Privacy Policy

This policy explains what data the mobile game “Tic Tac Toe Online” collects, why it is collected, and who else receives it. By installing and playing the game you accept this policy.

Who is responsible

The game is developed and operated by Rombersoft. If you have any question about your data, write to the address at the bottom of this page.

There is no registration

The game has no user accounts and no sign-in. We never ask for your e-mail address, your real name or your phone number, and we do not use Google Sign-In or any other social login. Everything below is collected without identifying who you are.

What data we collect

Only what the game needs to work. Each item below says exactly what it is used for.

Player name

The name you type in the settings is stored on our server so that it stays unique among all players, and it is shown to your opponents during an online match. You choose it freely and it does not have to be your real name.

Device identifier

To remember which player name belongs to this device, the game needs an identifier for it. On Android it uses the identifier the system gives to this app: it is specific to this app on this device, it is not a hardware serial number, and it is replaced if you reset the device to factory settings. On other platforms the game generates a random identifier instead. Either way it contains no name, no e-mail address and no hardware number, and on its own it says nothing about who you are.

IP address

The game server sees the IP address your device connects from, as any internet server does. It is used only to limit the rate of requests and to block abuse. It is not stored for any other purpose and is never used for advertising.

Crash and error reports

When the game fails, it sends a technical report: the error message, the call stack, the platform, the model of your device and the app version. This is the only place the device model is used, and the report contains no other personal data.

Advertising identifier

The advertising library reads the Android advertising ID in order to show ads. You can reset or delete this identifier at any time in your device settings.

Push message token

If the game server has to move to a new address, we need a way to tell the already installed game where to find it. For that, Google Firebase Cloud Messaging issues a delivery token to this installation, and the game sends that token to our server together with the device identifier described above. It is used for that one purpose. The messages are silent: they change a setting inside the game, they never display a notification, and the game never asks for permission to send you notifications.

What we do not collect

We do not collect your e-mail address, real name, phone number or any account data, because the game has no accounts. We do not keep a history of your matches. The game does not access your location, contacts, photos, microphone, camera or messages, and does not read files outside its own storage.

Why we use this data

To run online play (finding opponents, joining rooms, resuming an interrupted match), to keep player names unique, to tell the installed game if the game server moves to a new address, to protect the server from abuse, to find and fix crashes, and to show the ads that pay for the game.

Advertising

The game shows ads supplied by Google AdMob. AdMob may use the advertising identifier and information about how you interact with the ads in order to select and measure them.

In the European Economic Area, the United Kingdom and Switzerland the game asks for your consent before showing personalised ads, using Google’s User Messaging Platform. You can change or withdraw that choice at any time.

Who else receives the data

We do not sell your data and do not hand it to anyone for their own marketing. Two external services process data for us:

• Google AdMob — advertising
• Google Firebase Cloud Messaging — delivering the message about a new server address

The processing done by that service is governed by Google’s own privacy policy. policies.google.com/privacy

How long we keep it

A reserved player name is kept until the same device claims a different one, and is then released. The delivery token is kept until you delete your data, until the game is uninstalled, or until Google reports that the token is no longer valid. Crash reports are kept for as long as they are useful for fixing the defect. Since there are no accounts, there is no profile to keep.

Children

The game is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.

Your rights

In the game, Settings → “Delete my data” erases what we store on our server for this device: the player name it reserved and its push message token. You may also ask what data we hold about you, ask for it to be corrected, or ask for it to be deleted — write to the address below and we will answer. To remove the data stored on the device itself, uninstall the game or clear its storage in the device settings.

Security

Traffic between the game and our servers is protected in transit, and the data is stored on servers we control. No method of transmission is completely secure, but we take reasonable measures to protect your data.

Changes to this policy

If this policy changes, the new version will be published on this page and the date at the top will be updated.

Contact

Questions about this policy or about your data: rombersoft@gmail.com