. Do not upload unnecessary personal or payment information.

We keep votes, saves, visits, price confirmations, group picks, rewards, notices and their timestamps. A group pick records its two public finds, its creator, link hashes, voters, optional poll-only names, votes, chosen plan and expiry. People with a link can see the public choices and join; the creator and voters can see the split and participant names. Links can be forwarded. Group picks stop being accessible after 30 days; related records are deleted in bounded batches when poll activity runs, so physical deletion may occur later. Browser copies and messages are outside that cleanup. An older price-check server route can still retain a player, find, guessed price, declared group and day if an older client uses it.

Business accounts use verified email and a declared role to request a place claim. We store domain checks, claim decisions, hashed invitation links, team membership and changes, official price lists, public replies with revisions, and administrative audit records. Current teammates can see the team identity needed to manage access. Public business prices and replies are labelled as such; private claim contact and email remain in account and review functions. Removing team access does not erase attributed historical activity. Businesses see activity and daily aggregate counters for their places, not a list of private customer identities.

The app also uses the connection IP or normalized network to produce salted abuse-control hashes and short-lived rate buckets. Cloudflare may hold separate request and infrastructure logs under its own terms. We receive limited screen-error reports with email addresses and long numbers removed; these go to server logs, not the application database. Count-only product analytics store categories such as day, source, language and screen or event type without a player, device or IP identifier. The underlying participation records do contain player identifiers.

Do not submit personal data about children or sensitive details such as health, biometrics, racial or ethnic origin, or payment-card numbers. If we learn that such data was submitted, we may restrict or remove it and handle requests as applicable law requires.

Cookies and browser storage hold session and interface state, preferences, referrals and drafts. A draft photo may remain in your browser's IndexedDB. Clearing browser storage does not erase server records and may remove access to an anonymous profile or unsent draft.

Why and with whom

We use this information to provide account access, contributions, recommendations and game results, to display public content and attribution, to review submissions, to prevent abuse, and to understand whether the service works. Public material can be viewed and shared by anyone. Authorized administrators and moderators see information needed for their roles. Cloudflare provides hosting, database, media storage and optional AI processing; Resend delivers account email; Porkbun forwards incoming contact mail to our monitored mailbox. These services may process data outside Colombia and the United States. We do not currently sell personal information.

Retention and your choices

We use access controls, input checks, rate limits and review controls to reduce unauthorized access and misuse. No online service can promise absolute security. If a security incident requires notice, we will follow applicable law.

You can edit supported profile fields and choose what to contribute or share. The app does not provide a general self-service account deletion control. Apart from specific expiry/cleanup paths such as group picks and temporary uploads, application account, contribution, vote, audit and evidence records do not currently have a fixed automatic deletion date. A post removed from public view may leave a private review or audit record. Cloudflare's D1 recovery history can retain prior database states for up to 30 days; provider logs and backups have their own retention periods. The application databases remain in use while the service operates, subject to the purposes described here, lawful retention duties and applicable deletion rights.

To consult your data or request proof of authorization, correction, update, deletion, revocation or another applicable right, email [email protected]. Tell us enough to locate your record, such as your account email or public handle, but do not send a verification code or recovery link. We may ask you to verify control of the relevant account before disclosing or changing private information. Our privacy team will acknowledge, request any missing information and respond within the applicable legal time limits. We may retain a record where a legal or contractual duty requires it, and will explain a denied request. You may complain to the relevant data-protection authority, including Colombia's Superintendencia de Industria y Comercio where applicable.

Changes

We will date changes to this page and give notice of material changes as required by applicable law.