Privacy Policy

Last updated September 13, 2026

Who we are

Gamelo is operated by Itani inc ("we", "us"). Questions or requests about this policy: support@gamelo.online.

What we collect

By default you play under an anonymous account: a random account ID, your player name, your game runs (level seed, inputs and scores), league standings, tickets, coins, streaks, chests, duels, cosmetic items and settings. If you save your progress with a sign-in method, we also store what it shares with us: for Google, Facebook, Discord, X or Twitch, the email address, name and account ID that service provides; for email, the address you verify. Supabase securely processes password sign-in; Gamelo never stores your password in the app.

Reports and blocks

If you report a player we store the report (reason, optional note, the name reported) for review. If you block a player we store that block so it can be enforced. The player you reported or blocked is never told who you are.

Card tables, messages and stickers

When you join an online card table, we store your table participation, moves and game results to run the match. If you choose to send a message or sticker, we store its text or sticker identifier, your account ID, the table ID and the time sent. Messages and stickers are visible to other eligible players at that table. Authorized moderators can review this information and player reports to investigate abuse and enforce our rules. A sticker fading from the screen does not delete its stored record. Your messages are deleted when your account or their card table is deleted; there is currently no automatic time-based expiry for stored table messages. Reports may be retained for moderation as described below.

Notifications

If you turn on notifications, we store a push token for your device, your time zone and the notification categories you chose, so we can tell you about league deadlines, promotions, duels and chests. Notifications are delivered through Expo’s push service and, on Android, Google Firebase Cloud Messaging. Turn them off at any time in your device settings.

Diagnostics and analytics

When enabled, we use Sentry for crash reports (device model, OS version, stack traces — not linked to your account) and PostHog for product analytics (screens and games you use, scores, feature usage — linked to your random account ID). Our hosting provider processes IP addresses to operate and secure the service. We do not sell personal data.

Advertising

Ads are served by Google AdMob. To show and measure ads and to prevent fraud, Google may collect your device’s advertising ID and app set ID, your IP address (which can indicate your approximate location), device information, your interactions with ads, and app and SDK performance diagnostics, under Google’s own privacy policy. Where the law requires it (for example in the EEA and UK) you are asked for consent first and can change your choice later; you can also reset or delete your advertising ID in your device settings. When you choose to watch a rewarded ad, your random account ID is passed to Google with the ad request and comes back in Google’s signed confirmation, so we can credit your ticket; we store that confirmation’s transaction ID.

Purchases

The Remove ads purchase is processed by Google Play; we never see your payment details. We receive the purchase’s token and order ID, check them with Google, and store them to keep ads removed on your account and to let you restore the purchase.

Where data lives

Game and account data is stored with Supabase (hosted PostgreSQL) in its Canada (Central) region. If enabled, crash data is processed by Sentry and analytics by PostHog (hosted in the United States unless configured otherwise). Ads are served by Google AdMob, purchases are processed by Google Play, and push notifications pass through Expo and Google Firebase. Each processes data under its own privacy terms.

Your rights and deletion

You can delete your account at any time from Profile → Danger zone → Delete account. Deletion is immediate and permanent: your profile, runs, standings, coins, streaks, chests, duels, blocks, push tokens and rewarded-ad records are erased. Reports you filed are kept for moderation but no longer linked to your account, and Remove ads purchase records are kept, unlinked, so the purchase can be restored to the same Google account. Analytics events already sent are deleted on request. You can also email us to access, correct or delete your data, or to request deletion if you no longer have the app.

Children

Gamelo is not directed at children under 13.

Changes

If this policy changes materially we will note it in the app before the change takes effect.