Privacy Policy

1. Who we are

Rami is a mobile card game (Tunisian Rummy), distributed on Google Play and on the App Store. This policy covers the mobile app (Android and iOS) and its associated game service, reachable via the ramitn.com domain. For any question about your data, contact us at privacy@ramitn.com.

2. Data we collect

When you play, we process only the data needed to run the game:

• An account identifier and a display name you choose (guest accounts are created automatically).
• A password, stored only as a cryptographic hash (scrypt) — never in plain text.
• If you sign in with Google: your Google email address, a Google account identifier (used to recognise you when you sign in again), and whether that email is verified.
• If you use Sign in with Apple: an Apple account identifier and, if you choose to share it, your email address — which may be a private relay address provided by Apple rather than your personal one.
• If you sign in with Google Play Games: a Play Games player identifier only — that service gives us no email address.
• Your cumulative score and game data (hands, plays, round results).
• An authentication token (JWT) kept locally in your browser/device storage to keep you signed in.

The game can be used with a guest account, which requires no email address: guest accounts have none of the third-party sign-in data above. If you choose to sign in with a third-party service, we receive and store only the identifiers described above (we do not perform a full OAuth login and keep no access token, profile picture or contact list). The app is free and supported by advertising (see the “Advertising” section below); we use no third-party analytics on your use of the game. Our third-party partners are Google (Google Sign-In and Google Play Games), Apple (Sign in with Apple) and Google AdMob (advertising).

3. Advertising

The app is free and funded by ads served by Google AdMob. To display these ads, Google may collect and process an advertising identifier (the Android advertising ID, or the IDFA on iOS), your IP address, device information and your interactions with the ads.

If you are in the European Economic Area, the United Kingdom or Switzerland, a consent screen appears on first launch where you can accept or refuse personalized ads. Without your consent, only non-personalized (contextual) ads are shown. You can change this choice at any time. On iOS the system additionally asks for your permission to track your activity (App Tracking Transparency): if you refuse, no advertising identifier is used and you see non-personalized ads only. This advertising data is processed by Google as a controller or processor, under its own privacy policies; we do not receive it ourselves.

4. Legal basis

We process your data on the following legal bases (GDPR Art. 6):

• Performance of a contract: creating your account, running games, keeping scores, and reconnecting you.
• Consent: personalized advertising and third-party sign-in (Google, Apple, Google Play Games).
• Legitimate interest: service security, fraud and abuse prevention.

5. Why we use it

This data is used solely to create your account, run games (including online multiplayer), keep scores, reconnect you after a drop, and fund the service through advertising. We do not sell it or share it for commercial purposes other than the ad serving described above.

6. Storage and retention

Data is hosted on infrastructure located in the European Union (Hetzner). Your account data is kept for as long as your account exists; data from finished games is purged after a retention period. You can request deletion of your account at any time (see below).

7. International transfers

Using Google’s services (Google AdMob, Google Sign-In and Google Play Games) and Apple’s (Sign in with Apple) may involve processing some data outside the European Union, notably in the United States. Such transfers are covered by those providers’ standard contractual clauses and safeguards.

8. Children

The service is intended for a general audience and is not directed at children. Ads are configured as non-child-directed, with a “general” content rating. If you believe a child has provided us with data, contact us so we can delete it.

9. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time (including for personalized ads, via the consent screen). You can delete your account directly from within the app, or use our deletion request form; deletion erases your account and any linked third-party identity (Google, Apple or Google Play Games — email address and identifier). You also have the right to lodge a complaint with the data-protection supervisory authority of your country.

10. Contact

For any question about this policy or your data, contact us at: