Ludo: Fun Board Game
The short version
Playing on one phone, with friends or against the computer, sends nothing anywhere. Online play needs an account, and an account is a username, a password and a picked avatar. We also keep your friends list and one push token so friends can invite you. No email, no phone number, no ads, no analytics, no game history. You can delete your account from inside the app and everything goes with it.
1. Who we are
We are iAppSolution. We develop and publish the mobile game Ludo: Fun Board Game (the App). This policy explains what data the App handles and why.
2. Playing offline
Pass and Play and games against the computer work without an account and without an internet connection. Nothing about those games leaves your phone. The App stores only your sound and vibration settings on the device, and it never saves the board itself.
3. Your online account
To play with other people over the internet you create an account inside the App. You give us:
- A username, 2 to 24 characters. This is your public name. Other players see it, and any signed-in player can find it by typing the first letters into the friend search.
- A password. We store only a bcrypt hash of it and cannot read it back.
- An avatar, chosen from the pictures bundled with the App. There is no photo upload and the App never opens your camera or gallery.
We do not ask for an email address, phone number, real name or date of birth. Because we hold no email address, there is no password reset. If you forget your password, the account cannot be recovered. You can create a new one.
Signing in gives your phone a session token, stored on the device. One phone at a time can be signed in to an account. Signing in on a second phone signs the first one out.
4. What our server keeps
Our server runs a small database with three tables:
- Accounts: username, avatar, hashed password, hashed session token, the date the account was created and the time it was last used.
- Friends: which accounts have sent, received or accepted a friend request, and when.
- Push tokens: one Firebase Cloud Messaging token per account, for the phone that signed in most recently, with the platform (Android or iOS).
We keep this for as long as the account exists. When you delete your account, all three rows go with it.
5. What our server does not keep
- Game rooms live in the server's memory only. A room is deleted five minutes after the last player leaves, and on every server restart.
- We store no game history, no match results, no win counts and no leaderboard.
- In-room chat messages and emoji reactions are passed to the other players in the room and never written to disk.
- An invite link looks like https://ludo.on-forge.com/j/ABC123. It carries the six-letter room code and nothing else. The web page it opens sets no cookies and runs no scripts.
6. Who sees what
Players in the same room see your username, your avatar, your moves, your chat messages and your reactions. Your friends can see whether you are online. Anyone signed in can search usernames and see whether that user is online. Nobody outside the App sees any of it.
7. Push notifications
The App sends one kind of notification: a friend inviting you to a game. The notification carries the inviter's username, their avatar and the room code. Delivery goes through Google's Firebase Cloud Messaging, so Google receives your push token and the notification content. Google's handling of that data is covered by Google's privacy policy. We do not use Firebase Analytics, Crashlytics or any other Firebase product.
If you decline the notification permission, the App still works. You just will not get invites while the App is closed.
8. Microphone
On Android the App's sound library declares the record-audio permission. The App never records audio. There is no voice chat, and no audio is ever sent anywhere.
9. Server logs
Our application code does not log IP addresses. The web server that sits in front of it keeps ordinary access logs (IP address, time and requested path). We use those only to keep the service running and to investigate abuse.
10. No ads, no analytics, no tracking
The App shows no advertisements and contains no analytics, crash-reporting or advertising SDK. It does not read your advertising identifier, contacts or location.
11. Deleting your account
Open your profile in the App, choose Delete account and enter your password. Your account, friendships and push token are removed immediately. There is no waiting period and no copy kept. Uninstalling the App removes everything stored on the phone.
12. Children's privacy
The App has free-text chat and a friend search, so we do not recommend online play for young children without a parent's supervision. We do not knowingly collect personal data from children under 13 (or under 16 where that is the applicable age). If you believe a child has created an account, contact us and we will delete it.
13. Your rights
Under laws such as GDPR and CCPA you may have the right to access, correct, delete or export your personal data. Everything we hold about you is listed in section 4. You can delete it yourself from inside the App. If you want a copy first, or have any other request, contact us.
14. Changes to this policy
If we change this policy we will update the date at the top and, for material changes, tell you through the App or the app store listing. Continued use of the App after a change means you accept the updated policy.
15. Contact us
Email: [email protected]
Website: https://iappsolution.com