Your data in Ludo Cities

Effective 21 October 2026.

This page says what Ludo Cities collects when you play, why, who else handles it, how long we keep it, and how to have it deleted. It is written to be read. If something is unclear, write to us at [email protected].

The controller of your data is Techbeaver IT Systems LTD, 22 Adeleye Street, Lagos 100231, Nigeria. "We" below means them. Ludo Cities is not directed at children under 13 (see "Children").

The short version

You can play straight away without an email, phone number or password. The app gives you an anonymous account and a made-up display name.
You can link Sign in with Apple, Google or an email address and password to keep your progress on a new phone. We do not use your email for marketing.
Quick chat phrases and emotes are not stored. Typed chat is filtered, kept for 7 days only so we can act on reports, then deleted.
Ads come from Google AdMob. On iPhone we ask before tracking you across apps, and you can say no.
You can delete your account in the app. It removes your profile and sign-in.

What we collect

Data	Why we need it
Account id and display name	Every account has a random id from Firebase Authentication and a generated display name such as "Swift Amber Crown". Other players see the name. You can change it to one nobody else is using.
Apple or Google sign-in	If you link one, Firebase Authentication stores the provider's account link (and the email or name it shares with the app) so you can sign in again on another phone. We keep which provider you linked and when, not a copy of your email on our own records.
Email address and password	Optional. If you choose Sign in with email, Firebase Authentication (Google) stores your email address and a hashed password, to sign you in and to send password reset emails. We never see the password.
Profile choices	Your city (optional, shown on the match card), your age group from the age question the first time you open the app, and whether you allow typed chat.
Gameplay	For online matches: who played, the seats, scores, results, the dice rolls and the secret used to make them (so the fairness page can check them), the time, and for ranked duels your rating. Totals such as games and wins sit on your profile. Offline games against bots stay on your phone.
Chat, reports and blocks	See "Chat, reports and blocking" below.
Purchases	Which of our items you own (the Cities Pass, Remove ads, packs) and until when. See "Purchases".
Technical data	When the app connects, our server sees your IP address, app version, device type and language. We use them to keep the service running and to stop abuse. Server logs are kept for a short time and are not used to profile you.
Activity	When you were last seen and on how many days, so we can tell whether people come back and fix problems.
Support messages	What you type into the support form, your name if you give it, and your email so we can reply. We keep it while we help you and for a reasonable time after.

We do not collect your contacts, photos, microphone recordings or precise location. We do not sell personal data.

How we use it, and our legal basis

To run the game (accounts, matchmaking, rooms, results, ratings, purchases): this is needed to provide Ludo Cities to you.
To keep players safe and the game fair (filters, reports, blocks, fair dice, stopping cheats and abuse): our legitimate interest in a safe service.
To show ads and measure them: with your consent where the law requires it (for example the consent form in the EEA and UK, and the tracking permission on iPhone).
To answer you when you contact support: our legitimate interest, and your request.

Who else handles your data

Google Firebase (Authentication and Cloud Firestore) holds accounts and the data above, and sends password reset emails for Sign in with email.
Our hosting provider runs the server that matches players and runs the games.
Apple and Google take payment for purchases and sign you in when you choose Sign in with Apple or Google.
RevenueCat manages purchases and subscriptions for us. It receives your anonymous account id and the purchase records from the App Store or Google Play, and tells our server which items you own. It does not give us your payment details.
Google AdMob serves ads (see "Ads and tracking").

Some of these providers process data outside your country, including in the United States. Where that is needed they rely on the safeguards the law provides, such as standard contractual clauses.

Chat, reports and blocking

Quick phrases and emotes are fixed buttons. They are shown to the others at your table and not stored.
Typed chat is for players who told the app they are 16 or over and have not turned it off. It is limited to 120 characters, filtered for links, phone numbers, email addresses and bad words, and rate-limited. Players under 16 (or who have not answered the age question) get quick phrases and emotes only.
Typed messages are stored with the sender's id for 7 days so we can review a report, then they are deleted automatically.
When you report a player we keep the report, who made it, who it is about, the match, and that player's recent typed chat from that match. We keep reports for as long as needed to protect players, normally no more than 12 months, and longer only if there is a continuing safety concern.
When you block someone, their chat and emotes never reach you and you are not matched together again. The block list is stored on your account so it follows you.
Voice chat is not part of the app yet. If we add it, it will be off by default, never recorded, and we will update this page first.

Ads and tracking

The free app shows ads from Google AdMob between matches, and offers optional rewarded ads. Ads are never shown during a match, and not to players who have the Cities Pass or have bought Remove ads. AdMob may use your device's advertising identifier and similar data to choose and measure ads.

On iPhone the app asks permission to track you across other companies' apps (App Tracking Transparency), once, after your first finished match. If you say no, ads are not personalised with your advertising identifier.
In the EEA, UK and some other places Google's consent form asks for your choices first. You can change them later in Settings under "Privacy choices".
On Android you can reset or delete your advertising ID in the system settings.

Purchases

Purchases go through the App Store or Google Play. We never see your card or payment details. Subscriptions renew until you cancel them in your Apple or Google account settings. RevenueCat tells our server what you own so online play can check it. A refund from Apple or Google removes the item.

How long we keep data

Your account and profile: until you delete your account.
Finished online matches: kept so the fairness page works and so other players' history stays correct. When you delete your account your name and id are removed from them.
Typed chat: 7 days. Reports: see above. Support messages: while we help you, then for a reasonable time.
Server logs: a short time, for security and debugging.

Your choices and rights

You can see most of your data in the app (profile, rating, totals). You can change your name, city, age group and chat setting in Settings. You can delete your account in the app (Settings, then Delete account). If you no longer have the app, follow these steps.

Depending on where you live, including under the GDPR and UK GDPR and Nigeria's Data Protection Act 2023, you may have the right to access your data, correct it, delete it, receive a copy, object to some uses, withdraw consent at any time, and complain to your data protection authority. To use any of these, write to us at [email protected]. We will reply within a month.

Children

Ludo Cities is not directed at children under 13 and we do not knowingly collect personal data from them. The app asks you for an age group the first time you open it; players under 16 get quick chat only. If you are a parent or guardian and think a child has given us personal data, tell us and we will delete it. If you are under 13, please do not use online play or create an account. Where the law sets a higher age of digital consent in your country, ask a parent to agree before you play online.

Security

Data is sent over encrypted connections. Access to our database is limited to our server. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

Changes

If we change this policy in a way that matters, we will say so in the app before it applies. The date at the top shows the current version.

Contact

Techbeaver IT Systems LTD, 22 Adeleye Street, Lagos 100231, Nigeria. Email [email protected].