Deal Estate Privacy Policy

Deal Estate is a mobile card game operated by Zondo Studios ("we", "us", or "our"), an independent Australian software studio, available as an app for iOS and Android. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use Deal Estate.

Deal Estate is available to players worldwide. We are operated from Australia and apply the Australian Privacy Principles under the Privacy Act 1988 (Cth) as our baseline. If you live elsewhere, the privacy rights granted by your local law (for example the EU/UK GDPR, the UK Data Protection Act, California's CCPA/CPRA, or equivalent statutes) apply in addition to this policy and are not waived by anything in it.

By using Deal Estate, you consent to the practices described in this policy.

We collect the following categories of information:

Account information

• If you play as a Guest: an anonymous account is created on our servers, identified by a random ID rather than any personal details. Your profile, gameplay and social data (below) are stored against it the same way as for signed-in players.
• If you sign in with Apple or Google: the email address provided by that identity provider (which may be a private relay address from Apple) and, where provided, your name

Profile data

• An auto-generated, immutable username
• Your chosen display name
• An optional avatar image URL
• An optional country code

Social data

• Your friends list and pending friend requests
• Chat messages you send during online matches, which are visible to the other players in that match
• Players you have blocked, and reports you submit about other players. If you report a chat message, a copy of that message is kept with the report so we can review it.

Gameplay data

• Match history
• Ranked rating, calculated using the Glicko-2 system
• Win/loss record and lifetime stats

Technical & diagnostic information

• Crash reports and error diagnostics, captured automatically when the app encounters a problem
• Product usage events (for example, starting a match), captured automatically to help us understand how the game is used

• Directly from you: when you set up your profile, choose a display name, send a friend request, chat in a match, block or report a player, or play a match.
• Via Apple or Google sign-in: if you choose to sign in, we receive your email address and, where you allow it, your name from the identity provider. If you sign in with Apple and choose "Hide My Email", we only receive Apple's private relay address.
• Automatically: our crash-reporting and analytics providers collect technical information (such as device type and app events) and diagnostic information (such as crash reports) needed to keep the game running and to fix bugs.

We use your information to:

• Provide and maintain Deal Estate, including offline and online matches
• Match you with opponents and maintain the ranked leaderboard
• Support friends and social features within the app
• Diagnose and fix bugs, crashes, and performance issues
• Send service-related communications, such as turn-change or match-activity push notifications, where enabled

We do not sell your personal information. We do not use your data for advertising, and we do not share it with data brokers.

We rely on the following third-party services to operate Deal Estate:

• Supabase: provides authentication, database, and realtime infrastructure for the app. Your account and gameplay data is stored behind row-level security policies that ensure you can only access your own data. See Supabase's Privacy Policy.
• OneSignal: delivers push notifications (turn-change and match alerts) by wrapping Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM). Push notifications are optional and can be disabled at any time in your device settings. See OneSignal's Privacy Policy.
• PostHog: captures explicit, named product-usage events (for example, starting or finishing a match) so we can understand how the game is used. We also record basic app lifecycle events (such as the app being opened or closed). We do not use session replay or automatically capture your taps or screens. See PostHog's Privacy Policy.
• Sentry: captures crash reports and error diagnostics from the app, and separately from our backend server functions, so we can identify and fix bugs. See Sentry's Privacy Policy.
• Apple Sign-In & Google Sign-In: optional identity providers. When you choose to sign in with Apple or Google, the provider sends us your email address and, where you allow it, your name. Their handling of the sign-in is governed by their own privacy policies.

Each third-party service is governed by its own privacy policy. We encourage you to review them.

The Deal Estate app itself does not use browser cookies. It stores a small amount of data locally on your device, such as the session tokens that keep you signed in (including as a Guest).

This page is hosted on zondostudios.com, which loads the Inter typeface from Google Fonts. See our site-wide Privacy Policy for details on cookies and third parties used by the zondostudios.com website itself; this section covers only the Deal Estate app.

We take reasonable steps to protect your information from unauthorised access, modification, or disclosure:

• All connections between the app and our backend are encrypted via HTTPS/TLS
• Row-level security policies ensure each account can only access its own data
• Authentication tokens are stored using your device's secure, encrypted storage

No system is perfectly secure. If we ever become aware of a data breach affecting your information, we will notify you and any required authorities in accordance with applicable law.

Your data is retained for as long as your account is active. You can delete your account and all associated data at any time from the Settings screen in the app, which permanently removes your profile, social, and gameplay data from our database.

Some data held by third-party providers (for example, crash and analytics logs at Sentry or PostHog) is governed by those providers' own retention schedules and may persist for a limited period after your account is deleted.

You have the right to:

• Access the personal information we hold about you
• Correct any inaccurate or out-of-date information
• Delete your account and all associated data at any time from the Settings screen in the app
• Withdraw consent for push notifications at any time from your device settings

If you live in a country with additional statutory privacy rights (for example the EU/UK's GDPR, California's CCPA, or Australia's Privacy Act), those rights also apply and are not waived by this policy. Contact us using the details below to exercise any of them.

Deal Estate is a general-audience game and is not directed at or marketed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Deal Estate is operated from Australia, but our service providers may process and store data in other countries, including the United States. Where we transfer personal information outside your country of residence, we rely on our providers' standard contractual safeguards and certifications to protect your data to a comparable standard.

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we will give reasonable notice in-app where practicable. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

help@zondostudios.com