Privacy Policy
Durak (the "app") · Effective 25 October 2026
This policy explains what personal data the Durak card game uses, why, and what you can do about it. We have kept the data we collect to what the game needs to work.
1. Who we are
The app is made by Viacheslav Pyrih, individual entrepreneur (FOP), Ukraine ("we", "us"). We are the controller of your personal data under the Law of Ukraine "On Personal Data Protection" and, for players in the EU/EEA, the EU General Data Protection Regulation (GDPR).
Contact for anything about privacy: contact@pye-entertainment.com
2. What we collect and why
| Data | When | Why | Legal basis (GDPR) |
|---|---|---|---|
| Account ID (a random identifier made when you first open the app) | Always, once you play online or open your profile | To keep your progress, purchases and friends tied to you | Contract (Art. 6(1)(b)) |
| Username and chosen avatar / badge | Always (a name like Player1234 is assigned; you can change it) | Shown to other players at the table, in friends lists and search | Contract |
| Email address | Only if you choose to save your account with an email | To send you one-time sign-in codes so you can recover your account on another device | Contract |
| Game progress: XP, level, diamonds balance and spending, achievements, game statistics, items you own | Always | To run the game, keep your progress and stop cheating | Contract; legitimate interest in fair play (Art. 6(1)(f)) |
| Friends and invites: who you have added, requests, table invites | When you use Friends | To show your friends and let you invite them | Contract |
| Online status (online / at a table / offline) | While the app is open and you have friends | Shown only to your friends | Contract |
| Moves in online games | During an online game | To run the game on our server and check moves are legal | Contract |
| Purchase records: product, App Store transaction ID, date | When you buy diamonds | To check the purchase with Apple and add the diamonds exactly once | Contract; legal obligation to keep sales records (Art. 6(1)(c)) |
| Technical data: IP address, app version, request times, error logs | When the app talks to our server | To deliver the service, keep it secure and fix problems | Legitimate interest (Art. 6(1)(f)) |
We do not collect your real name, contacts, location, photos, microphone, advertising identifier, or browsing activity. We do not use analytics or advertising SDKs, we do not track you across other companies' apps or websites, and we do not sell or share your data for advertising.
Payments. Purchases are handled by Apple. We never see your card or payment details; Apple only tells us that a purchase happened. Apple's own privacy policy applies to the payment.
Rewarded videos. The app may offer an optional video to double a reward. Today this is a placeholder that plays no ad and shares no data. If we add a real ad provider, we will update this policy and ask for your consent where the law requires it before any ad-related data is used.
Playing offline. Games against the computer can be played without an account. Your settings and offline progress are stored only on your device.
3. Stored on your device
The app stores your settings (sound, haptics, card order and similar) and, if you have an account, a sign-in token in the iOS Keychain. These are needed for the app to work and are not used to track you. Deleting the app removes them.
4. Who processes your data for us
We use these service providers, who process data only on our instructions under data processing agreements:
| Provider | What it does | Where data is stored |
|---|---|---|
| Supabase Inc. | Account sign-in and database | EU (Frankfurt, Germany) |
| Fly.io, Inc. | Runs the game server | EU (Frankfurt, Germany) |
| Resend | Sends sign-in code emails | EU (Ireland) |
| Apple Inc. | App distribution and in-app purchases (independent controller) | See Apple's privacy policy |
Some of these companies are based in the United States and may access data from there, for example for support. Where that happens, transfers are covered by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.
Other players see only your username, avatar, badge, level, and (if you are friends) your online status. They never see your email.
We may disclose data if the law requires it, or to protect the rights and safety of players or ourselves.
5. How long we keep it
- Account data, progress and friends: until you delete your account.
- Email address: until you remove it or delete your account.
- Purchase records: as long as tax and accounting law requires (currently 3 years), then deleted.
- Server logs: up to 30 days.
- Backups: deleted data can remain in encrypted database backups for up to 30 days before it is overwritten.
6. Deleting your account
You can delete your account at any time in the app: Settings → Account → Delete account. This permanently deletes your account, username, email, progress, diamonds, purchases and friends from our servers. Diamonds and items you bought are lost and cannot be refunded by us; for refunds of App Store purchases, contact Apple. You can also ask us to delete your account by emailing contact@pye-entertainment.com from the address linked to it.
7. Your rights
If you are in the EU/EEA, the UK or a country with similar laws, you have the right to:
- access the data we hold about you and get a copy of it;
- correct it (you can change your username in the app);
- delete it;
- restrict or object to our processing based on legitimate interest;
- receive your data in a portable format.
Email contact@pye-entertainment.com to use any of these rights. We will reply within one month. You also have the right to complain to your local data protection authority (in the EU, the authority of the country where you live; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights).
8. Children
The app is not directed at children under 13. We do not knowingly collect personal data from children under that age without consent from a parent. If you believe a child has given us personal data, contact us and we will delete it.
9. Security
Connections between the app and our server are encrypted (HTTPS). Account data can be read and written only by our server. Your sign-in token is kept in the iOS Keychain. No system is perfectly secure, but we take reasonable steps to protect your data.
10. Changes
If we change this policy we will update the date at the top and, for significant changes, tell you in the app.
11. Contact
Viacheslav Pyrih, individual entrepreneur (FOP), Ukraine contact@pye-entertainment.com