Ghost PepperPrivacy Policy
Ghost Pepper is a party card game made by Ahmed Itani ("we", "us"). This policy explains what information the game collects, why, and the choices you have. If anything here is unclear, write to ahmed3itani@gmail.com.
The short version
- We never sell your data.
- We keep only what the game needs to work: your player account, your progress and what you send to other players.
- Ads are optional. You only see one when you choose to watch it for bonus coins. Ads are shown by Google AdMob, which collects some device data (see below).
- You can delete your account and its data at any time, right inside the game.
What we collect
| Data | Why |
|---|---|
| Player ID and friend code (created automatically when you first play) | To keep your progress and let friends find you |
| Display name and the snack avatar you pick | Shown to other players at the table, in friends, clans and the leaderboard |
| Email address and password, only if you choose to save your account | So you can sign in on another phone. Passwords are handled by Google Firebase Authentication and we never see them |
| Game progress: coins, items, level, rank, stats, missions, achievements, match history | To run the game, the shop, rewards and leaderboards |
| Friends, blocked players, clan membership | Social features you choose to use |
| Chat and stickers you send | Table chat is passed to the players at your table and not stored. Clan chat keeps the last 50 messages per clan so members can catch up |
| Reports you send or that are made about you | To keep the game safe and act on abuse |
| Birth year you enter on first launch | Stays on your phone. It decides whether online play is available. It is never sent to us |
We do not collect your contacts, photos or payment details. The game has no in-app purchases: coins are earned by playing (or by choosing to watch an ad) and have no real-world value.
Optional ads (Google AdMob)
Some buttons say "Watch ad". If you tap one, Google AdMob shows a short video ad and we give you bonus coins. Nothing else in the game shows ads. To pick and measure ads and prevent fraud, Google AdMob may collect your device's advertising ID, IP address (used for approximate location), device and app information, and how you interact with the ad. Google handles this data under its own policy: How Google uses information from sites or apps that use its services.
- In the EEA, the UK and other regions that require it, Google's consent form asks you first. You can change your choice any time in Settings, Legal and support, Ad privacy choices.
- You can reset or delete your advertising ID, or opt out of personalized ads, in your phone's settings (Android: Settings, Privacy, Ads).
- Ads are limited to content suitable for teens. Players under 16 are flagged to Google as under the age of consent, so they don't get personalized ads where the law requires it.
- Players who tell us on first launch that they are under 13 never see ads.
Who processes it
Your data is stored with Google Firebase (Authentication and Cloud Firestore) and the game server runs on Google Cloud Run in the United States. Google acts as our service provider and handles the data only to run these services. When you choose to watch an ad, Google AdMob receives the device data described above. We don't share your data with anyone else, except if the law requires it.
How long we keep it
- Account and game data: until you delete your account.
- Clan chat: the latest 50 messages per clan. Your messages are removed when you delete your account.
- Reports about abuse: up to 12 months, to deal with repeat offenders.
- Server logs: up to 30 days.
- Guest accounts that are never used again: may be removed after 24 months of no play.
Deleting your account
In the game, open Settings, scroll to Legal and support and tap Delete account. This removes your profile, coins, items, stats, friends, clan membership and your clan messages straight away and signs you out. You can also ask us on the web at ghost-pepper.web.app/delete-account. Web requests are completed within 30 days.
Security
All connections between the game and our servers are encrypted (HTTPS and secure WebSockets). Access to stored data is limited to the game server.
Children
Ghost Pepper is made for players 13 and older. Online play, chat, clans and ads are not available to players who tell us on first launch that they are younger; they can still play against bots, which sends no personal data to us. We don't knowingly collect personal information from children under 13. If you think a child has given us information, contact us and we will delete it.
Your rights
Depending on where you live (for example under the GDPR in Europe, UK GDPR, Canada's PIPEDA or California's CCPA), you can ask to access, correct, export or delete your data, and you can object to how we use it. Email us and we'll answer within 30 days. You can also complain to your local data protection authority.
Changes
If we change this policy we'll update the date above, and for important changes we'll tell you in the game.
Contact
Ahmed Itani, Ghost Pepper
ahmed3itani@gmail.com