Privacy Policy
Ludo Swipe: Online & Offline (Android app com.cellclash.ludoswipe)
Last updated: 15 October 2026
1. Who is responsible
The controller responsible for data processing in this app is:
CellClash
E-mail: support@cellclash.de
Website: cellclash.de
2. What data we process and why
2.1 Anonymous player account (Firebase Authentication)
When you play online or your progress is saved to the cloud, the app creates an anonymous account with a random user ID. No e-mail, phone number or social login is used. The ID is needed to identify your seat in online games and to protect game rooms and save files so that only you can change them.
2.2 Online games (Cloud Firestore)
For online games (Quick Match and private rooms) we store, per game room: the room code, the anonymous IDs and nicknames of the players (chosen by you, max. 16 characters, visible to the other players in the room), the current game state (token positions, dice, turn order) and the emoji reactions sent during the game. There is no free-text chat. Rooms are deleted after the game ends, when the host closes the lobby, or when all players have left.
2.3 Cloud save
Your game progress is saved online so it is not lost: coins, experience points and level, game statistics (e.g. games played, wins, captures), achievements, purchased cosmetic items (dice, tokens, boards; bought only with in-game coins) and your daily reward streak. The save is stored under a random backup code shown in Settings. Anyone who knows this code can restore the progress on another device, so please keep it private.
2.4 Usage statistics (Google Analytics for Firebase)
To understand how the game is used and to improve it, we use Google Analytics for Firebase. It processes:
- an app instance ID (a random ID created for the installation, not the advertising ID; the advertising ID permission is blocked in the app),
- in-app events such as screens viewed, games started and finished (game mode, number of players, placement), online rooms created or joined, coins earned and spent, levels reached, achievements and daily rewards,
- technical information such as device model, Android version, app version, app language, and an approximate country/region derived from the IP address,
- session information (e.g. first open, session start and duration).
We do not use this data for advertising or to identify you personally. Analytics data is kept for the retention period configured in Google Analytics (by default 2 months for detailed event data) and then deleted.
2.5 App updates (Expo EAS Update)
When the app starts, it checks for updates with our update service (Expo / EAS Update). For this, technical data such as your IP address, the app version and platform is processed to deliver the correct update. This data is not used to identify you.
2.6 Data stored only on your device
Your settings (language, sound, vibration, nickname) and a local copy of your progress are stored only on your device. They are removed when you delete your data in the app or uninstall the app.
2.7 What we do not collect
We do not collect your real name, e-mail address, phone number, contacts, photos, files, precise location, microphone or camera data, and we do not show ads or offer purchases with real money.
3. Legal bases (GDPR)
- Art. 6(1)(b) GDPR – providing the game and the features you use (online games, anonymous account, cloud save, updates).
- Art. 6(1)(f) GDPR – our legitimate interest in a stable, secure game and in understanding how it is used so we can improve it (usage statistics, update delivery). Where the law requires consent for this, we process such data only with your consent (Art. 6(1)(a) GDPR, § 25 TDDDG), which you can withdraw at any time.
4. Service providers and recipients
| Provider | Purpose | More information |
|---|---|---|
| Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA (Firebase) | Anonymous account, online game rooms, cloud save, Google Analytics for Firebase | firebase.google.com/support/privacy, policies.google.com/privacy |
| 650 Industries, Inc. (Expo), USA | Delivery of app updates | expo.dev/privacy |
| Google LLC (Google Play) | App distribution, crash and install statistics provided by Google Play | policies.google.com/privacy |
These providers process data on our behalf. Data may be transferred to the USA. Such transfers are based on the EU-U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses. Other players in an online room see your nickname, your game moves and your emoji reactions. We do not sell your data.
5. How long we keep data
- Online game rooms: deleted after the game ends or when all players have left.
- Anonymous account and cloud save: until you delete them in the app (or ask us to).
- Usage statistics: according to the Google Analytics retention setting (default 2 months for event-level data).
- Data on your device: until you delete it in the app or uninstall the app.
6. Deleting your data
Open the app and go to Settings → Delete account & data. This immediately deletes your cloud save, removes you from all game rooms, deletes your anonymous account, resets the analytics ID and clears all data stored on your device. If you can no longer use the app, e-mail us at support@cellclash.de with your backup code (if known); we will delete your data within 30 days.
7. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). If you have given consent, you can withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, for example in the EU country where you live. To exercise your rights, contact us at support@cellclash.de. Because the account is anonymous, please include your backup code so we can find your data.
8. Children
Ludo Swipe is a board game suitable for all ages but is not directed at children under 13. The app does not ask for personal contact information and offers no free-text chat. If you believe a child has provided personal data, please contact us and we will delete it.
9. Security
All data is transmitted over encrypted connections (HTTPS/TLS). Security rules on our servers make sure that only players in a game room can change it, only on their own turn, and that only the owner of a save can delete it.
10. Changes to this policy
We may update this policy when the app or the law changes. The current version is always available at cellclash.de/privacy; the date at the top shows the last update.
11. Contact
Questions about privacy: support@cellclash.de