The Player ID is generated automatically when you first open the app, even before you create an account. It is stored on your device and linked to your Supabase account record when you sign in.
None of these events include your name or email — only your anonymous Player ID.
We never sell your personal data.
Game functionality: Your dice rolls, token moves, property purchases, builds, and trades are stored in Supabase to enable online multiplayer — your opponents read the game state when they take their turn. Without this, online multiplayer is not possible.
Leaderboard and ranking: Your username, ELO score, and match results appear on the public leaderboard. Other players can see your username and rank. Your email is never shown publicly.
Personalisation: Your chosen avatar, active theme, and settings preferences are stored so they sync across your devices when you are logged in.
Analytics: Usage events are stored to help us understand how players use the game and where to improve it. These are associated with your anonymous Player ID — never with your name or email in analytics queries.
Notifications: If you grant notification permission, your device's push token is stored to send multiplayer turn alerts. The daily reward reminder is scheduled locally on your device and does not require sharing data with our servers.
Business: India relies on a small number of trusted services. Each has its own privacy policy:
| Service | Purpose | Their Policy |
|---|---|---|
| Supabase | Database, authentication, realtime sync (self-hosted on the developer's own infrastructure) | supabase.com/privacy |
| Google AdMob | Advertisements (non-personalised by default) | policies.google.com/privacy |
| Google Sign-In | Sign-in / authentication | policies.google.com/privacy |
| Google Play Billing | In-app purchases | play.google.com/about/play-terms |
| RevenueCat | Purchase management and entitlement tracking | revenuecat.com/privacy |
| Expo / React Native | App framework and push notification delivery | expo.dev/privacy |
We do not share your data with these services beyond what each needs to perform its function. Business: India has no Facebook integration.
Business: India requests non-personalised ads from Google AdMob. AdMob does not build a behavioural profile based on your identity or cross-app activity, and does not use interest-based targeting or remarketing. It may still use contextual signals (e.g., general location derived from IP, language) to select relevant ads. You are not asked for consent to personalised advertising. Ads are shown as full-screen interstitials (after every 5th completed game) and player-initiated rewarded videos only — no banner ads, no ads during active gameplay, tutorials, or within 3 seconds of launch. A one-time Remove Ads purchase disables all interstitial ads.
RevenueCat receives your Google Play purchase receipts and the entitlements they unlock. RevenueCat does not receive your name, email, or gameplay data. It uses an anonymous user ID to associate purchases with your account.
Access: Request a copy of the data we hold about you by emailing [email protected].
Deletion: Delete your account from within the app: Settings → Account → Delete Account. This begins a 30-day grace period. After 30 days, all personal data — username, email, match history, ELO, move history — is permanently deleted from our servers. Analytics events are anonymised rather than deleted, as they are already aggregated into statistical reports.
Correction: Change your username at any time from Settings → Profile (up to 3 times per 30 days for logged-in accounts; no frequency limit for guest accounts).
Portability: Request your complete match history as a JSON file by emailing [email protected]. We will respond within 30 days.
Opt out of analytics: Contact us and we will flag your account to exclude it from all analytics aggregation. Operational data (game moves for multiplayer) cannot be excluded while your account is active.
All gameplay data, account data, and analytics events are stored in a Supabase instance self-hosted on the developer's own infrastructure. By creating an account, you acknowledge that your data will be transferred to and stored on that infrastructure, which may be located in a country with different data protection laws than your country of residence.
If you are in the EEA, you have the following additional rights under the General Data Protection Regulation:
Our lawful basis for processing your data is contract performance and legitimate interest (anonymised analytics to improve the game). To exercise any of these rights, email [email protected]. We will respond within 30 days.
If you are a California resident, you have the right to know what personal information we collect and how it is used, request deletion of it, and opt out of its sale. We do not sell your personal information and do not share it with third parties for their own marketing purposes. To exercise your rights under CCPA, email [email protected].
Business: India is rated Everyone (E) on Google Play. The target audience is 13 and older, and we are not in the Google Play Families Program. We do not knowingly collect personal data from children under 13. If we learn that we have done so without parental consent, we will delete that data within 30 days. If you believe a child under 13 has provided us with personal data, contact [email protected].
All data in transit is encrypted using TLS. Supabase enforces Row Level Security (RLS) — you can only read and write your own records. Passwords are never stored by us; they are handled by Google or Supabase Auth (bcrypt-hashed at rest). Your email address is stored encrypted and never exposed via the app or API. No method of transmission or storage is 100% secure — if you become aware of a security concern, contact [email protected].
We will notify players of significant changes via the What's New screen in the app. Minor corrections may be made without notification. The "Last updated" date at the top always reflects the current version.
2DGameClub Studio
[email protected]