Privacy policy

This policy explains what the Duel of Wits app and the duelofwits.app website collect, why, and what you can do about it. It covers the Android and iOS apps and this website.

Duel of Wits is made by Luís Miguel Moura de Sousa, Portugal, who is the data controller for the data described here. For anything about your data, write to support@duelofwits.app.

• Player identifier. The first time the app connects, our server creates a random player ID and gives your device a secret token, kept in your device's secure storage. Your stats, records and display name belong to this ID. We don't use hardware identifiers for it.
• Display name. The name you type to show other players.
• Gameplay data. Your solo results and stats, daily puzzle attempts, times and ranks, duels and their moves and results, head-to-head records, room and queue activity, and your settings.
• Google or Apple account. If you sign in, we keep the account's identifier from Google or Apple to link it to your player. We don't use your email address to identify you.
• Blocks and reports. The players you block and the reports you file.
• Advertising ID and ad data. See Ads below.
• Usage analytics, error reports and session recordings. See Analytics below.
• Purchases. Remove ads is bought through the App Store or Google Play. We receive confirmation of the purchase, never your payment details.
• Website. Cloudflare, which hosts this site, processes your IP address and request details to serve it and keep it secure. The deletion page sends a sign-in token from Google or Apple to our server only to find your player.

The app shows ads through Google AdMob. AdMob uses your device's advertising ID, your IP address and device and app information to show and measure ads and to prevent fraud. In the European Economic Area, the UK and Switzerland, Google's consent form asks before ads use your data, and you can change your choice later in Settings. On iOS, the app asks for permission before your advertising identifier can be used for tracking, and without it you still see ads that aren't personalized. Players who buy Remove ads no longer see interstitial ads. Google's use of this data is described in How Google uses information from sites or apps that use its services.

We use PostHog, hosted in the EU, to learn how the app is used and to find bugs. It receives the events the app sends (such as a game starting or finishing), linked to your player ID, with the app version and platform, plus crash and error reports. A small share of sessions is recorded as a screen recording to understand problems, with text fields such as your display name masked. In the European Economic Area and the UK, analytics stays off unless you turn it on when the app first asks. Elsewhere it's on, and you can turn it off at any time in Settings. Turning it off also discards anything not yet sent.

Other players see your display name, your overall online record, your head-to-head record with them, and your progress during a duel with them. They never see your player ID, your account or your other data.

• To run the game you ask for: solo games, the daily puzzle, rooms, duels, records and syncing across devices (performance of our agreement with you).
• To keep players safe: the name filter, blocking, reports and their review (our legitimate interest in a safe service).
• To show ads that pay for the free app, and analytics to improve it, on your consent where the law requires it, and otherwise our legitimate interest, which you can object to in Settings.
• To meet legal obligations, such as tax records for purchases kept by the stores.

We don't sell your data.

• Convex runs our server and database.
• Google provides AdMob, the consent form, Sign in with Google and Google Play.
• Apple provides Sign in with Apple and the App Store.
• PostHog (EU Cloud) provides analytics, error reports and session recordings.
• Cloudflare hosts this website.

Some of these providers process data outside your country, including in the United States. Where the law requires it, transfers are covered by safeguards such as the European Commission's standard contractual clauses.

We keep your data while your player exists. When you delete your data, we delete it from our server and ask PostHog to delete your analytics, which PostHog completes shortly after. Head-to-head records stay for your opponents, with your side shown as "Deleted player" and nothing that leads back to you. If you never sign in and uninstall the app on Android, the device loses its token and nobody can reach that player any more.

In the app, open Settings and tap Delete my data. This works for every player, signed in or not. If you signed in with Google or Apple, you can also ask from the web on duelofwits.app/delete by signing in with the same account. If you never signed in, delete from the app, because nothing ties that player to anything you could prove on the web.

Deleting removes your player's sessions, linked accounts, settings, solo results, daily puzzle attempts, boards, queue entries, room seats, blocks, the reports you filed, and your analytics data, and signs out every other device using that player.

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent at any time without affecting what happened before. Write to support@duelofwits.app. You can also complain to your local data protection authority.

Duel of Wits is made for a general audience and isn't directed at children. We don't knowingly collect data from children under 13, or under the age of digital consent where you live. If you think a child has given us data, write to us and we'll delete it.

We'll post any change here with a new date, and tell you in the app if the change matters to how your data is used.