PRIVACY POLICY

Gonga is developed and operated by Nikolas Fragkos. For anything in this policy, including requests to access or delete your data, contact info@gongagame.com.

For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the information described below.

The single-player game against the computer opponents requires no account and no network connection. Nothing about your offline play leaves your device. If you are connected, the app does still ask Google for ads to show between games, as described under Advertising.

Online play requires a Google account. When you tap Sign in with Google, Google asks for your permission to share basic profile information with Gonga. We request only two things: your basic profile (profile) and your email address (email). We do not request or store your Google profile picture, your contacts, your calendar, or anything else in your Google account.

Your Google account ID

To recognise you as the same player each time you sign in.

Your display name

Shown to the other player in a match, and on the leaderboard once you have won ranked points.

Your email address

Shown in the app so you can see which account is signed in, asked for again when you delete your account to confirm which one it is, and used to identify your account if you contact us.

Account created date and last sign-in date

Operating the service.

Ranked points

The running total you have won from finished matchmaking games, which ranks you on the leaderboard.

Finished match results

The accounts that played (or, in a match against a computer opponent, your account alone), the final scores, who won, the target score, how many hands were played, whether the match was ranked and the points it awarded, and when it ended.

In-progress match state

Held only while a match is running, so a match survives a dropped connection or a server restart. Deleted the moment the match ends.

Server logs

Error and event logs, used to keep the service running and diagnose faults. They do not record your IP address. Fly.io, which hosts the server, handles your IP address to route your connection to it.

Once a match ends, we keep no record of the cards that were dealt or played, only the final result described above. There is no chat feature in the app.

Once you have won ranked points, your display name, your ranked points and your place appear on the leaderboard. Every signed-in player can see it; it is not published on the open web. Deleting your account takes you off it.

The following are saved in the app's own storage on your phone. Your sign-in tokens are sent only to our server, to prove it is you; nothing else on this list is ever sent to us:

• Your sign-in session token (see How long we keep things), and a token that lets you rejoin a match after a dropped connection.
• While a Google sign-in is in progress, a one-time code that links the browser's answer back to the app. It is cleared as soon as the sign-in finishes.
• The randomly generated name the app gives you for offline play, such as Player4821.
• Your sound volume, chosen language, number of computer opponents, single-hand games against the computer, and the frame-rate overlay setting.
• How many offline games you have finished since the last ad, so the app knows when the next one is due.
• Your ad consent choices, stored by Google's consent tool so you are not asked again on every launch.

Clearing the app's data or uninstalling the app removes all of these. If your device has Android's automatic backup enabled, Android may include the app's stored data, including your sign-in session, in your Google Drive backup. That backup is controlled by you and Google, not by us.

On Android, Gonga uses INTERNET to reach our game server and to load ads. Google's advertising SDK adds the permissions it needs to serve ads: network state (ACCESS_NETWORK_STATE), the advertising ID (AD_ID), Android's privacy-preserving ad APIs (ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS), and keeping the device awake while an ad plays (WAKE_LOCK, FOREGROUND_SERVICE). None of these show a prompt.

On iPhone and iPad, the app may ask through Apple's App Tracking Transparency prompt whether ads may use your device's advertising identifier. The game works the same whichever you choose.

The app does not request access to your location, camera, microphone, contacts, photos, files, or any other sensitive permission.

Gonga is free, and paid for by ads. An ad is shown as you leave a finished game: after every finished online match, and after every third finished game against the computer. There are never ads during a hand, in the tutorial, or when you quit a match early.

The ads are served by Google AdMob. To choose, show and measure an ad, Google's advertising SDK in the app sends Google information such as your device's advertising identifier, your IP address, and details about your device and the app. We never give Google, or any advertiser, your Gonga account details: your name, email address and match results stay with us. Google uses the data it collects through AdMob as an independent controller, under its own privacy policy; see how Google uses information from apps that use its services.

Your choices

• In the EEA, the UK and Switzerland, the app asks for your consent, through Google's consent form, before any ad is requested. If you do not agree to personalised ads you will still see ads, but they are not chosen based on your data. You can change your answer at any time in Settings › About › Privacy choices.
• On iPhone and iPad, if you decline the App Tracking Transparency prompt, the advertising identifier is not shared. You can change this in the iOS Settings app under Privacy & Security › Tracking.
• On Android, you can reset or delete your advertising ID in your device's settings under Privacy › Ads (the exact path varies by device).

• Performance of a contract (GDPR Art. 6(1)(b)): creating your account, matching you with an opponent, running the match, and recording the result. This is what you asked us to do when you signed in to play online.
• Legitimate interests (GDPR Art. 6(1)(f)): keeping the service available and secure, diagnosing faults, and preventing abuse. This covers our server logs.
• Consent (GDPR Art. 6(1)(a)): personalised ads, and storing or reading advertising identifiers on your device, in the regions where the law requires consent. You can withdraw it at any time, as described under Advertising.

We do not sell your personal data, and we do not share your account details with advertisers. We share data only with the service providers that run Gonga, and only to the extent they need it to provide that service:

• Google handles the sign-in itself. Your use of Google Sign-In is also covered by Google's Privacy Policy.
• Fly.io hosts the game server, which runs in Frankfurt, Germany.
• Neon hosts the database that stores accounts and match results.
• Google AdMob serves the ads, and receives the device and advertising data described under Advertising directly from the app.

We may also disclose data where we are legally required to, for example in response to a valid legal request.

Our game server runs in Frankfurt, Germany, within the European Economic Area. Where any provider processes data outside the EEA, that transfer is covered by the safeguards in that provider's own terms, such as the European Commission's Standard Contractual Clauses.

• Your account: until you delete it, or until we close the service.
• Match results: until we close the service. A match belongs to both players, so deleting your account strips your identity out of these rather than removing them; see deleting your account.
• In-progress match state: deleted as soon as the match finishes.
• Your sign-in session: the token issued when you sign in expires 30 days after it is issued, after which you sign in again. Signing out in the app discards it immediately.
• Server logs: kept only briefly, for operational purposes, and then rotated out by our hosting provider.
• Advertising data: kept by Google under its own retention policies; we do not receive or keep it.

You can delete your Gonga account at any time, from inside the app: open Settings, go to the Account tab, and choose Delete account. It takes effect immediately. If you are in an online game, finish or leave it first; the app tells you if that is what is in the way.

You can also ask us to do it instead. Email info@gongagame.com from the address you signed in with, or tell us which account to delete, and we will action it within 30 days.

Deleting your account permanently removes your Google account ID, your name and your email address from our database, and takes you off the leaderboard. It cannot be undone, and the account can never be signed in to again. Signing in with Google afterwards creates a new, separate account rather than restoring the old one. Signing out inside the app is not the same thing: signing out only clears the session on your device and leaves your account intact.

What is left behind is the record of the matches you played (the scores, who won, the target, how many hands, the points awarded and when it ended), and an internal identifier with the dates the account was created and last signed in and its final points total. None of it has your name, your email address or your Google account ID attached to it any more. Nothing in what remains identifies you, and we keep it because your opponents' scores are calculated from those same records, and removing them would silently change other people's results.

If you are in the European Economic Area or the United Kingdom, you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data erased, to receive a copy of it in a portable form, to restrict or object to our processing of it, and to withdraw consent where our processing relies on it. Exercise any of these by emailing info@gongagame.com.

You also have the right to complain to your local data protection authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).

Gonga is not directed at children, and we do not knowingly collect personal data from children. Online play requires a Google account, and Google's own minimum age requirements apply. If you believe a child has provided us with personal data, contact us and we will delete it.

All traffic between the app and our server is encrypted in transit, over HTTPS and secure WebSockets. Sign-in sessions are signed tokens that expire. Access to the production database is restricted to the operator. No system is perfectly secure, but we take reasonable measures appropriate to the small amount of data we hold.

This policy lives at gongagame.com/privacy-policy, and the app opens it from Settings › About › Privacy Policy. If we change how Gonga handles your data, we will update it here and change the "last updated" date at the top. For significant changes we will also give notice in the app.