Privacy Policy
What we collect
- Account data — if you create an account: your email address and a password (stored by our backend provider as a salted hash; we never see it). If you sign in with Apple or Google instead, we receive the account identifier and the email address that provider releases to us — which may be a private relay address if you chose to hide yours — and we store a token that lets us keep the sign-in working. Playing without an account keeps everything on your device only.
- Game profile — display name, avatar and flag you choose, plus gameplay numbers the game produces: XP, level, chips, crowns, match statistics, and a ledger of in-game chip movements. Chips and crowns are play currency with no cash value.
- Social data — friend connections you make, friend requests, room invitations you send or receive, and any team you create or join. If you report or block another player we store that, including the display name shown at the time, so we can act on abuse and keep the block working.
- Purchase data — if you buy anything: the store transaction id, what was bought, the amount and the date. Payment itself is handled by Apple or Google; we never see your card details.
- Technical data — your device's IP address reaches our servers and our provider's network with every request, as it must for any internet service. We use it to keep the game up and to shed floods and abuse, not to build a profile of you, and we do not keep it alongside your gameplay records.
- Anti-abuse signals — we analyse patterns of play (for example accounts that only ever meet each other, or an implausible run of wins) to find collusion, bots and chip-dumping. Findings are reviewed by a person before any action is taken.
- Device data — if you allow notifications: a push token identifying your device to the notification service, used only to deliver game invitations. The app also stores your session token on your device (in the secure keychain where available).
- Crash data — if crash reporting is enabled in a given build, crash stack traces and basic device model/OS information go to Sentry to help fix bugs. No gameplay or account data rides along.
What we do NOT collect
No advertising identifiers, no location, no contacts, no analytics profiles, no tracking across other apps or websites. There are no ads and no data sales.
We do not collect your date of birth. At first launch we ask for your birth year once, only to confirm you meet the minimum age. It is used on your device to check eligibility and is never stored or transmitted — we keep only a yes/no flag that the check passed.
Where it lives
Account and game data are stored with Supabase (our backend provider) and processed only to run the game: matchmaking, multiplayer refereeing, leaderboards, and invitations. Match play is server-refereed, which means game moves pass through our servers to keep play fair.
Who can see what
Other players can see your display name, avatar, flag, level and public game statistics (leaderboards, seats at a table, the daily challenge board). Your email address is never visible to other players.
Retention and deletion
Your data is kept while your account exists. Profile → Delete account removes your account and the data attached to it — profile, statistics, currencies, ledger, friendships, push tokens — permanently and immediately. Device-local data is wiped at the same time. There is no grace period and no backup restore of a deleted account. If you can't reach the app, you can request deletion by email — see our Data Deletion page.
A limited set of records outlives your account only where the law or the safety of other players requires it. These are minimized and de-identified — your name and other identifiers are removed — held separately from live data, and deleted automatically when their retention period ends:
- Safety and abuse reports filed about you by other players — kept with your name removed, for a limited period, to protect players and handle abuse.
- Purchase records, if you ever buy anything — a minimized record (transaction id, item, amount, date) kept for as long as accounting, tax, and payment-dispute rules require. Payments are processed by Apple or Google, who keep their own records.
Retention periods are set to what the applicable rules require and no longer. The Data Deletion page lists exactly what is removed and what may remain.
Children
Ghant is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes
If this policy changes materially, the app will show the updated version and date.