Thuru 304
Privacy Policy
Thuru 304 is a virtual card-game application. This page describes what data the app collects, how it is used, and the choices you have. We collect only the minimum needed to run the game and to keep matches fair.
Data we collect
- Account data: display name, account identifier (guest UUID, or email / Google / Facebook login), optional avatar image, language preference, account creation date.
- Gameplay data: match results, ratings, coins, XP, profile level, room join/leave events, bidding and trick-play history for match replay when enabled, friend requests, tournament entries.
- Technical data: device type, app version, connection-quality signals for performance and reconnect, a per-device guest identifier used for fair-play cooldown.
What we do not collect
- No real-money payment data — Thuru 304 is virtual play only.
- No precise or approximate location tracking.
- No microphone, camera, contacts, calendar, SMS, or health data.
- No browsing history outside the app.
- No list of other installed apps.
How we use data
- To run the game and keep matches fair.
- To maintain account state (display name, history, friends list when added).
- To diagnose crashes and improve quality.
Sharing
We do not sell personal data. Match metadata (display name, score) is visible to other players in the same room as part of normal gameplay. Limited data is shared with the service providers listed below so they can perform their function.
Service providers we use
We use the following third-party services to operate Thuru 304:
- Supabase — our backend platform. Stores your account profile, authentication record, gameplay history, friend requests, and tournament entries. All traffic is over HTTPS.
- Google Play Billing — processes optional in-app purchases (such as the ad-removal upgrade and coin packs). We never see your payment card, billing address, or Google account email; Google handles the transaction. We receive only the product identifier and an opaque purchase token, which we store as a one-way hash.
- Google AdMob — serves the rewarded video and post-match interstitial ads. AdMob may read your device's Advertising ID (AAID) to deliver and measure ads and to prevent fraud. You can reset or opt out of personalised advertising at any time in your device's Privacy settings.
- Google User Messaging Platform (UMP) — shows the consent prompt that lets you choose between personalised and non-personalised AdMob ads, where required (for example, in the European Economic Area and the United Kingdom).
- Sentry and PostHog — optional crash-diagnostic and product-usage analytics. These are currently disabled. If enabled in a future build, both are configured with personal-information stripping (no IP, email, phone, or display name), no session replay, and respect for the browser Do-Not-Track signal.
Your rights
You may request export or deletion of your account data at any time. See the Data Deletion Instructions page for how to request deletion. Children should not use the app without parental supervision in jurisdictions that require it.
Contact
For privacy questions or data requests, email support@thuru304.com.