Privacy Policy
Effective date: 19 August 2026 · Last updated: 19 August 2026
This Privacy Policy explains how Sika Games Inc., 440 N Barranca Avenue No 3231, Covina, CA 91723, United States (“Sika Games”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you play Gin Rummy Together (the “Game”) on iOS, Android or the web.
We are the data controller for the processing described here. You can reach us, including on any privacy matter, at ginrummytogether@sikagames.com.
1. Summary
- You can play without giving us your name, email address or password. Your account is created automatically and linked to an identifier generated for your device.
- We collect the data needed to run your account and matches, to complete purchases, to fix crashes, to measure how the Game is used, and to show rewarded video ads.
- We do not sell your personal data. We do share data with the service providers and advertising partners listed in section 5.
- You can request access to, or deletion of, your account and its data at any time — see section 11.
- The Game is not directed to children under 13 (or under the minimum age of consent in your country, where that is higher) — see section 12.
2. The data we collect
Account and identifiers. When you first open the Game we create a player account on
our game servers. We generate or read a device-scoped installation identifier (on iOS the
identifierForVendor; on Android an app-scoped random identifier; on the web a random
identifier stored in your browser) and store it, together with the player ID our server assigns you,
on your device. We use it to sign you in on subsequent launches. No email address or password is
required or collected.
Profile and player-generated content. The display name you choose (up to 20 characters), your selected avatar, avatar frame and emoji, your club (team) name, description and badge if you create or join one, and the messages you send in club chat or during a match (including preset messages and emoji reactions).
Gameplay and progress. Match history and results, hands played, scores, level and experience, daily tasks and progression state, card collection and inventory, in-game currency balances and transactions, rewarded-ad claims, mailbox rewards, matchmaking and table activity, leaderboard placement, and club membership and requests.
Purchase data. When you buy an in-app product, Apple or Google processes the payment and gives us a purchase receipt or token, the product identifier, and the transaction status, which our server validates before granting the item. We also store a short-lived record on your device of an intended purchase so that a grant can be completed if it is interrupted. We never receive or store your payment card number or bank details.
Device and technical data. Device model and manufacturer, operating system and version, platform, language and region settings, app and game-engine version, network information, screen metrics, IP address (used in transit and to derive approximate country/region — we do not collect GPS or precise location), and server and web-hosting logs.
Diagnostics and error data. Crash reports and non-fatal error reports, including stack traces, the state of the Game at the time of the error, and the technical keys listed above. These reports are tagged with your player ID so that we can reproduce a specific player’s problem.
Product analytics and session recording. Events about how the Game is used (for example progression steps, shop and ad interactions, feature usage) together with your player ID and session properties. For a small number of selected players we may also record a low-frame-rate capture of the Game’s own rendering surface (a “session replay”) to diagnose a specific bug or usability problem. This recording captures the Game’s screen and your interactions with it; it does not capture other apps, your camera, microphone or keyboard input outside the Game.
Advertising data. If you watch a rewarded video ad, our advertising partner receives your device’s advertising identifier (Apple IDFA where you have allowed tracking, or the Android advertising ID), your IP address, device and app information, and data about the ad shown and how you interacted with it.
Attribution and marketing measurement. To understand which campaign or link brought you to the Game, our attribution provider processes device and app identifiers (including the advertising identifier where permitted, the vendor identifier, and an attribution ID it generates), IP address, install and referrer information, and selected in-game events, linked to your player ID.
Notifications. The Game can schedule reminders that your device shows locally. Scheduling happens on the device and no notification data is sent to a server. We do not currently send remote push notifications.
Support correspondence. If you contact us, we keep your message, your contact details and any information you choose to include (such as your player ID) in order to help you.
3. What we do not collect
We do not collect your real name, postal address, phone number, precise location, contacts, photos, camera or microphone data, health data, biometric data, or payment card details. We do not ask you for special-category data and you should not send it to us.
4. Why we use your data, and our legal bases
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and maintain your account, save progress, run matches, chat, clubs, mailbox | Account, profile, gameplay, technical | Performance of a contract (Art. 6(1)(b)) |
| Process and validate in-app purchases; restore purchases; handle refunds | Purchase, account | Performance of a contract (Art. 6(1)(b)) |
| Keep accounting records for purchases | Purchase | Legal obligation (Art. 6(1)(c)) |
| Detect and prevent cheating, fraud, abuse and security incidents; moderate chat | Account, gameplay, chat, technical | Legitimate interests (Art. 6(1)(f)) — protecting players and the service |
| Diagnose crashes and errors, and improve stability | Diagnostics, technical, account | Legitimate interests (Art. 6(1)(f)) |
| Measure and improve how the Game is used (aggregate analytics, A/B tests, feature flags) | Analytics events, account, technical | Legitimate interests (Art. 6(1)(f)); consent where required by local law |
| Session replay for a selected player | Session recording, account | Consent where required, otherwise legitimate interests (Art. 6(1)(f)) |
| Show rewarded video ads, and personalise them | Advertising identifiers, technical, ad interaction | Consent (Art. 6(1)(a)) in the EEA/UK and wherever required; otherwise legitimate interests |
| Measure marketing campaigns and installs | Attribution, technical, selected events | Consent (Art. 6(1)(a)) where required; otherwise legitimate interests (Art. 6(1)(f)) |
| Show local reminder notifications | Device notification permission | Consent (device permission) |
| Answer support requests | Correspondence, account | Performance of a contract / legitimate interests |
Where we rely on consent you can withdraw it at any time (see section 6 and section 11). Where we rely on legitimate interests you can object — we will stop unless we have overriding grounds.
5. Who we share data with
We do not sell your personal data. We share it with the following categories of recipients, each of which acts either as our processor under contract or, where indicated, as an independent controller for its own purposes.
| Provider | Role in the Game | Where |
|---|---|---|
| Heroic Labs (Nakama Cloud, Hiro, Satori) | Game servers, accounts, matches, economy, live-ops and analytics | European Union |
| PostHog (EU Cloud) | Product analytics, error tracking, session replay | European Union (Germany) |
| Google (Firebase Crashlytics) | Crash and error reporting on iOS/Android builds | United States and other countries |
| Google (AdMob) | Rewarded video advertising — independent controller for ad serving and measurement | United States and other countries |
| AppsFlyer | Install attribution and campaign measurement | European Union / United States |
| Meta Platforms | App-event measurement for Meta advertising campaigns — independent controller for its own advertising purposes | United States and other countries |
| Apple (App Store, StoreKit) and Google (Play, Play Billing) | App distribution, payments, receipt validation — independent controllers for their own purposes | United States and other countries |
| Cloudflare (web version only) | Hosting and delivery of the browser build | Global network |
If we add further advertising or ad-mediation networks we will update this list before they start receiving data.
We may also disclose data to professional advisers, to a buyer or successor in a merger or asset sale (with notice to you), and to courts, regulators or law enforcement where we are legally required to do so or need to establish or defend legal claims.
Each provider’s own privacy notice applies to its processing: Heroic Labs, PostHog, Google (and AdMob), AppsFlyer, Meta, Apple, Cloudflare.
6. Advertising and tracking choices
Ads in the Game are optional rewarded videos — you choose to watch one in exchange for an in-game reward.
- iOS. Apple’s App Tracking Transparency prompt asks whether you allow tracking across apps and websites. If you decline, we and our partners do not use the IDFA and you will see non-personalised ads. You can change this later in Settings → Privacy & Security → Tracking.
- Android. You can reset or delete your advertising ID, and opt out of ad personalisation, in Settings → Google → Ads.
- EEA, UK and Switzerland. Where consent is required for personalised advertising, we ask for it through a consent dialog before any personalised ad or ad-measurement processing takes place, and you can change your choice at any time from the Game’s Settings screen.
Declining personalised ads does not remove ads; it makes them non-personalised.
7. What other players can see
Some information is visible to other players by design: your display name, avatar, avatar frame and emoji, level, club membership and role, leaderboard placement, and the chat messages and reactions you send. Please do not put personal information (such as your real name, address or contact details) in your display name, club text or chat messages. Chat may be logged and reviewed for moderation and anti-abuse purposes.
8. Where your data is processed
We are a United States company. Our game servers and product analytics are hosted in the European Union, and we access that data from the United States. Other providers are located in, or transfer data to, the United States and other countries outside the EEA and the UK. Where personal data leaves the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (with the UK Addendum), on the EU–US and UK–US Data Privacy Framework where the recipient is certified under it, and on supplementary safeguards where needed. You can request a copy of the relevant transfer mechanism by contacting us.
9. How long we keep data
| Data | Retention |
|---|---|
| Account, profile, progress, inventory and purchase entitlements | While your account exists. If you do not play for 24 months we delete or irreversibly anonymise the account. |
| Chat messages | While your account exists, and for as long as needed for moderation and abuse investigation |
| Purchase and accounting records | As required by tax and accounting law (typically up to 7 years) |
| Crash and error reports | 90 days |
| Analytics events | For as long as needed to understand and improve the Game, under the retention settings of our analytics providers |
| Session replays | 30 days |
| Attribution and advertising data | As set by the relevant provider, typically up to 24 months |
| Support correspondence | 24 months after the matter is closed |
10. How we protect data
Data is transmitted over TLS. Access to production systems and provider dashboards is restricted to the personnel who need it and protected by individual accounts and multi-factor authentication. Payments are handled entirely by Apple and Google, so we never hold card data. We use reputable providers under written data processing agreements and review what we collect so that it stays limited to what the Game needs. No system can be guaranteed completely secure; if a breach affects your personal data and the law requires it, we will notify you and the competent authority.
11. Your rights, and how to delete your account
Depending on where you live, you have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to processing, to receive a portable copy, to withdraw consent, and not to be subject to unlawful discrimination for exercising these rights.
To delete your account and its data, email ginrummytogether@sikagames.com with your player ID (shown in the Game under Settings → User ID) in the message, or submit a request at sikagames.com/data-deletion.html, which needs no account or app installation.
When we delete an account, we delete or irreversibly anonymise your profile, progress, inventory, chat messages and analytics identifiers. We retain purchase and accounting records for the period required by law, and minimal records needed to enforce bans and prevent fraud. Deletion is permanent — purchased items and progress cannot be restored afterwards.
We answer requests within 30 days (extendable where the law allows), and we may need to verify that the request comes from the account holder.
12. Children
The Game is intended for players aged 13 and over, and is not directed to children. As a United States company we are subject to the Children’s Online Privacy Protection Act (COPPA), and we do not knowingly collect personal data from children under 13, or from anyone below the minimum age of consent in their country where that is higher. If you believe a child has given us personal data, contact us at ginrummytogether@sikagames.com and we will delete the account and its data. Where a player is identified as a child, we do not serve personalised advertising and we do not use advertising identifiers.
13. Region-specific information
EEA, UK and Switzerland. The legal bases we rely on are listed in section 4. Because we have no establishment in the EEA or the UK there is no lead supervisory authority for us; you may lodge a complaint with the data protection authority of the country where you live or work, and you can raise anything with us directly at the address in section 15. You are not required to provide personal data to play, but the Game cannot function without the account and technical data described in section 2.
California. We collect the categories of personal information described in section 2 (identifiers, commercial information, internet and network activity, approximate geolocation derived from IP, and inferences drawn for audience segmentation), for the purposes in section 4, and disclose them to the recipients in section 5. We do not sell personal information for money, and we do not knowingly sell or share the personal information of consumers under 16. Our use of advertising and attribution partners may count as “sharing” for cross-context behavioural advertising under the CCPA/CPRA; you can opt out by declining the ATT prompt on iOS, opting out of ad personalisation on Android, or contacting us. We do not use or disclose sensitive personal information beyond the purposes permitted by law, and we do not discriminate against you for exercising your rights. An authorised agent may submit a request on your behalf with proof of authorisation.
Other US states and other jurisdictions. Residents of states and countries with comparable privacy laws have equivalent rights of access, correction, deletion, portability, and opt-out of targeted advertising; the contact routes in section 11 apply.
14. Changes to this policy
If we change this policy we will update the date at the top and, for material changes, notify you in the Game before the change takes effect. Continuing to play after a change takes effect means the updated policy applies to you.
15. Contact
Sika Games Inc.
440 N Barranca Avenue No 3231
Covina, CA 91723
United States
ginrummytogether@sikagames.com
This policy is also linked from the Game’s Settings screen and from the App Store and Google Play listings.