Privacy Policy

Account information. When you create an account, we store your email address, display name, and authentication identifiers through Firebase Authentication. Guest (anonymous) accounts receive a temporary identifier so you can play immediately.

Gameplay data. We store match results, coin balance, wins/losses, streaks, language preferences, leaderboard rankings, and in-room chat messages while a match is active. Chat is deleted when a player leaves the room.

Device & usage data. Firebase and our infrastructure may collect standard technical data such as device type, app version, and crash logs to keep the service reliable and secure. To measure our advertising, the app also collects device identifiers (the advertising ID on Android and the app-specific vendor identifier on iOS), app events such as installs, launches, and purchases, and basic device attributes such as model, operating system version, language, time zone, and IP address. When ads are shown in the app, we and Google AdMob also collect ad interaction data: which ad units were requested and displayed, impressions, clicks, dismissals, and whether a rewarded video was watched to the end so the coins can be credited. On iOS, the advertising identifier is used only if you allow tracking when the App Tracking Transparency prompt appears.

Notifications. When notifications are allowed on your device, the app registers it with Firebase Cloud Messaging, and we store its notification token with your account, together with the platform (iOS or Android), the app language, your time zone and the app version. We use them to tell you when a duel has a result, when someone challenges you, when a duel expires, when someone passes you on today's leaderboard, or when you win a leaderboard prize: at most 3 notifications a day, and none between 22:00 and 08:00 your local time. While the app is open, it lets our server know, so that we do not send you news the app is already showing. Notifications are delivered by Google (Firebase Cloud Messaging) and, on iPhone, by Apple (Apple Push Notification service). You can turn them off at any time in your phone's settings. We keep the token until you delete your account, sign in to another account on that device, or the messaging service reports that it is no longer valid.

Purchases. If you buy virtual coins through in-app purchase, transaction records are processed by Apple or Google. We store purchase history linked to your account for support and fraud prevention.

• Provide real-time multiplayer gameplay and matchmaking
• Maintain leaderboards, daily rewards, and virtual coin balances
• Authenticate users and sync progress across devices
• Detect cheating, abuse, and suspicious activity
• Respond to support requests and legal obligations
• Improve the app and fix bugs
• Measure whether our ads on Facebook, Instagram, and TikTok lead to installs and purchases, and improve those campaigns
• Show interstitial ads between matches and offer optional rewarded videos that grant coins
• Send the notifications you allow: duel results and challenges, leaderboard news and prizes

Where applicable, we process data based on: performance of our contract with you (providing the game), legitimate interests (security, analytics, anti-cheat, and measuring the performance of our own advertising), and consent where required by law.

We use Google Firebase (Authentication, Realtime Database, Cloud Functions, Cloud Messaging, Hosting) to operate the service. Data may be processed in regions where Firebase operates, including the European Union. We do not sell your personal information.

Advertising (Google AdMob). Scramblio displays ads supplied by Google AdMob (Google Ireland Limited). There are two kinds: full-screen interstitials, shown occasionally when you return to the home screen after a match and subject to frequency limits, and rewarded videos, which are always optional — you start one yourself to earn coins and never have to watch one to keep playing. To request, display, and measure these ads, the AdMob SDK receives device identifiers (the advertising ID on Android and, only if you allow tracking, the advertising identifier on iOS), device and network attributes such as model, operating system version, language, and IP address, and ad interaction data such as impressions, clicks, and rewarded-video completions. Google uses this data to deliver and measure ads, to detect invalid traffic and fraud, and, where you have consented, to personalise the ads you see. Google acts as an independent controller for this processing under its own terms: policies.google.com/technologies/ads.

Website analytics (Google Analytics). On scramblio.app we use Google Analytics 4 (Google Ireland Limited) to count visits and understand which pages are used, and only after you accept it in the cookie banner. Until then no analytics script is loaded and no analytics cookie is set. If you accept, Google sets the _ga cookies (kept for up to 2 years) and receives the pages you view, your approximate location, and browser and device attributes; Google Analytics 4 does not store full IP addresses. You can withdraw your choice at any time from "Cookie settings" in the website footer, which removes the cookies and stops the measurement. More from Google: policies.google.com/technologies/partner-sites.

Advertising partners. To measure whether our ads lead to installs and purchases, the app includes the Meta SDK (Meta Platforms, for Facebook and Instagram ads) and the TikTok Business SDK (TikTok). These SDKs send the device identifiers, app events, and device attributes described in section 1 to Meta and TikTok, which use them to attribute installs and purchases to our campaigns and process them under their own privacy policies: facebook.com/privacy/policy and tiktok.com/legal/privacy-policy. We do not sell your personal information.

Consent and tracking choices. In the European Economic Area, the United Kingdom, and Switzerland, the app runs Google's certified consent flow (the UMP consent form) before it requests its first ad; your answer decides whether Google may use your data to personalise ads, and if you decline you will still see ads, but only non-personalised ones. On iOS, the App Tracking Transparency prompt separately asks whether Scramblio may use the device advertising identifier to track you across other companies' apps and websites; if you decline, we do not use it, and you can change your answer at any time in Settings → Privacy & Security → Tracking. On Android you can reset or delete your advertising ID in Settings → Privacy → Ads. Install attribution on iOS also uses SKAdNetwork, the privacy-preserving framework from Apple. Scramblio Plus and the ad-free upgrade remove interstitial ads. To change or withdraw a consent you have already given, open Account → Ad privacy in the app: it reopens Google's consent form. You can also contact us at support@scramblio.app.

We may disclose information if required by law, to protect our rights, or to prevent fraud and abuse.

Active account data is kept while your account exists. When you delete your account in the app, we remove your user profile, delete your Firebase Authentication record, anonymize your leaderboard display name, and write a minimal, non-identifying deletion audit record. Some anonymized match history may remain where required for game integrity.

You can delete your account at any time from Account → Delete my account in the app. This permanently removes your sign-in credentials and personal profile data. See our dedicated account deletion page for the full step-by-step process and what data is removed vs. retained.

Depending on your location, you may have rights to access, correct, export, or restrict processing of your data. Contact us at support@scramblio.app to exercise these rights.

Scramblio is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We use industry-standard measures including Firebase security rules, server-side validation via Cloud Functions, and encrypted connections. No method of transmission over the internet is 100% secure.

If you use the app outside the country where our servers are located, your information may be transferred internationally. We rely on appropriate safeguards where required by law.

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated date. Continued use after changes constitutes acceptance where permitted by law.

Questions about privacy? Email support@scramblio.app.