HandMate privacy policy

On your device only

Settings, game statistics, Daily Hand results, solved puzzles and an unfinished game. Deleting the app deletes them.

Online play

Online play is optional. HandMate sends nothing to our server until you open Play online (or open a game invitation or a HandMate notification). Everything else in the app — games against the bots, Pass & Play, puzzles, the Daily Hand — works without an account and stays on your device.

Your account. When you first open online play, the app creates an account for you on our server. At first it is a guest account that only this device can reach. You can link it with Sign in with Apple to keep it on all your devices; we receive only an anonymous identifier from Apple, never your name or email address. It is the same account as in our app DiceMate, so a DiceMate account can be used here too.

What we store, and why. To run online games we store, on servers of our hosting provider Supabase in the European Union (Ireland):

• your account ID and, if you link it, your Sign in with Apple identifier;
• the username you choose (and the avatar you pick), which other players see in your games;
• your online games: every move and card played, the cards dealt to you (kept hidden from your opponent), results and timestamps, and automatic reports when a move could not be verified;
• your rating for rated games and your Daily Hand results, which appear on leaderboards with your username;
• when you last had online play open and whether you were looking for a game, so that the app can show how many players are online and searching (deleted after 30 days without a visit);
• rematch offers you send or receive;
• if you allow notifications, your device's push token, to tell you when it is your move, when someone offers a rematch, or when a game ends.

Our hosting provider also keeps short-lived technical logs of requests (such as IP address and time) for security and operation. We do not use them to locate you or for anything else.

What we don't do. We don't collect your email, phone number, real name, contacts or location. There are no ads, no advertising identifiers, no analytics or tracking, and we never sell or share your data for advertising. Purchases are handled by Apple; we never see payment details. While you wait for an opponent you can play a practice game against a bot: it is always labelled as a bot, it runs only on your device, and it doesn't count for your rating.

Who sees your data. Other players see your username, avatar, your moves and the cards you play in games with them, never the cards in your hand. Signed-in players can see ratings and leaderboards. Nobody else can read your data; our server only uses it to run the games.

Legal basis (EU/UK). We process this data to provide the online play you ask for (performance of a contract, Art. 6(1)(b) GDPR) and, for the short technical logs, our legitimate interest in keeping the service secure (Art. 6(1)(f)). Notifications are sent only with your permission, which you can withdraw in iOS Settings.

How long. We keep your account data until you delete your account. Presence data is deleted after 30 days without a visit; push tokens are replaced when you sign in on another device or remove the app.

Delete your account. In the app: Play online → Delete account. This immediately deletes your account and all its online data — games, ratings, Daily Hand results, presence, push tokens — for both HandMate and DiceMate. Games stored on your device and your purchases stay. You can also write to us to ask for deletion, access to or correction of your data.

Contact. claudiutigaroi@gmail.com

Delete your account

In the app: Play online → Delete account. This removes the account and its online data for both HandMate and DiceMate.

Game Center (optional)

If you sign in to Game Center, your Daily Hand score and achievements go to Apple under your Game Center profile. Apple's privacy policy applies.

Purchases

Purchases are handled by Apple. We receive no payment details.

Rules updates

The app may download a small file with balance updates for the card deck. The request contains no personal information.

Your rights and contact

Depending on where you live (for example in the EU or UK) you can ask to access, correct, delete or export your data. Write to claudiutigaroi@gmail.com; we answer within one month. You may also complain to your data-protection authority.