Privacy Policy

Ludo No Mercy

Last updated: October 23, 2026

This Privacy Policy explains how Ludo No Mercy collects, uses, stores, and protects information when you use the game on mobile or web. Ludo No Mercy is the data controller for information processed directly by the game.

Information we collect

We process information needed to operate the game, save progress, process purchases, provide support, and improve stability. With your permission, we also process the optional usage statistics described below.

• Local profile data: player name, avatar, language, coins, titles, cosmetics, achievements, settings, and game statistics.
• Multiplayer data: room state, invite code, player seat, gameplay actions, dice rolls, captures, timers, connection state, and match results.
• Linked account data: when you link Apple or Google, we receive the provider account identifier and any basic account information the provider makes available, such as an email address or display name. We store the profile and inventory information needed to sync progress.
• Purchases: product, order, checkout, and transaction identifiers needed to verify purchases, grant coin packs, and prevent duplicate rewards. Ludo No Mercy does not receive your full payment card details.
• Support reports: category, description, app version, platform, connection status, optional latest match snapshot, and screenshots you voluntarily attach.
• Diagnostics: crash and error information, app version, environment, device platform, and limited technical context used to investigate bugs.
• Rewarded ads: when rewarded ads are enabled, video status and ad events needed to grant an optional reward.

How we use information

• To create and maintain a local or linked player profile.
• To save and restore progress across devices.
• To run private rooms, online matches, bots, matchmaking, and rematches.
• To process purchases and grant purchased coin packs.
• To investigate support reports, crashes, security issues, and gameplay problems.
• To protect the integrity of the game economy and prevent duplicate rewards, abuse, and fraud.
• When enabled, to display optional rewarded ads and grant rewards after completion.

Service providers and storage

• Most profile data is stored locally on your device.
• Supabase provides linked account authentication, cloud profile sync, inventory, purchase entitlements, and support report storage.
• Realtime multiplayer uses Colyseus infrastructure hosted on Fly.io.
• The web application is hosted through Vercel.
• Support screenshots may be stored in Cloudflare R2.
• Crash and error diagnostics may be processed by Sentry.
• Web purchases are processed by Stripe. Mobile purchases are processed by Apple App Store or Google Play.
• When production rewarded ads are enabled, they may be served by Google AdMob.
• Application builds and over-the-air updates may be delivered through Expo services.

Support reports and screenshots

Support reports are voluntary. When you send a report, we may attach a limited gameplay snapshot when one is available. Player names in diagnostic match logs are scrubbed where possible, and room or player identifiers are hashed before report storage. Screenshots are uploaded only when you choose to attach them.

Ads and purchases

Rewarded ads, when available, are optional and are not required to continue playing. Availability and consent requirements may depend on region and platform. Stripe, Apple, or Google handles payment details according to the platform used. We retain only the order and transaction information needed to verify purchases, deliver coins, prevent duplicate grants, handle disputes, and meet applicable legal obligations.

AI-assisted assets

Some visual assets may be AI-assisted and manually curated before publication. The game does not provide users with an AI content generation feature and does not send player content to generative AI services as part of normal gameplay.

Data sharing and international processing

We do not sell personal information. Information is shared only with the service providers listed above when needed to operate the game. These providers may process data in countries other than your own and apply their own security and legal safeguards to that processing.

Retention and deletion

• Local profile information remains on your device until it is cleared, the app is removed, or you delete the profile.
• Linked profile and inventory information is kept while the linked account exists.
• When linked-account deletion is scheduled, the account is disabled immediately and its associated data is kept during a 7-day recovery window, solely so the request can be cancelled after fresh authentication.
• If you choose to link a local profile to an Apple or Google account that is already associated with another profile, the app identifies that profile by name and win count before asking you to choose. If you confirm replacement, the old profile is disabled, its authentication account is deleted so the identity can be relinked, and a private support-recovery copy is retained for 7 days before permanent deletion.
• Active room state is kept only as needed to operate the room. Limited match and security records may be kept as needed to maintain game integrity and investigate incidents.
• Support reports, optional screenshots, and diagnostics are kept only as long as reasonably necessary to investigate the issue, protect the service, and meet legal obligations.
• Purchase and transaction records may be kept as long as reasonably necessary to verify entitlements, prevent duplicate rewards or fraud, resolve disputes, and meet legal obligations.

You can schedule account deletion from Settings > Privacy. For an account linked to Apple or Google, the local profile is cleared and access to cloud data is disabled immediately. The app displays the exact deletion date. During the next 7 days, you can create a new local profile, then cancel the request from Settings > Backup and restore by securely signing in again with the same provider and choosing to restore the previous profile. When that period expires, the authentication account, progress, coins, inventory, and other associated data under our control are permanently deleted and cannot be recovered. A local-only profile is deleted immediately and cannot be recovered. Certain transaction or security records may be kept separately where required by law, fraud prevention, or dispute handling.

For Sign in with Apple, we keep the provider credential encrypted on our server so we can revoke the authorization when account deletion becomes final. If Apple is temporarily unavailable, only the minimal encrypted credential and provider identifier needed to complete revocation remain in a retry queue until success. This does not extend the profile recovery period or delay deletion of game data. Older accounts without a recoverable credential receive instructions for removing the authorization in Apple settings.

Your choices and rights

• You can play with a local profile without linking Apple or Google.
• You can choose whether to attach screenshots to support reports.
• You can skip optional rewarded ads.
• You can request access to or correction of account-linked personal information through the contact below.
• You can directly schedule permanent deletion of your account and associated cloud data from Settings > Privacy without sending an email, then cancel the request during the 7-day recovery period from Settings > Backup and restore after creating a new local profile.
• Depending on where you live, you may have additional rights concerning access, correction, deletion, restriction, objection, portability, withdrawal of consent, or a complaint to your local privacy authority.

Optional usage statistics

With your optional permission, PostHog helps us understand tutorial progress, game modes, matches started or finished, and cosmetic views, previews, purchases and equipment changes. We send only game-defined events, the app version and platform. A random identifier for this installation measures return visits; it is not linked to your Apple account, Google account or player profile.

These statistics are hosted by PostHog in the United States. Events contain no player names, email addresses, room codes or free text. IP addresses are dropped from stored events and geolocation is disabled. Screen recording and automatic click capture are disabled.

Sharing is off by default. You can play without accepting and change your choice in Settings > Privacy. Withdrawing permission stops future sends and clears the locally stored identifier and event queue. It does not automatically delete statistics already received, which are not linked to your game account. Deleting your profile also resets this local choice.

Children

Ludo No Mercy is not intended for children under 13. If we learn that personal information was collected from a child under 13 without appropriate authorization, we will take steps to delete it.

Security

We use technical and organizational measures designed to protect information, including environment-based secrets, signed upload URLs for support screenshots, access controls, hashed report identifiers, and diagnostics scrubbing for sensitive fields. No system is perfectly secure, so we also limit collection to what is reasonably necessary.

Policy changes

We may update this Policy when the game, service providers, or legal requirements change. The current version and its update date will remain available at this URL.

Contact

Ludo No Mercy is responsible for privacy questions concerning the game. Contact us through the in-app Help & Support flow or at support@ludonomercy.app. Account deletion remains available directly inside Settings > Privacy.