Durak Online Privacy Policy

Last updated: 2026-07-18

This policy explains how Durak Online handles player data. It is written for App Store submission review and for players who want a plain-language summary.

Data We Collect

• Account data: your Sign in with Apple identifier, and your email address if Apple provides one or you choose to share it.
• Profile data: nickname, selected avatar, selected card back, selected table skin, league, trophies, level, XP, and virtual Gold balance.
• Gameplay data: match participation, game mode, stakes, results, reward grants, daily bonus and challenge progress, reconnect state, and fair-play enforcement signals.
• Purchase data: App Store purchase and subscription status, RevenueCat customer and entitlement status, product identifiers, restore/sync attempts, and server-side Gold grants from purchases.
• Crash and diagnostics data: crash reports, app version, device/OS basics, and non-secret diagnostic events through Sentry.
• Server analytics events: server-side events such as session start, match start, match result, purchase sync, reward claim, and account deletion.

We do not intentionally collect private card hands in analytics, raw bearer tokens, Apple tokens, Supabase service keys, full WebSocket URLs, Colyseus session IDs, or future deck order in client logs.

How We Use Data

• To create and secure your account.
• To run server-authoritative Durak matches, matchmaking, reconnect protection, and fair-play enforcement.
• To maintain your virtual Gold, XP, trophies, cosmetics, daily bonus, challenges, and VIP entitlement status.
• To process and restore App Store purchases through RevenueCat and Apple.
• To diagnose crashes, service failures, and gameplay bugs.
• To measure product health with server-side analytics that do not include raw gameplay payloads or private hands.

Sharing

We share limited data with the following service providers:

• Apple: Sign in with Apple and App Store purchase processing.
• RevenueCat: purchase, subscription, entitlement, restore, and customer status processing.
• Sentry: crash reporting and operational diagnostics.

We do not sell personal data. Durak Online does not include cross-app tracking SDKs, and no data is used for tracking as Apple defines that term.

Retention

• Raw server analytics events are retained for 90 days.
• Account, profile, wallet, purchase, entitlement, and match records are retained while the account exists, unless deletion or a legal obligation requires a different period.
• Crash and diagnostic data is retained only as long as needed to diagnose reliability and launch-readiness issues, subject to the retention settings in Sentry.
• Backups and operational logs may keep deleted data for a limited time before normal rotation removes it.

Account Deletion And GDPR Rights

The app includes an account deletion flow. After signing in, open Profile, then use Delete Account in the account section. This flow deletes the Durak account record and signs the app out.

Players in the European Economic Area and other regions with similar rights may request access, correction, deletion, restriction, portability, or objection where applicable.

Privacy requests can be sent to contact@beauty2customer.com.

Children

Durak Online is not directed at children. Because matches use wagered in-game virtual Gold, the app carries a 17+ age rating on the App Store.

Contact

The data controller for Durak Online is:

• AC Beauty to Customer UG (haftungsbeschränkt)
• Dovestraße 11, 10587 Berlin, Germany

Privacy requests: contact@beauty2customer.com