Privacy policy
Updated:
What we collect, why, who sees it, and how to delete your data — in plain language wherever plain language will do.
What we collect
- Account
- Email, username and a password hash. The password itself is never stored — not even we can recover it.
- Guest sign-in
- You can play without an email or password: a temporary account named Guest_xxxxxx is created. You can turn it into a regular account later by adding an email.
- Profile
- An avatar (an image you pick from your gallery) and a country. Both are optional: without them a default picture is shown and no country is listed.
- Game data
- Games played, moves, rating and statistics.
- Feedback
- The text of your message and any screenshots you attach.
- Diagnostics
- App version, platform and OS version, interface language — used to investigate your report.
The app asks for gallery access only at the moment you pick an avatar or attach a screenshot to a report. It never requests the camera, microphone, contacts or location.
There are no advertising or analytics trackers inside the app itself — the visit counter runs on the website only, see the section below. Your data is not sold and is not shared with third parties for advertising.
Analytics on the website
The mancala9.com website runs Google Analytics. It shows how many people opened a page, where they came from and where they left, which is how we tell which rules and guides actually help.
The counter receives anonymous data only: the page address, the referring source, browser language, device type and an approximate city-level location derived from the IP address. Your username, email, games and rating are never sent there.
What others can see
Your username, avatar, country, rating, game statistics and sign-up date are visible to other players — in the leaderboard and inside a game.
If you do not want your data to be visible to other players, remove your avatar and country in the profile — or delete your account: once deleted, the name disappears from both the leaderboard and the profile. How to delete your account
Your email, password, support messages and the screenshots attached to them are never visible to other players. Feedback screenshots are served only to authorised requests — a plain link will not open them.
How we use it
- Running your account and signing you in.
- Matching you with an opponent by rating and running the game.
- The leaderboard and the player profile inside the game.
- Answering your reports and investigating bugs.
- Abuse protection: rate limiting and blocking accounts that break the rules.
Where the data is stored
Data is kept in a database on Railway hosting and travels only over encrypted connections (HTTPS and WSS). Avatar and screenshot files are stored on disk on the same server.
A session on your device lasts up to 30 days; signing out or deleting your account ends it immediately.
Deleting your account and data
You can delete your account inside the app: Profile → “Edit” → the “Account” section → “Delete account”. Step-by-step instructions
Deletion erases your email, username, password, country and uploaded avatar file; it removes every session and every report you sent, including screenshots. Your name disappears from the leaderboard and the profile stops opening.
If you no longer have access to the app, write to [email protected] from the address the account is registered to and we will delete it on request.
Children
The game is not directed at children under 13 and does not collect age data. If you believe an account was created by a child under that age, write to us and we will delete it.
Changes to this policy
The date of the last change is shown at the top of this page. Material changes — new kinds of collected data, for example — are described here before they take effect.
Contact us
For any question about your data: [email protected]. We answer in English and Russian.