Privacy Policy

Privacy at a Glance

• We use your information to run Goodgame: your account, your groups, your games and your scores.
• We advertise Goodgame on other apps, so we share limited device and App-activity information with advertising partners to see which ads work. You can opt out in the App under Settings > Privacy, or by emailing privacy@good-game.com.
• We never give advertisers your phone number, email, name, contacts, messages, photos, scores or where you play.
• You can see, correct or delete your data at any time by emailing privacy@good-game.com.

Introduction

Stat Share Inc. ("we," "us," or "our") operates the Goodgame mobile application (the "App"), the website at good-game.com (the "Website"), and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

Information We Collect

We collect information that you provide directly, information generated through your use of the Service, and information from third-party services. The categories of information we collect include:

Information You Provide

• Account Information: When you create an account, we collect your name, email address, and any profile information you choose to provide (such as a display name or profile photo).
• Player Names: Names you enter for yourself and other players when setting up games. These may include real names or nicknames.
• Game Data: Scores, game results, round-by-round data, game settings, and other information generated during gameplay across supported games (including dominoes, hearts, bridge, cribbage, and others).
• Group and Friend Data: Information about groups you create or join, friend connections you make, group names, membership, and associated game history.
• Support Messages: Messages you send to our support team, through "Chat with Support" in the App or by email.
• Photos: Images you capture or upload within the App to document game moments or for use in your profile.
• Phone Number: Your mobile phone number is required to use the App — Goodgame accounts sign in with a phone number and a one-time code, and we store that number as part of your account. We text that number a one-time code each time you ask to sign in. We don't send marketing or promotional texts.
• Invitee Contact Information: When you invite someone to a game by phone — by typing a number or by picking one from your contacts — we store that person's phone number so the invitation can be delivered and its status shown to you. We receive only the single contact you choose, never your address book.
• Support Communications: Information you provide when contacting us for support, including the content of your messages.

Information Collected Automatically

• Device Identifiers: We collect device-specific identifiers (such as the identifier for vendors) to support app functionality, analytics, and troubleshooting. If, and only if, you allow tracking when iOS asks (App Tracking Transparency), the App can also read your device's advertising identifier (IDFA) for advertising measurement. If you don't allow tracking, iOS keeps the advertising identifier from the App.
• Advertising and Attribution Information: Whether you installed the App after seeing or tapping one of our ads, and if so which campaign, ad group, keyword or ad, and the country of the ad. We receive this from Apple's ad attribution service (AdServices) for Apple Ads, from our attribution partner Singular, and, in aggregate, from Apple's privacy-preserving ad measurement frameworks (SKAdNetwork and AdAttributionKit). See "Advertising and Attribution" below.
• Usage Analytics: We collect information about how you interact with the App and Website, including features used, pages or screens viewed, session duration, and actions such as clicks. This helps us understand usage patterns and improve the Service. Website analytics do not include session recordings.
• In-App Session Replay: The App records session replays for product analytics, so we can see what a screen did when something went wrong. Recordings are captured in screenshot mode with every text input and every image masked, and with network telemetry off; the masking is applied by the analytics SDK before a recording leaves the device. The Website records no sessions at all.
• Device and Technical Information: We may collect information such as your device type, operating system version, app version, language settings, and time zone.
• Network and Approximate Location Information: Our service providers may process your IP address and derive an approximate location, such as country or region, when the App or Website communicates with their services.
• Game Location (precise): With your permission, and while the save-play-location setting is on, the App captures your device's precise location (GPS coordinates), resolves it to a place name, and stores both on the game record so you can revisit where you played. A game's location is visible to the members of the group that game belongs to and can appear on share cards you create. You can deny or revoke location permission in iOS Settings, or turn the setting off in the App, at any time.
• Crash and Performance Data: We collect crash logs and performance metrics to identify and resolve technical issues.
• Browser Storage: Our Website may use cookies and browser local storage to provide requested features and remember an anonymous analytics identifier. See the "Cookies and Browser Storage" section below for more details.

How We Use Your Information

We use the information we collect for the following purposes:

• Provide and operate the Service: To deliver core functionality, including scorekeeping, game history, group management, support, and social features.
• Game location: To tag a game with where it was played so you and your group can revisit it later, and to power location insights such as where your group plays most often.
• Account management: To create and manage your account, authenticate your identity, and maintain your preferences.
• Sync and backup: To synchronize your game data across your devices and provide cloud backup of your information.
• Analytics and improvement: To analyze usage patterns, diagnose technical issues, and improve the App's features, performance, and user experience.
• Communications: To send you service-related notifications, including push notifications (with your permission), updates about the App, and responses to your support requests.
• Text messaging: To send you one-time sign-in codes by text message.
• In-app purchases: To process transactions and deliver purchased features or content.
• Advertising and measurement: To understand which of our ads lead people to install and use the App, to decide where to spend on advertising, and, subject to your choices, to let our advertising partners show our ads to people likely to enjoy Goodgame. See "Advertising and Attribution" below.
• Safety and compliance: To enforce our terms of service, protect against fraud or abuse, and comply with applicable legal obligations.

Third-Party Services and Data Sharing

We do not sell your personal information for money. We do share limited device and app-activity information with advertising partners to measure and improve our ads, which some US state laws call "selling" or "sharing" for targeted advertising. You can opt out at any time; see "Advertising and Attribution" below.

We use the following third-party services to operate and improve the Service. These services may receive or process certain data as described below:

• Neon: We use Neon to host our database. Your account information, game data, group data, and related content are stored in Neon's managed PostgreSQL service. Neon's privacy practices are governed by their privacy policy.
• Vercel: We use Vercel to run our backend service and to host the Website. Vercel processes the requests the App and your browser send us, including IP addresses, in order to serve them. Vercel's privacy practices are governed by their privacy policy.
• Cloudflare: We use Cloudflare R2 to store the images you upload, such as profile avatars, group and game photos, and feedback screenshots, and Cloudflare's network to serve our domains. Cloudflare's privacy practices are governed by their privacy policy.
• Twilio: We use Twilio to send the verification codes you use to sign in. Twilio processes your phone number and the code message to deliver it. Twilio's privacy practices are governed by their privacy policy.
• PostHog: We use PostHog for product analytics to understand how the App and Website are used and to identify areas for improvement. PostHog may receive usage analytics data, browser or device information, and anonymous identifiers. PostHog's privacy practices are governed by their privacy policy.
• Intercom: We use Intercom to provide in-app help and customer support. Intercom may process account identifiers, support messages, and diagnostic context you choose to share. Intercom's privacy practices are governed by their privacy policy.
• RevenueCat: We use RevenueCat to manage subscription status and purchase entitlements. RevenueCat may process app account identifiers, purchase information supplied by the App Store, and Singular's identifier for your device, so purchases can be matched to the install. RevenueCat sends your free trials and subscription purchases, with their revenue, to Singular so we can measure which ads lead to subscriptions. RevenueCat's privacy practices are governed by their privacy policy.
• Sentry: We use Sentry to diagnose crashes, errors, and performance problems in the App and our backend. Sentry may process device, diagnostic, and crash information, and technical details of failed requests. Sentry's privacy practices are governed by their privacy policy.
• OpenAI and xAI: When you ask the App to turn a selfie into an avatar, the selfie image is sent to our backend and then to OpenAI (our primary image provider) or, if that render fails, to xAI's Grok image API (our fallback provider). The image is used only to generate your avatar: we do not log it, and we do not retain the submitted selfie once the render completes. Their privacy practices are governed by OpenAI's privacy policy and xAI's privacy policy.
• Product Factory: We use Product Factory to receive bug reports and product feedback submitted from the App. It may process the feedback content, account identifier, and diagnostic context you choose to send.
• Singular: We use Singular as our mobile measurement partner, to learn which ads and campaigns lead to installs, sign-ups and subscriptions. Singular receives device identifiers (the advertising identifier only if you allow tracking), your Goodgame account ID (a random identifier, not your name or phone number), IP address, user agent, device and app information, App events such as install, completing sign-up and finishing your first game, and, from RevenueCat, your free trials and subscription purchases. When you open a Goodgame link that Singular manages, Singular also records the tap so it can open the right screen in the App and credit the ad or link that brought you. Singular acts as our service provider: it does not show ads itself, processes this on our behalf, may not sell or share it for its own purposes, and passes attribution results to the ad networks we advertise with, such as Meta and Apple, subject to your choices below. Singular's privacy practices are governed by their privacy policy.
• Meta: We advertise on Meta's services (Facebook and Instagram). Meta receives App events and device information through Singular, to measure our ads and, unless you opt out, to improve who sees them. If you ask the App not to track, Meta receives this only for aggregated ad measurement. Meta's privacy practices are governed by their privacy policy.
• Apple: We use Apple's services for in-app purchases (processed through the App Store), push notifications (delivered through Apple Push Notification service), crash reporting, and Apple Ads attribution (AdServices), which tells us whether an install came from an Apple Ads campaign without the advertising identifier and without a tracking prompt. Apple's privacy practices are governed by their privacy policy.
• Twilio: We use Twilio, through its carriers and messaging aggregators, to send sign-in codes by text message. Twilio processes your phone number and the code solely to deliver and verify it on our behalf. Twilio's privacy practices are governed by their privacy notice.

We may share your information in the following limited circumstances:

• With other users: When you participate in groups or games, certain information (such as your player name, scores, game activity, and the location saved on a game record) is visible to other members of that group or game session. Group members are other people, not our staff.
• Service providers: We share information with the third-party service providers described above, solely to the extent necessary for them to perform services on our behalf.
• Advertising partners: We share limited device and App-activity information with advertising partners, as described in "Advertising and Attribution" below, unless you opt out.
• Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Advertising and Attribution

We advertise Goodgame on other companies' services, such as Apple Ads and Meta (Facebook and Instagram). To learn which ads work, and to show our ads to people likely to enjoy Goodgame, the App uses our mobile measurement partner, Singular, which shares attribution results with those ad networks.

What our advertising partners receive

• Device identifiers: the identifier for vendors, and the advertising identifier (IDFA) only if you allow tracking
• Your Goodgame account ID, a random identifier (Singular only), so your purchases can be matched to the ad that brought you
• IP address, and the approximate location (country or region) derived from it
• Device and App information, such as device model, operating system version, language, App version and install date
• App events, such as install, first open, completing sign-up, finishing your first game, starting a free trial and subscription purchases (including price and currency)

What we never send them

We do not send advertising or attribution partners your phone number, email address, name or player names, contacts or invitee phone numbers, support messages, photos, game scores or results, the precise location of your games, or your text messaging opt-in data.

Your choices

• Allow tracking prompt: iOS asks whether the App may track you across other companies' apps and websites. If you choose "Ask App Not to Track", the App cannot read your advertising identifier, and our ad networks may use your App events only for aggregated, privacy-preserving ad measurement (such as Meta's Aggregated Event Measurement), not to target ads to you. Your choice does not change how the App works. You can change it at any time in iOS Settings > Privacy & Security > Tracking.
• Do Not Sell or Share My Personal Information: In the App, go to Settings > Privacy and turn on "Do Not Sell or Share My Personal Information". You can also email privacy@good-game.com with the subject "Do Not Sell or Share", and we will turn it on for you. The choice is saved to your Goodgame account, so it applies on every device you sign in on. While it is on, the App stops passing your information to our ad networks, including Meta. Versions of the App before 1.0.6 share nothing with advertising partners. Singular still measures for us, as our service provider, which of our campaigns led to your install. Apple may still report installs from its ads in aggregate through SKAdNetwork and AdAttributionKit, which identify neither you nor your device.
• Ad preferences: You can also manage the ads you see in each ad network's own settings, such as Meta's Ad Preferences.

Our Website does not currently use advertising cookies or pixels. If that changes, we will update this policy and honor Global Privacy Control (GPC) signals sent by your browser as a request to opt out.

SMS/Text Messaging Privacy

This section covers the text messages we send. Today those are one-time sign-in codes, sent to the number you enter when you sign in. We don't send marketing, promotional or recurring text messages.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.

Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the Text Message services.

Your phone number is how you sign in to the App, so we collect and store it as part of your account (see "Information We Collect"). We use it to send the sign-in codes you request and for no other text messages.

When you invite someone from the App by text, the invitation is sent from your own phone, through your messaging app; we don't text the people you invite. You may opt out of our texts by replying STOP, but you then can't receive sign-in codes. See our Terms of Service for details.

Cookies and Browser Storage

Our Website may use cookies and similar browser-storage technologies to provide, protect, and improve the Service. Cookies are small text files stored on your device, while browser local storage allows a website to retain limited information in your browser.

Technologies We Use

• Essential storage: May be used when necessary for security, page navigation, or features you request.
• Cookie consent: We use CookieYes to show our cookie banner and remember your choices. CookieYes stores a necessary cookie recording your consent choices for up to one year, and keeps a log of your choices with a masked IP address and approximate location as proof of consent. CookieYes's privacy practices are governed by their privacy policy.
• Analytics local storage: PostHog is configured to prefer your browser's local storage rather than analytics cookies for an anonymous identifier that helps us understand visits and interactions over time. We disable session recording, heatmaps, automatic exception capture, performance capture, and surveys on the Website.

Managing Browser Storage

Most web browsers let you clear or block cookies and website data, including local storage, through their privacy settings. Clearing data for good-game.com resets the anonymous analytics identifier and your cookie choices. Blocking website data may affect some Website functionality.

You can change your cookie choices at any time with the "Cookie Settings" link at the bottom of our home page and policy pages. If you turn off analytics there, the Website stops sending analytics to PostHog from that browser.

Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account and game data: Retained for the duration of your account and for 30 days following account deletion or a deletion request.
• Game location: Stored on the game record and retained for as long as that record is — the same 30-day window after deletion as other account and game data. Deleting the game deletes its location.
• Avatar and shared photos: If you delete your account, your avatar is deleted along with your profile. Photos you added to a group or a game (such as a group photo or a winner photo) stay with that group's history, so other members still see them.
• Feedback screenshots: Screenshots you attach to in-app feedback are deleted when you delete your account.
• Sign-in code records: Records of sign-in code requests (the phone number, the requesting IP address and the time) are used only to prevent abuse and limit repeated requests, and are deleted after about a day.
• Analytics data: Usage analytics and device identifiers are retained for up to 24 months.
• Advertising and attribution data: The attribution result we keep with your analytics (such as the campaign an install came from) is retained for up to 24 months. Singular and our ad networks retain what they receive under their own policies.
• Support communications: Retained for up to 36 months after the issue is resolved.

If you delete your account or request data deletion, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal or legitimate business purposes (such as resolving disputes or enforcing our agreements).

When you delete your account, we delete your personal data: your profile and avatar, phone number, contacts, and sign-in sessions. Games you played with other people stay in their history; your name on them becomes a plain label no longer linked to your account. Groups you hosted pass to another member, and games you recorded pass to that group's host. Photos you added to a group or a game stay with that group's history, as described above, and feedback screenshots are deleted.

Aggregated or de-identified data that cannot reasonably be used to identify you may be retained indefinitely for analytical purposes.

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Secure authentication protocols
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments of our systems and service providers

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access and portability: You may request a copy of the personal information we hold about you in a structured, commonly used format.
• Correction: You may update or correct your account information at any time through the App.
• Deletion: You may request deletion of your account and associated personal data by contacting us at privacy@good-game.com. We will process deletion requests within 30 days.
• Push notifications: You can opt out of push notifications at any time through your device's settings.
• Text messages: We only text you sign-in codes you ask for. You can reply STOP to stop them, but you then can't sign in by text until you opt back in; contact support@good-game.com for help.
• Advertising choices: You can decline tracking when iOS asks, change it later in iOS Settings, and opt out of the sale or sharing of your personal information ("Do Not Sell or Share My Personal Information") in the App under Settings > Privacy, or by emailing privacy@good-game.com. See "Advertising and Attribution" above.
• Analytics choices: You can turn off Website analytics with the "Cookie Settings" link at the bottom of our home page and policy pages, or limit them through your browser's privacy settings by blocking or clearing website data for good-game.com. You may also contact us at privacy@good-game.com with an analytics privacy request.

To exercise any of these rights, please contact us at privacy@good-game.com. We may ask you to verify your identity before processing your request.

U.S. State Privacy Rights

This section applies to residents of California and of other U.S. states with consumer privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas and Oregon. It supplements the rest of this Privacy Policy.

Your rights

Depending on where you live, you may have the right to:

• Know and access: request the personal information we have collected about you, and what we have used, disclosed, sold or shared in the preceding 12 months, including a copy in a portable format.
• Delete: request that we delete the personal information we have collected from you, subject to certain exceptions.
• Correct: ask us to correct inaccurate personal information. Most account information can be corrected directly in the App.
• Opt out of sale, sharing and targeted advertising: see "Sale, sharing and targeted advertising" below.
• Limit the use of sensitive personal information: the only sensitive personal information we collect is the precise location of your games, which we use only to provide the Service. We do not sell or share it, or use it to infer characteristics about you.
• Non-discrimination: we will not deny you the Service, charge you different prices, or provide a different level or quality of the Service because you exercised your rights.

We do not use personal information for profiling that produces legal or similarly significant effects.

Sale, sharing and targeted advertising

We do not sell personal information for money. When the App shares device identifiers and App events with our advertising partners, as described in "Advertising and Attribution", that may be considered a "sale" or "sharing" of personal information, or "targeted advertising", under some state laws. To opt out, turn on "Do Not Sell or Share My Personal Information" in the App under Settings > Privacy, or email privacy@good-game.com with the subject "Do Not Sell or Share". Either way, the choice is saved to your Goodgame account. We don't ask you to verify your identity to opt out.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Personal information we collect and disclose

In the preceding 12 months we collected the categories below, from you, from your device, and from the services described in "Third-Party Services and Data Sharing", for the purposes described in "How We Use Your Information". We keep each for the periods in "Data Retention".

Making a request and appeals

To exercise any of these rights, email privacy@good-game.com. We will verify your identity, usually by confirming the phone number on your account, and respond within 45 days. You may designate an authorized agent to submit requests on your behalf; we may require proof of written authorization and ask the agent to verify their own identity.

If we decline your request, you may appeal by emailing privacy@good-game.com with the subject "Privacy appeal". We will respond within the time your state's law requires. If your appeal is denied, you may contact your state's attorney general.

Global Privacy Control and Do Not Track

We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of sale and sharing on the Website. Because there is no common standard for "Do Not Track" browser signals, we do not respond to them.

Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete such information promptly. We do not share information we know comes from a child under 13 with advertising partners.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@good-game.com so we can take appropriate action.

International Users

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and databases are located. The data protection laws of the United States may differ from those of your jurisdiction. By using the Service, you consent to the transfer of your information to the United States.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by one or more of the following methods:

• Posting the updated policy within the App
• Sending you an email notification to the address associated with your account
• Displaying a prominent notice on our Website
• Updating the "Effective Date" at the top of this page

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Stat Share Inc.
Privacy inquiries: privacy@good-game.com
General support: support@good-game.com
Website: good-game.com