Privacy Policy

Last updated: 2026-06-10

What this policy covers

Turup 29 ("we", "our", "the app") is a virtual card-game application. This policy describes what data we collect, how it is used, and the choices you have. We collect only the minimum needed to run the game and to keep matches fair.

Data we collect

Account data

Display name you choose
Account identifier (guest UUID, or email / Google / Facebook login)
Optional avatar image
Language preference, account creation date

Gameplay data

Match results, ratings, coins, XP, profile level
Room join/leave events
Bidding and trick-play history for match replay, when enabled
Friend requests and tournament entries

Technical data

Device type and app version
Connection-quality signals for performance and reconnect
A per-device guest identifier for fair-play cooldown
Push notification token and notification opt-in state (only if you enable notifications)
Ad-interaction events (ad offer shown or tapped, ad started or completed, reward granted) — used to run the rewarded-ads system fairly and prevent reward fraud

What we do not collect

No real-money payment data — Turup 29 is virtual play only and does not support gambling.
No precise or approximate location tracking.
No microphone or camera access except the optional, user-initiated voice chat and avatar features (and no recording or storage of voice).
No browsing history outside the app.
No list of other installed apps.
No contacts, calendar, SMS, or health data.

Optional permissions

Microphone — optional voice chat. If you start or join a Private-Play voice chat, we ask for microphone access so you can talk to your table. Voice travels directly between players or, when a direct connection is impossible, through an encrypted relay that cannot listen to it. It is never recorded, stored, transcribed, or analysed. Off by default; never active for spectators or in tournament rooms.
Camera / photos — optional avatar. Choosing an avatar photo opens your device's picker or camera; only the image you confirm is uploaded as your avatar. We never browse your photo library.

How we use the data

To run the game and keep matches fair
To maintain account state (display name, history, friends list)
To diagnose crashes and quality issues
To improve game balance and bot behaviour in aggregate
To deliver the push notifications you opt into

Sharing

We do not sell personal data. Match metadata (display name, score) is visible to other players in the same room as part of normal gameplay. Limited data is shared with the service providers listed on the next page so they can perform their function.

Service providers we use

We use the following third-party services to operate Turup 29:

Supabase — our backend platform. Stores your account profile, authentication record, gameplay history, friend requests, and tournament entries. All traffic is over HTTPS.
Google Play Billing — processes optional in-app purchases (such as the ad-removal upgrade and coin packs). We never see your payment card, billing address, or Google account email; Google handles the transaction. We receive only the product identifier and an opaque purchase token, which we store as a one-way hash.
Google AdMob — serves the rewarded video and post-match interstitial ads. AdMob may read your device's Advertising ID (AAID) to deliver and measure ads and to prevent fraud. You can reset or opt out of personalised advertising at any time in your device's Privacy settings.
Google User Messaging Platform (UMP) — shows the consent prompt that lets you choose between personalised and non-personalised AdMob ads, where required (for example, in the European Economic Area and the United Kingdom).
Sentry and PostHog — optional crash-diagnostic and product-usage analytics. These are currently disabled. If enabled in a future build, both are configured with personal-information stripping (no IP, email, phone, or display name), no session replay, and respect for the browser Do-Not-Track signal.
Firebase Cloud Messaging (Google) — delivers the push notifications you opt into. It receives an opaque device push token; we store that token to send your notifications and remove it when you turn notifications off or delete your account.
Cloudflare (voice relay) — when two players in a voice chat cannot connect directly, an encrypted TURN relay forwards the voice stream between them. The relay cannot decrypt, record, or store the audio.

Your rights

You may request export or deletion of your account data at any time. See the Data Deletion Instructions page (available from Settings) for how to request deletion.

Children and age requirements

Turup 29 is intended for a general audience and is not directed to children under 13. You must be at least 13 — and old enough to consent to these terms in your country — to create an account or use the app.

If we learn that we have collected personal data from an account that does not meet the age requirement, we will delete that account and its data. If you believe a child is using the app, contact support@shamrocks.games.

Contact

For privacy questions or data requests, email support@shamrocks.games.