Privacy policy

Who we are

Turnabout Games is made by Nate Mihu, an independent developer ("we"). This policy explains what the app keeps about you and the people you play with, why, and what you can do about it. Questions or requests: natemihu@gmail.com.

What we keep

• Your account: your email address, or the sign-in you chose (Apple or Google, which may give us a private relay address). Passwords are handled by Google Firebase Authentication; we never see them.
• Playing as a guest: just the name you give, on a guest sign-in with no email. Guests have no handle, friend code, friends or match history.
• Profiles in your household: each one’s display name, handle, avatar style and friend code, and whether it’s a grown-up’s or a kid’s. If you set a profile PIN we keep only a salted hash of it.
• Friends and rooms: who you’re friends with, friend requests and their answers, invites, the rooms you host or join, and requests to join them.
• While the app is open: whether you’re online and which room you’re in, so friends see you’re around. It turns to offline when you close the app.
• Games: the moves in online games, while the room is open, so everyone’s phone shows the same table; and your match history (the game, when, how many played and where you placed) with the stats built from it.
• A pass-and-play game in progress is saved only on your phone. We count that a game started on a phone, and which game, nothing more.
• When something goes wrong: the error’s message and where in the app’s code it happened, the app’s version, and whether it’s the iPhone, Android or web app, so we can fix it. On phones, a crash report too (Firebase Crashlytics). Not who you are.
• Daily totals, such as how many accounts were made, rooms hosted and games played. Counts only, never who.

What we don’t

• No advertising, and we never sell or rent your information.
• No location, contacts, photos, camera, microphone or advertising identifiers, and no analytics tracking what you do in the app.
• No chat: players only see each other’s names, handles, avatars and moves.

Kids

Kids don’t sign up or sign in on their own. A grown-up adds a kid’s profile to their own account and stays in charge of it: a kid’s friend requests wait for that grown-up’s OK, and a kid can only join a room hosted by someone who isn’t their friend if the host lets them in. Kids are shown to other players by display name, handle and avatar only. A grown-up can remove a kid’s profile at any time, which deletes it.

We don’t knowingly collect more from children than the app needs to play. If you think a child is using Turnabout Games without a grown-up’s account, write to natemihu@gmail.com and we’ll delete it.

Why we use it

Only to run the app: signing you in, showing your friends and rooms, playing games across phones, and keeping your history and stats; and, from error reports and daily totals, to fix problems and see what gets played. We use it because you asked to play (the service you signed up for) and, for security checks, error reports and daily totals, our legitimate interest in a safe app that works.

Who else handles it

The app runs on Google Firebase (sign-in, databases, server functions, hosting and crash reports), which stores data for us on Google Cloud servers, which may be outside your country, including in the United States. Apple and Google handle their own sign-in when you choose them. Firebase App Check asks your phone’s platform (Apple App Attest, Google Play Integrity) or reCAPTCHA on the web to confirm requests come from the real app. No one else receives your information, unless the law requires it.

How long we keep it

• Your account, profiles, friends and match history: until you delete them.
• A guest: until you end guest play or make an account, and deleted after 30 days without playing.
• A room and its game: while it’s open, and deleted within 30 days after it closes.
• Whether you’re online: shown only while the app is open.
• Error reports: 30 days in Google Cloud’s logs. Crash reports: 90 days in Crashlytics. Daily totals are kept as long as they’re useful; they hold no one’s information.

Your choices

• Change your display name, handle or avatar in the app at any time.
• Remove a profile from your household in the app; it’s deleted with its friends and history.
• Delete your account in the app (Profile), or by writing to natemihu@gmail.com. Everything tied to it goes within 30 days.
• Ask for a copy of your information, or to correct it, by writing to natemihu@gmail.com. Depending on where you live you may also complain to your data protection authority.

Changes

If this policy changes we’ll update the date below, and tell you in the app before a change that matters takes effect.