This Privacy Policy explains how we collect, use, disclose, and protect your information when you download and use CardHub. The App is a casual card game (including poker and other card gameplay) available on the Google Play Store, offering both a "free, no-bet mode" and an "optional betting mode"; it is distributed globally, including the United States, the European Economic Area (EEA)/United Kingdom, and Southeast Asia.
This service is not directed to users in mainland China. Because Google Play is not available in mainland China, the App cannot be downloaded or updated from within mainland China.
Account login: We offer three login methods. The data collected for each is:
Guest login: We collect only a de-identified device identifier (a one-way, irreversible hash of the device code) used for anti-cheat and fraud prevention. Guest login is not available on emulator or virtual-device environments.
Email registration: Your email address (used as the game account), an in-app password (independent of your email password and changeable at any time), and an in-app username.
Google login: With your authorization, we obtain only your Google account email and display name (used as your in-app username, which you may change in the App). We do not access any other Google profile data.
Purchase Information: When you make an in-app purchase (for example, buying virtual "Coins"), our payment processor provides us with transaction records such as the item purchased, amount, date, and transaction identifier. We do not store full payment card numbers on our systems.
Support Communications: Information you provide when you contact snfsxxx@gmail.com for support.
2.2 Information Collected Automatically
Device & Log Data: Device model, operating system version, language, time zone, IP address, crash/error logs, and in-game behavior (such as matches, results, and betting activity). We also generate a de-identified device identifier (a one-way, irreversible hash) used for anti-cheat and fraud prevention.
Advertising Identifier: The Android Advertising ID, used for advertising.
SDK / Local Identifiers: Identifiers stored locally by the third-party SDKs listed in Section 5.
2.3 Permissions We Use
Camera (QR code scanning): The App does not access the camera at launch. The camera is activated only when you actively tap "Scan QR Code to Join Room." The QR code is recognized locally on your device using an on-device decoding library; the image is not uploaded, no cloud or AI recognition is performed, and we do not access your photo gallery or scan it in the background.
We do not require microphone, contacts, precise location (GPS), SMS, or call permissions.
3. How We Use Information
We use the above information to:
Provide, operate, and improve the App (matchmaking, leaderboards, anti-cheat, and both play modes);
Process and fulfill in-app purchases (buying virtual Coins);
Operate the virtual-points (non-cash) game economy, including optional betting and match service-fee consumption;
Award in-game credits earned by watching advertisements;
Display personalized or non-personalized advertising;
Respond to support requests;
Comply with legal obligations and enforce the Terms of Service.
4. Legal Bases (EEA / UK Users)
Where the GDPR or UK GDPR applies, we process information on the following bases:
Contract: to provide the App and fulfill purchases;
Legitimate Interests: to secure the App, prevent fraud/cheating, and analyze usage;
Consent: for advertising personalization and non-essential optional cookies/SDKs;
Legal Obligation: to retain financial records where required.
5. Advertising
The App displays advertisements through the third-party advertising partner Appodeal. Appodeal and its partners may use your Advertising ID and device data to serve ads. You can reset or opt out of the Advertising ID via your device settings (Opt out of Ads Personalization). For EEA / UK users, consent is obtained via a CMP (Consent Management Platform) before personalized advertising.
The App integrates the following third-party SDKs:
We require all partners to process data under contract and to apply appropriate safeguards.
7. International Data Transfers
Because the App operates globally, your data may be transferred to and stored in countries/regions outside your country of residence (such as the United States and Singapore). For transfers from the EEA / UK, we rely on compliance mechanisms such as Standard Contractual Clauses (SCCs) or adequacy decisions.
8. Data Retention
Account and profile data are retained for the duration of your account;
Purchase records are retained for the period required by financial/legal obligations;
Log data are retained for a limited period.
Upon account deletion, we delete your account data but retain de-identified, irreversible device/email hashed identifiers solely for anti-fraud and anti-cheating purposes. These identifiers are not linked to your personal information and are used only to prevent duplicate or fraudulent accounts.
You may request deletion of your data under Section 11.
9. Children's Privacy
The App is intended for users who are at least 18 years old (or the age of majority in their jurisdiction). The App is a simulated gambling game intended solely for adult users; we do not knowingly collect information from children. If we learn that we have inadvertently collected a child's data, we will delete it.
10. Game Nature and Virtual Currency
CardHub is a virtual / simulated gambling game. It uses only in-game points ("Coins"). These points cannot be exchanged for cash, real-world goods, or any other item of value, and there is no mechanism to withdraw, redeem, or convert them into money. In-app purchases only provide additional virtual points, which likewise have no cash value and cannot be withdrawn, redeemed, or transferred.
11. Your Rights
Depending on your region, you may have rights such as access, rectification, erasure, restriction of processing, data portability, objection to processing, withdrawal of consent, and opting out of the "sale/share" of personal information (where applicable, e.g., CCPA/CPRA). Please exercise these rights via snfsxxx@gmail.com. EEA users have the right to lodge a complaint with a supervisory authority.
12. Security
We implement technical and organizational measures such as encrypted transmission and access controls to protect information. No method of transmission or storage is 100% secure.
13. Changes to This Policy
We will post changes on this page and update the effective date. Material changes will be notified via in-app notice or similar means.