Privacy Policy

Information we process

We do not use advertising or analytics SDKs, tracking pixels or cookies. When you use online play, our service necessarily processes your network address while handling the connection, short-lived rate-limit data derived from it, session and match identifiers, gameplay actions, and limited security and service logs. We also receive information you choose to provide when contacting support.

On Apple platforms, online multiplayer uses Game Center. When you authenticate, we receive a developer-team-scoped Game Center player identifier, your public Game Center alias and signed identity-verification data. We immediately derive a one-way internal identifier from the scoped player identifier; neither value is shown to other players. Your public alias is shown to the other player in a match. Game Center age, multiplayer and personalised-communication restrictions are checked by the app on your device and are not sent to our server.

On Android, online multiplayer uses Google Play Games Services. When you authenticate, we receive your game-scoped Play Games player identifier, your public Play Games display name and a short-lived authorisation code. The player identifier is used as an internal account identifier and is not shown to other players. Your public display name is shown to the other player in a match.

The Android app also requests a Play Integrity token. Google decodes that token for our server and returns request metadata and security signals needed to confirm that the request is recent and bound to Ability Roulette, that Google Play recognises the installed app, and that the Google Play account is licensed to use it. The response may include app, account and device integrity information. We use these signals only to protect online access and do not use them for advertising or tracking.

When you check, buy or restore the Full Game, Apple processes the payment. We receive product, entitlement and transaction-verification information needed to unlock online play, recognise refunds or revocations, and remove access when an entitlement ends. To prevent a purchase from being shared as a portable transaction token, we derive a separate pseudonymous purchase-correlation identifier from your internal Game Center identifier, send it to Apple with the purchase, and check that binding when online access is restored. We do not receive your payment-card details.

On Android, Ability Roulette is sold as a paid download through Google Play. Google processes the purchase and payment. We receive only the licensing and app-recognition result returned through Play Integrity when you request online access; we do not receive your payment-card details.

Release versions send a small set of fixed product-interaction signals so we can understand whether players reach the main menu and, on Apple platforms, whether a StoreKit-loaded Full Game price was actually shown. These signals contain only the platform category and interaction type. They do not contain the displayed price, currency, storefront, region, locale, name, account or device identifier, transaction identifier, or gameplay content, and are not linked to a player. The service increments daily and lifetime aggregate counters immediately and does not retain a per-session interaction event.

Language, audio, graphics and onboarding preferences are stored only on your device. In a browser, short-lived reconnect and private-playtest access tokens may be held in session storage. A private playtest link’s master secret is removed from the address immediately and is not stored by the game; it is exchanged for the short-lived access token. In the Apple app, the reconnect token is held in the device-only Keychain for no more than two minutes and is not synchronised through iCloud. Online matches process gameplay actions and selections from the game’s fixed table-talk list.

Technical information required to provide online features must be processed for those features to work. Support information is optional.

How we use information

We use information to authenticate players, verify Full Game access, provide matchmaking, online gameplay and support, enforce platform restrictions, maintain and secure the service, prevent abuse, diagnose technical problems, measure aggregate product interaction and purchase conversion, and comply with legal obligations. Where applicable, we rely on performance of our service agreement, our legitimate interests in operating, improving and protecting the service, compliance with law, or consent when consent is required.

Sharing and international processing

Apple operates Game Center and the App Store and processes Game Center account and purchase information under Apple’s own privacy terms. We exchange only the identity and transaction-verification information needed for the Apple features you use.

Google operates Play Games Services, Google Play and Play Integrity and processes Play Games identity, app-licensing and integrity information under Google’s own privacy terms. We exchange only the identity, authorisation and integrity information needed for the Android features you use.

We disclose information only to service providers that help us host, deliver, secure or support the service, or when disclosure is required by law or necessary to protect legal rights. We require service providers to protect information consistently with this policy and applicable law.

Providers may process information in countries other than your own, subject to contractual or legal safeguards where required. Contact us for information about safeguards applicable to international transfers.

We do not sell personal information or share it for cross-context behavioural advertising. We do not use personal information for third-party advertising or tracking across unrelated apps and websites.

Because we do not track users across unrelated services, the service does not respond differently to browser “Do Not Track” signals, and we do not permit service providers to use information from the service for such tracking.

Retention and security

Game Center signature fields are used to validate one authentication request and are not retained after that check. A one-way proof fingerprint is retained only for the proof’s remaining validity window, up to ten minutes, to reject replay. Google’s authorisation code, Play Integrity token and resulting Google access token are used to validate one Android access request and are not retained after that check. The Play Games player identifier and public display name are held with the resulting short-lived online credential. The Apple identity credential lasts up to five minutes. An Apple, Google Play or private-playtest online-access credential lasts up to fifteen minutes and is stored server-side under a one-way token hash. The hashed purchase-seat lock that prevents simultaneous use is kept while a durable-platform online seat is active, released on exit, and expires within two hours after the last successful renewal if immediate cleanup fails. Rate-limit counters derived from network addresses expire after about one minute. Active match state is kept for the room lifecycle, with only the short reconnect window after a disconnection.

Name reports contain the reporting and reported internal identifiers, the displayed name, match code and time; they are retained for up to 90 days and capped operationally. Blocks are retained to enforce the blocking player’s safety preference. Support correspondence and limited safety or security records, including necessary suspension records, may be kept longer where needed to answer a request, investigate abuse, protect players or the service, preserve another player’s safety choice, establish or defend legal rights, or comply with law. We delete or anonymise information when its purpose and any required retention period end, subject to applicable legal exceptions and the rights and safety of other people. We use reasonable administrative, technical and organisational safeguards, but no system can guarantee absolute security.

Product-interaction and verified-purchase counts are stored only as aggregate totals. Daily totals expire after 32 days; lifetime aggregate totals are retained to measure the service over time. These counters cannot be used to retrieve an individual player’s history.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to certain processing, withdraw consent, or appeal a decision concerning your request. You may also complain to your local data-protection authority. We will not discriminate against you for exercising a privacy right.

To make a request, including deletion of information held by Ability Roulette, email info@abilityroulette.uk. Ability Roulette does not create a developer account or associate your email address with your Game Center or Play Games profile, so we may need proportionate additional information before we can locate data or verify a request. Do not send passwords, payment details, identity documents, Game Center identifiers or Play Games identifiers unless we specifically explain a secure need and method. Deleting eligible developer-held data does not delete a separate Game Center or Play Games account, store purchase records controlled by Apple or Google, another player’s block preference, or safety and security records we are permitted or required to retain.

Children

Ability Roulette is not directed to children under 13. Users must also meet any higher minimum age imposed by applicable law or the platform used. We do not knowingly collect children’s personal information in violation of applicable law. Contact us if you believe this has occurred.

Contact and changes

VEB AUTOMEISHN LLC is responsible for the processing described in this policy. Questions and privacy requests may be sent to info@abilityroulette.uk.

We may update this policy when the service, the information we process or applicable requirements change. We will publish the revised text and date before or when the change takes effect. If a change is material, we will also provide a prominent in-app, store-listing or other notice when required by law. Because Ability Roulette does not require an email registration, policy notices are not ordinarily sent by email. We will update this policy and the relevant store privacy disclosures before introducing a new category or purpose of data collection.