Deal.II · YSquare Studio
Privacy Policy
This policy explains how Deal.II – Card Game (also called Deal.II Game), provided by YSquare Studio (“we”, “us”), handles information when you play, use online features, share a replay, or contact us. Xtra Game Studio is our former developer name and may still appear on the Google Play listing.
Privacy contact: xtrastudio2013@outlook.com.
1. Information we handle and why
Information on your device
The game stores settings, your chosen player name, an installation-based player identifier and authentication credentials, statistics, achievements, cosmetics, in-game currency, tutorial progress, recent players, and recorded games. These support your progress and preferences. The recent-player list holds up to 30 entries; the local replay list keeps the latest 30 games. Some identifiers and gameplay information are also transmitted when you use the features below.
Advertising
Deal.II uses Google AdMob to display ads. Depending on your device, consent, and ad configuration, Google and its advertising partners may process IP addresses (including approximate location inferred from them), advertising or other device identifiers, ad and app interactions, and diagnostic information. These support ad delivery, measurement, and fraud prevention. Choosing non-personalized or limited ads does not necessarily stop all data processing.
Gameplay analytics
When gameplay sharing is enabled, Unity Analytics receives events about matches, results, tutorials, feature use, online connection outcomes, ads, achievements, and in-game cosmetic activity. We use these to understand reliability, balance, and which features players use. The service also handles technical information such as IP addresses and installation or player identifiers. These records should not be treated as completely anonymous.
Online multiplayer and recent players
Internet play uses Unity Authentication and Relay, together with our room-code and friend-room services. These process connection information, service-generated player identifiers, room codes, and game state so players can connect and play. Online sign-in can create an anonymous Unity player identity without an email address or password.
Your chosen name, installation player identifier, appearance, and relevant gameplay information are sent to other participants. Other players can retain your name and identifier in their recent-player lists. To show which recent players are hosting, the game sends their identifiers to the friend-room service. Hosting sends a verification credential, display name, and room code to that service. Local network play exchanges connection and game information directly with the host and other participants.
Shared replays
Replays stay on your device unless you use Share. Sharing uploads the recorded game to our Cloudflare-hosted replay service. A replay can include player names and appearances, game time and mode, moves, results, and the sharing player’s recorded hand. Other players’ hidden hands are excluded from the recording. Anyone with the replay link can view or forward it. Avoid using a real name or sensitive information as your player name.
The replay service processes the uploader’s IP address for rate limiting and records daily share and view counts. Opening a shared link or fetching game news also sends ordinary web connection information to the hosting provider.
Platform gaming services and support
If you use Google Play Games features, Google processes sign-in, gaming profile, scores, and achievement information to provide them. If you email us, we receive your email address, message, and any attachments you choose to send, and use them to answer your request.
2. Who receives information
Information is handled by service providers as needed for the features you use:
- Google: ads, consent messaging, and Google Play Games. See Google’s Privacy Policy and how Google uses information from partner apps.
- Unity: gameplay analytics, anonymous authentication, and Relay. See Unity’s Game Player and App User Privacy Policy.
- Cloudflare: hosting for room services, game configuration and news, and shared replays. See Cloudflare’s Privacy Policy.
- Email providers: delivery and storage of support correspondence.
Other players receive the multiplayer and replay information described above. External links and the apps you choose in your device’s share sheet are governed by their own privacy policies. We may also disclose information when required by law or necessary to address fraud, abuse, or threats to safety.
3. Your privacy choices
- Gameplay analytics: change “Share gameplay stats” in the game’s Settings. The game asks for a separate choice where its consent flow identifies a region requiring it; elsewhere sharing is enabled by default unless you turn it off. With no known region or saved choice, events wait locally. Turning sharing off stops further gameplay analytics collection; it does not itself delete previously sent data.
- Ads: use the consent choices shown by Google where applicable. Android’s privacy settings also let you manage your advertising ID. Contact us if you need help changing an earlier ad consent choice.
- Online features: you can play offline modes without joining an online room. Offline gameplay does not by itself disable ads or enabled analytics while your device is connected.
- Replays: sharing is optional. Once someone has copied a replay or link, we cannot control their own copies.
4. How long information stays
Device data: settings and progress remain until cleared, overwritten, or removed with app data. Replays and recent players are limited as described above. Android backup or device migration may preserve or restore some app data according to your device settings.
Shared replays: replay links expire seven days after the first upload of that replay. Expired replays stop being served by the replay API; stored expired records are removed during a later upload cleanup. A copied or cached replay may remain elsewhere. Daily aggregate share and view counts are stored separately from replay content.
Service records: analytics, advertising, authentication, hosting, and support information have different retention arrangements. Unity documents a default 13-month retention period for Analytics personal data; actual retention depends on service configuration and any applicable deletion request. Provider policies linked above explain their handling. Contact us for information about a particular record or to request deletion.
5. Access, deletion, and other requests
To request access, correction, or deletion of information associated with Deal.II, email xtrastudio2013@outlook.com with the subject “Deal.II privacy request”. For an online player identity, explicitly say if you want that identity and its associated data deleted. Include a shared replay link if your request concerns a replay.
We may need information to locate the record and verify the request. Do not send passwords, authentication tokens, or identity documents in your initial email. An anonymous player identity may be difficult to locate after you clear app data, so contact us first if you want help with server-side data.
You can remove local data through Android Settings → Apps → Deal.II → Storage → Clear storage (wording varies by device). This resets progress and preferences and does not automatically erase server records, Google Play Games information, or other players’ copies.
Depending on applicable law, you may also have rights to object to processing, restrict it, obtain a portable copy, withdraw consent, or complain to your local data protection authority. We handle requests under applicable law and explain any information that must be retained, for example for legal obligations or security. Google account and Play Games controls are managed separately through Google.
6. Security and international processing
Our web services use HTTPS, and Internet Relay connections are configured to use encrypted transport. Direct local network play uses a different transport configuration; use a network you trust. No network or storage system can be guaranteed completely secure.
Our providers may process information in countries other than your own. Their policies describe their international processing and transfer safeguards. Contact us if you need details about the handling of your information.
7. Children’s privacy
Deal.II is not directed to children under 13. If you are a parent or guardian and believe a child has provided personal information through the game, contact us at xtrastudio2013@outlook.com so we can investigate and arrange appropriate action, including deletion where applicable.
8. Changes and contact
We may update this policy when our features or data practices change. The published version will show its effective date, and we will provide additional notice or obtain consent when required.
For any privacy question or request, contact YSquare Studio at xtrastudio2013@outlook.com.