Privacy
Privacy Policy
12MaR · com.game.beads_game · Last updated 26 July 2026
یہ پالیسی صرف انگریزی میں ہے۔ اس کا ترجمہ جان بوجھ کر نہیں کیا گیا — پرائیویسی پالیسی ایک وعدہ ہے، اور غلط ترجمہ کیے گئے وعدے سے بہتر ہے کہ وہ اصل زبان میں ہی پڑھا جائے۔ کوئی سوال ہو تو نیچے دیے گئے پتے پر لکھیں۔
This policy explains exactly what 12MaR collects, why, and what it does not keep. It is written to match what the app actually does — not a generic template.
The short version
CAMERA AND MICROPHONE ARE OFF BY DEFAULT
Voice and video calls during a match are optional and start switched off. When you do turn them on, the audio and video travel between the two players' phones — directly when the phones can reach each other, and otherwise forwarded by a relay that cannot read them. We never record them and never store them. Chat messages are deleted when the match ends.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Email address | To create and sign you into your account | Until you delete your account |
| Display name | Shown to opponents and on the leaderboard | Until you delete your account |
| Profile photo | Supplied by Google if you sign in with Google; otherwise you pick a preset avatar | Until you delete your account |
| Account ID | Links your matches and ranking to you | Until you delete your account |
| Country | Shown as a flag next to your name. Worked out from your IP address using the third-party lookup service api.country.is, which returns only a two-letter country code. We never use GPS and we do not store your IP address — only the country code it resolves to. If that lookup fails, your device's language setting is used instead, and only when no country has been saved yet | Until you delete your account |
| Ranking points, matches played / won / lost | The leaderboard and your profile | Until you delete your account |
| Match results (players, score, date, winner) | Your match history | 45 days, and the board itself for 30 — both are deleted automatically. A result flagged for review during our anti-cheat checks is kept for 2 years as the evidence of a pattern |
| Notification token | The address of one app install on one phone, so a challenge or a tournament round can reach you. Stored separately from your profile and readable by nobody — not even by the device that sent it | Until you sign out or delete the app |
| Coin gifts you send or receive | The record of coins moving between two accounts, kept as the audit trail for a balance somebody paid for | 2 years |
| Your notifications inbox | So an invite that arrived while you were offline is still there when you open the app | 2 days |
| Whether you are online right now | Shown to other players in the lobby. Removed by our servers the moment your app disconnects — it is never a history, only a present state | Not kept |
| Watching a match: which side you are sitting on and the emoji you send | The live audience on a match you are spectating | Not kept — it disappears when you close the app, and the whole record is deleted when the match ends |
| Tournament entry (which brackets you joined, your score in them, your place) | Running the tournament and showing the standings | Until the tournament is deleted |
| Reports you make about another player | Acting on abuse, kept with the match they came from | 2 years |
| Crash reports and device model / OS version | To find and fix crashes (Firebase Crashlytics) | 90 days |
| Basic usage events | To understand which screens are used (Firebase Analytics) | 14 months |
What we do not collect
- No call recordings. Voice and video are peer-to-peer and are never recorded or stored.
- No chat history. Messages exist only during the match and are deleted when it ends.
- No photos or files from your device. The camera is used only for a live call and nothing is saved.
- No contacts, no SMS, no GPS location. No advertising identifier is used today. If the watch-an-ad option is switched on, the ad provider will use one, and this policy will say so before it does.
- No payment information reaches us. The app is free to play. It has a Get Coins screen offering coin packs and a watch-an-ad option; neither is switched on yet. When they are, the payment is handled entirely by Google Play and by the ad provider — we are told that a purchase succeeded, never your card details.
Permissions the app asks for
| Permission | Used for |
|---|---|
| Camera | Optional video call during a match. Off by default; you turn it on yourself. |
| Microphone | Optional voice call during a match. Off by default; you turn it on yourself. |
| Internet / Network state | Online matches and sign-in. |
| Bluetooth (connect) | Only so call audio can route to a connected headset. No scanning, no pairing, no device list. |
You can refuse camera and microphone and still play every part of the game. You can revoke them at any time in Android Settings → Apps → 12MaR → Permissions.
Who we share data with
We do not sell your data and we do not share it with advertisers. Data is processed by:
- Google Firebase (Authentication, Firestore, Realtime Database, Cloud Functions, Crashlytics, Analytics, Cloud Messaging) — our hosting and account provider. Game data is stored in Google's Mumbai, India region; the presence and live-move service runs in Singapore.
- Cloudflare — two jobs, both about live audio and video. When two players' phones cannot reach each other directly (roughly one call in five) Cloudflare forwards the call between them without being able to read it. And when a commentator speaks over a match, Cloudflare fans that one voice out to every spectator — on that path the audio is decoded by their server, which is the only way one phone can reach a whole audience. Nothing on either path is recorded or stored.
- api.country.is — when the app starts it makes one request to this service, which sees your IP address and returns a two-letter country code for your flag. No account information, no name and no device identifier is sent with that request, and we do not store the IP address.
- Other players see your display name, photo or avatar, country flag, player number, ranking and match results. That is the point of a multiplayer game. They do not see your email address.
Children
12MaR is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it.
Your rights
You can, at any time:
- See your data — your profile and match history are visible in the app.
- Correct it — edit your display name and avatar in your profile.
- Delete everything, from inside the app — open Settings → Delete my account. This removes your account and your profile immediately; match records that name you are removed within 30 days. Deletion is permanent and there is no recovery.
- Or by email — if you can no longer sign in, write to the address below and we will delete your account and all associated data within 30 days.
If you are in the EU or UK, the legal basis for processing your account data is performance of a contract (providing the game); for crash and usage data it is our legitimate interest in keeping the app working.
Security
All connections use encryption in transit. A voice or video call between two players is encrypted end to end — including when it has to be forwarded by a relay, which cannot read it. Commentary is the exception: to reach every spectator at once, a commentator's voice is decoded and re-sent by Cloudflare's server, so it is encrypted in transit rather than end to end. It is never recorded. Database access is restricted by server-side rules so that only you can edit your own profile, and only the two players in a match can read that match's chat and call signalling.
Changes to this policy
If we change this policy we will update the date at the top and, for any significant change, notify you in the app before it takes effect.
Contact
Questions, or to request deletion of your data:
wanharimpex@gmail.com
12MaR. This policy applies to the Android application com.game.beads_game.