This policy explains how the Belot Buddies app handles data during offline play, training, and online multiplayer. No service account is created: there is no sign-in and no durable Google, Apple, email, or other account is linked.
The app creates a random guest identifier and display alias on the device. The guest profile, settings (including language), game records, training progress, and locally retained result receipts stay only on the device, except for the online multiplayer data described below.
When you use online multiplayer, the service processes only what that feature needs:
profileId;This data is used only for app functionality: joining and recovering a session, running and synchronizing the match, preventing duplicate commands, confirming the result, and recovering a receipt.
Belot Buddies does not collect contacts, real name, email address, phone number, precise or approximate location, free text, advertising ID, payment information, photos, audio, health data, analytics, or crash telemetry. The app has no ads and does not use data for advertising, marketing, or profiling.
Data is not sold or shared with third parties. The multiplayer service provider processes the described data only on the app's behalf to provide online play; the data is not used for the provider's independent purposes, advertising, marketing, or analytics.
The production online service must use encryption in transit: HTTPS for bootstrap and recovery and WSS (TLS WebSocket) for live play. This policy does not claim independent security certification.
Server match state and receipt data are deleted when all four seats acknowledge the result, or no later than 48 hours after the match is finalized, whichever happens first. Within that boundary, the authoritative result can be confirmed for up to 24 hours. After 24 hours, an unconfirmed local result remains uncounted.
Local data persists on the device. On Android, clearing the app's data through system settings or uninstalling removes it. On macOS, Reset profile removes the guest profile, progress, records, and retained receipts; removing only Belot Buddies.app does not remove its Application Support data, which must also be removed for a complete local-data deletion. Device loss also makes local data unavailable. Deleted local data cannot be recovered through an account because no account is created.
“Reset profile” clears local profile data and makes a best-effort attempt to delete pending server records when deletion transport is available. A best-effort attempt does not guarantee immediate deletion; automatic deletion within 48 hours remains the backstop. There is no separately evidenced operator-handled deletion-request channel.
For privacy questions, email support@belotbuddies.com. The same contact is shown on the app's App Store, Mac App Store, and Google Play listings.
The facts in this policy follow the version-controlled data inventory in play-data-safety.md. Public hosting, store declarations, and release approval are separate release actions and are not evidenced by this document.