TicTacToe

Welcome to TicTacToe. This Privacy Policy explains how Hai Phan ("we", "our", or "us") collects, uses, and protects your personal information when you use the TicTacToe iOS application. By using the app you agree to the practices described here.

1. Information We Collect

Account

• Email address and password (when you sign up with email)
• Full name and Apple-issued user identifier (when you use Sign in with Apple)

Device

• A randomly generated unique identifier (UUID) stored locally on your device to identify you within active game sessions

2. Information We Do NOT Collect

• We do not collect location data
• We do not collect device advertising identifiers (IDFA, IDFV)
• We do not collect health, financial, or sensitive personal data
• We do not use analytics or crash reporting SDKs
• Game session data (board state, moves, win/loss results) is stored temporarily in Firebase during an active game and is permanently deleted when the game ends or a player leaves

3. How We Use Your Information

• To create and maintain your account
• To identify you within real-time game sessions
• To sync game state between two players in real time

We do not use your information for advertising, marketing, or profiling.

4. Data Storage & Security

Account data is stored on Google Firebase infrastructure (Firebase Authentication, Realtime Database) hosted in secure Google data centres. We use industry-standard encryption in transit (HTTPS/TLS) and at rest.

Your UUID is stored locally on your device using iOS UserDefaults and is never transmitted beyond the scope of an active game session.

5. Third-Party Services

We use the following third-party services. Each has its own privacy policy:

• Firebase (Google LLC) — Authentication, Realtime Database  Privacy Policy
• Sign in with Apple (Apple Inc.) — Federated authentication  Privacy Policy

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may disclose data if required by law or to protect the rights and safety of our users.

7. Data Retention & Account Deletion

Your account data is retained for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us at the email below. We will process your request within 30 days.

Game session data is deleted automatically and immediately when a game session ends.

8. Children's Privacy

TicTacToe is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (see Section 7)
• Object to or restrict certain processing activities

To exercise any of these rights, contact us at the email address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact:
Hai Phan
haiphan5289@gmail.com