Privacy Policy

“Phurti: Multiplayer Card Game” mobile game · Effective date: July 9, 2026 · Last updated: October 29, 2026

Who we are

The mobile card game “Phurti: Multiplayer Card Game” (the “game” or “Phurti”) is developed and operated by ViQwela, an independent solo developer (“we”). Contact: support@phurti.app.

What data we collect

• Account data. A randomly generated device identifier (guest sign-in). If you sign in with Google or link a Google account: your Google account ID, display name, profile picture URL, and email address. If you sign in with Apple: your Apple user ID, the email address Apple passes to us (or the private relay address Apple creates for you), and your name (if you choose to share it), which becomes your in-game name. If you sign in with or link Google Play Games (Android) or Game Center (iOS): your player ID plus the player name and avatar that service shows. We do not use your email address for mailings. It only identifies your account (for example, when you ask us to delete it). We also keep a record of which version of the Terms of Use you accepted and when. This lets us confirm your acceptance and avoid asking you to accept the same version again after a reinstall or on a new device.
• Game data. Your in-game name, avatar, game statistics, virtual chip balance, match history, friends list, achievements, and invite code.
• Country. The country shown in your profile and used for the country leaderboards. It is set automatically from the region in your device settings (not from your location). You can change it in the settings.
• Push token. Your device’s Firebase Cloud Messaging token (on iOS, delivery goes through the Apple Push Notification service), used to deliver game notifications, along with the device language, used to localize them.
• Technical data. IP address and basic request data in short-lived server logs (for operations and abuse prevention). If you send a bug report from the game settings, we receive your message and technical data: game version, device and operating system, language, player ID, and recent game events. We use these reports only to fix bugs and keep them for up to 12 months.
• Reports. If you report another player, we keep the report. If one of the two people in a private conversation reports the other’s messages, we may read that conversation to look into the report.
• Private messages. The game has private one-on-one messaging between players who have added each other as friends. We store the messages you send and receive so that both of you can read the conversation history. Messages are kept as long as the participants’ accounts exist and are deleted along with an account when it is deleted. You can report or block another player right from the chat.
• Advertising data (Google AdMob). The game shows rewarded ads only when you choose to watch them. To serve and measure ads and to prevent fraud, the Google AdMob SDK processes data on your device such as your advertising ID, IP address, general device information, and ad interaction data (for example, that an ad was shown and watched). We ourselves record only that a reward was earned, so we can credit the chips and enforce the daily limit. On iOS, the app asks for tracking permission (App Tracking Transparency) before showing the first ad. If you decline, ads are shown in non-personalized mode.
• Purchases (Google Play and App Store). Chip packs, avatar frames, and emote packs are sold through the billing system of Google Play or the App Store. Payment details (such as your card number) are handled by the store and never reach us. Our server receives only the store’s purchase confirmation (purchase or transaction ID, product and order IDs, and the purchase price and currency), verifies it with Google or Apple, credits what you bought, and keeps a record of credited purchases.
• Sign in with Apple token. If you sign in with Apple, we keep an Apple refresh token so that we can revoke the sign-in on Apple’s side when you delete your account, as Apple requires.
• Account recovery. So that reinstalling the game brings you back to your account without signing in, the game keeps a small recovery token:
  a) on Android, through Google Play Games Services (Google links your Play Games profile to a random token that identifies your account on our server) and Google Block Store (a copy of your device identifier in your Google backup).
  b) on iOS, in the device keychain. None of these contain your name or game data.
• Invite codes and the partner program. If you sign up with another player’s invite code, whether entered in the game or carried over from an invite link through the Google Play Install Referrer, we record which code you used, who invited you, and when. Some inviters take part in our partner program. If the player who invited you is a partner, your in-app purchases count toward that partner’s commission in aggregate form only (product, store, estimated value, month, and a one-way hash of your account ID). Partners see only totals. They never see your name, ID, or purchase history. If your inviter becomes a partner later, the same attribution applies to your existing account. We process partners’ contact and payout details to pay their commissions.
• Website. Our website, phurti.app, uses no analytics and no tracking cookies. If you pick a language manually, the site saves your choice in a single cookie (“lang”) for one year so that pages open in that language automatically. The site stores nothing else.

How we use the data we collect

• Running the game: accounts, matches, progress, leaderboards, friends.
• Bringing you back to your account after a reinstall (account recovery).
• Sending push notifications, which you can turn off in your system settings.
• Showing rewarded ads when you choose to watch them: you can watch an ad to receive virtual chips (a daily limit applies). Ads never interrupt the game on their own.
• Running the partner program and paying commissions.
• Preventing fraud and abuse and enforcing the game rules.

Virtual chips have no monetary value. They cannot be transferred to other players or exchanged for real money or prizes.

Third parties

• Google Sign-In, Google Play Games Services. Optional sign-in and account linking on Android. Play Games Services also handle the silent account recovery described above.
• Sign in with Apple, Game Center (Apple). Optional sign-in and account linking on iOS.
• Firebase Cloud Messaging (Google). Push notification delivery (on iOS through the Apple Push Notification service).
• Google Play billing, App Store (Apple). In-app purchases. The store processes payments under its own terms. We only verify purchases with Google or Apple and never see your payment details.
• Google AdMob. Rewarded ads. AdMob processes the data listed above under its own terms. See How Google uses information from sites or apps that use its services. In the EEA and the UK, ads are served according to the choices you make in the consent dialog shown before the first ad (Google User Messaging Platform). You can review or withdraw your consent at any time under “Privacy options”, which appears in the game’s settings after the first ad has been shown. If you decline personalized ads, ads still work in non-personalized mode.
• Data is processed on a cloud server run by our hosting provider.

We do not sell your data.

That said, under the laws of some U.S. states, using personal data for personalized ads may count as a “sale” or “sharing” of that data, even though we receive no money for the data itself. If you live in one of these states, you can opt out of this use under “Privacy options” in the game’s settings. After you opt out, Google AdMob switches to restricted data processing and shows ads without personalization.

Data retention and deletion

Account data, game data, and private messages are kept for as long as your account exists. Deleting an account also deletes its conversations, including on the other participant’s side. You can request deletion of your account and the data associated with it at any time (see the account deletion page). Deletion has a 7-day grace period: signing back in within those 7 days cancels it. After that, the account and its data are permanently erased. Copies may remain in database backups for up to 62 more days, after which those backups are erased. If we ever have to restore the database from a backup, every account deleted after that backup was made will be deleted again. Server logs are kept briefly and then deleted. Records needed to settle the partner program (attributed purchases with a one-way hash of the buyer’s ID) and records of credited purchases are kept as long as accounting requires.

Children

The game simulates gambling-style card play with virtual chips and is not intended for children. You must be 18 or older to play.

Changes to this policy

We may update this policy from time to time (for example, when we add new features to the app). The current version is always available at this address.