Privacy Policy - Bangla Ludo

Last Updated: March 30, 2026

1. Information We Collect

1.1 Account Information

• Google Account Data: When you sign in with Google, we collect your display name, email address, and profile picture (avatar) from your Google account.
• Guest Account: For guest accounts, we generate a unique anonymous user ID. No personal information is collected unless you choose to add it later.

1.2 User-Provided Information

• Display Name: You can set a custom display name for your profile
• Avatar Images: You may upload a photo as your profile avatar
• Voice Audio: During online multiplayer, your microphone audio is transmitted peer-to-peer to other players in your match. Voice audio is NOT recorded, stored, or processed on any server.

1.3 Game Data

• Game statistics (wins, losses, matches played)
• In-game progress (level, XP, coins, owned items)
• Match history and participation
• Daily check-in and spin wheel activity

1.4 Device and Technical Information

• Device information (model, operating system version)
• Network state (for connectivity detection)
• App crash logs and performance data

2. How We Use Your Information

• Account Management: To create and manage your user account
• Game Functionality: To save your progress, stats, and game state
• Online Multiplayer: To match you with other players and facilitate real-time gameplay
• Voice Chat: To enable peer-to-peer voice communication during matches
• Leaderboards: To display rankings (including simulated players for demonstration)
• Analytics: To improve app performance and fix bugs
• Advertising: To serve ads via Google AdMob

3. Third-Party Services We Use

We use the following third-party services that may have access to your information:

3.1 Supabase (Backend-as-a-Service)

• Purpose: Database, authentication, file storage, and real-time services
• Data Stored: All user profiles, game data, match history, and avatar images
• Data Location: Supabase servers (regions vary)
• Privacy Policy: https://supabase.com/privacy

3.2 Google AdMob (Advertising)

• Purpose: To display advertisements in the app
• Data: May collect device identifiers and usage data for ad targeting
• Privacy Policy: https://policies.google.com/privacy

3.3 Google Sign-In (Authentication)

• Purpose: Allows you to sign in using your Google account
• Data: Your Google profile name, email, and avatar URL
• Privacy Policy: https://policies.google.com/privacy

3.4 WebRTC TURN Servers (Voice Chat)

• Purpose: Facilitates peer-to-peer voice connections between players
• Provider: Metered.ca / Open Relay Project
• Data: Temporary connection data only; voice audio is NOT stored

3.5 DiceBear API (Avatar Generation)

• Purpose: Generates default avatars for leaderboard players
• Data: Only sends player name as a seed for avatar generation
• Website: https://www.dicebear.com

4. Data Storage and Security

• Server Storage: User data is stored securely on Supabase servers
• Local Storage: Some data (coins, level, preferences) is stored locally on your device using SharedPreferences
• Encryption: Data in transit is encrypted using HTTPS/TLS
• Voice Audio: P2P WebRTC connections use encryption; audio is never stored

5. Data Sharing and Disclosure

We do NOT sell your personal data. We may share data only in the following circumstances:

• With Other Players: Your display name, avatar, and country/region may be visible to other players in the same match
• Voice Chat: Your live audio is shared with players in your match (peer-to-peer, not stored)
• Service Providers: With the third-party services listed in Section 3, solely to provide their services
• Legal Requirements: If required by law, court order, or to protect our rights

6. Children's Privacy

7. Virtual Currency (Coins)

• No Real-Money Value: In-game coins have no real-world value and cannot be exchanged for real money
• Non-Refundable: Coins earned through gameplay, ads, or daily rewards are non-refundable
• Non-Transferable: Coins cannot be transferred between users or accounts

8. Your Rights and Choices

8.1 Access and Portability

• You can view your profile information in the app's profile screen
• You can request a copy of your data by contacting us at the email below

8.2 Deletion

• You can delete your account and all associated data from within the app (Settings → Delete Account)
• Upon deletion, all data including profile, stats, coins, and avatar will be permanently removed
• Some data may be retained in backup copies for up to 30 days before permanent deletion

8.3 Opt-Out of Ads

• You can opt out of personalized advertising in your device's Google Ad Settings
• Note: You will still see ads, but they may not be personalized to your interests

8.4 Permission Choices

• Microphone: Required for voice chat. You can choose not to use voice features.
• Photos/Media: Required only if you choose to upload a custom avatar. You can use the default avatar instead.

9. Changes to This Privacy Policy

• We may update this Privacy Policy from time to time
• Changes will be posted on this page with an updated "Last Updated" date
• Continued use of the App after changes constitutes acceptance

10. California Residents (CCPA)

If you are a California resident, you have the following additional rights:

• Right to Know: Information about the categories of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (note: we do NOT sell personal data)

11. GDPR Rights (EU Users)

If you are located in the European Economic Area (EEA) or United Kingdom, you have certain data protection rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to our processing of your data