1. About this policy
Saboteur Card Game is provided by YSquare Studio (“we”, “us”, or “our”), formerly known as Xtra Game Studio. Some older app versions and store listings may still use the previous name. This policy covers the app and the related services we operate for room discovery, announcements, and shared replays, including the Saboteur replay viewer at saboteur.funreplays.com. Features and data handling may vary by app version, platform, region, and your choices.
For privacy questions, contact Edward Khoo at xtrastudio2013@outlook.com.
2. Information we handle and why
Information stored on your device
The app saves preferences, language, display name, a generated player identifier and authentication information, recent players, game statistics, achievements, cosmetic unlocks, and recent replays. These support gameplay and remember your choices. Some of this information is also transmitted when you use the features described below.
Advertising
We use Google AdMob to show ads. Google and its advertising partners may collect IP addresses, approximate location inferred from IP addresses, advertising and other device identifiers, ad views and interactions, and diagnostic information about the app and advertising software. This supports ad delivery, personalization where permitted, measurement, and fraud prevention. The information used depends on your consent, device settings, and the ad services available in your region.
Gameplay analytics
When gameplay statistics sharing is enabled, we send events to Unity Analytics to understand use of the game and improve it. These include game modes, round outcomes and duration, gameplay actions, tutorial progress, achievements, use of screens and features, virtual-currency cosmetic unlocks, ad display or loading results, and multiplayer connection outcomes.
Unity also processes technical and session information, such as installation or player identifiers, app version, platform and device information, event times, and country inferred from your IP address. Our custom gameplay events do not include your display name or email address.
Multiplayer and recent players
Internet play uses Unity Authentication to sign you in with a generated player identity and Unity Relay to connect players. These services process identifiers, authentication information, network addresses, connection details, and gameplay traffic. Other players receive the information needed to play with you, including your display name, public player identifier, selected cosmetics, and game actions.
Our room services process room codes and connection information. To help recent players find an open room, the host sends a generated installation credential, display name, and room code to our room-discovery service. The service derives a public player identifier from that credential and stores the room listing. When checking for rooms, the app sends the public identifiers of recent players. Use a nickname rather than personal contact information.
Local network play connects directly with other players, whose devices can see connection information such as your local network address.
Shared replays
When you choose to share a replay, the app uploads the recorded round and a preview image to our replay service. This includes player display names, selected cosmetics, roles, human players’ cards, game actions, emotes, results, game settings, and the round’s time and app version.
Anyone with the link can view the replay and forward it. Another participant can also share a replay of a round you played. Other people and sharing services may save copies or cache link previews beyond the link’s expiry. Avoid putting personal information in your display name.
The replay service processes the uploader’s IP address to limit abusive uploads and records counts of shares and replay views to understand service usage.
Service requests and support
Requests for announcements, room services, shared replays, and this policy expose normal connection information, such as IP address, requested address, request time, and browser or app information, to our hosting providers. This is used to deliver and protect the services. If you email us, we receive your email address, message, and any information or attachments you choose to send so we can respond.
4. Your choices
- Gameplay analytics: change Settings → Share gameplay stats at any time. Where the app identifies a region requiring an opt-in, it asks before enabling gameplay statistics sharing. Elsewhere, sharing may be enabled by default. Turning it off stops future gameplay analytics collection through this feature; it does not itself delete information already sent.
- Advertising: the app displays Google’s consent message where required. You can also use your device’s advertising ID and ad privacy controls. Restricting ad personalization does not necessarily stop all information needed to deliver ads or prevent fraud.
- Online features: you can choose local gameplay instead of internet multiplayer and choose whether to upload a replay. Other participants may still share replays of multiplayer rounds.
- Device storage: clearing the app’s storage using Android settings removes locally stored app data. Uninstalling normally removes local app data, although operating-system backups or restored data may remain. This does not delete information already sent to online services.
The app and its providers use local storage, identifiers, and similar technologies to remember preferences, maintain sessions, and provide ads and services. This policy page itself does not load advertising or analytics scripts.
5. How long information is kept
- Local information: settings and progress remain until removed or replaced. The app keeps up to 30 recent replay files, replacing the oldest as new ones are saved.
- Shared replays: replay links expire seven days after the first upload. Expired replay records and preview images are removed from active service storage during subsequent upload cleanup. Cached previews and copies held by recipients may remain longer.
- Open-room listings: listings expire five minutes after their last refresh and are removed when the service next cleans up expired listings. A normal room-close request removes the listing earlier.
- Replay service statistics: aggregate daily share and view counts can remain after the underlying replay expires. Upload rate limits use IP addresses in temporary service memory.
- Provider records: advertising, Unity service data, and infrastructure logs follow the applicable provider’s retention settings, service terms, and legal obligations. They are separate from the replay and room expiry periods above.
- Support correspondence: we retain messages as needed to resolve your request and handle related follow-up or legal obligations.
6. Access and deletion requests
To request access, correction, or deletion of information associated with your use of Saboteur Card Game, email xtrastudio2013@outlook.com with the subject “Saboteur Card Game privacy request”. For a shared replay, include its link and describe your connection to it. For other information, tell us the feature involved and when you used it.
We may need additional information to locate the relevant records and verify your request. Do not send passwords or installation authentication secrets. Generated player identities may be difficult to identify after you clear app data, so contact us before doing so if you want help locating online records.
Depending on your location, you may also have rights to restrict or object to processing, withdraw consent, receive a copy of your data, or complain to a data protection authority. We handle requests as required by applicable law. Some information may need to be retained for legal or security reasons; if that applies to your request, we will explain it. We cannot remove copies saved independently by other people.
7. Security
Our web services use HTTPS, and the app’s internet relay is configured to use encrypted transport. Direct local network play does not provide the same transport encryption, so use a trusted network. No method of transmission or storage can be guaranteed completely secure.
8. Children’s privacy
The app is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided personal information through the app or its services, contact us so we can investigate and arrange appropriate deletion. A general app-store content rating does not change this policy.
9. Changes to this policy
We may update this policy as the app and its services change. The latest version and its update date will be posted on this page. Where required, we will provide additional notice or request consent before changes take effect.
10. Contact
YSquare Studio
Privacy contact: Edward Khoo
xtrastudio2013@outlook.com