Privacy Policy

Last updated: May 22, 2026

This Privacy Policy describes how Gabriel Gendelev ("Developer", "we", "us", or "our") collects, uses, and protects your information when you use PaperFleets ("the App"). We are committed to your privacy and handle data minimally and transparently.

1. Information We Collect

A. Anonymous / Guest Users

If you play without signing in, we collect no personal information. Your score is stored exclusively on your device using the app's local storage and is removed when you uninstall the App.

B. Registered Users (Apple Sign In / Google Sign In)

When you create an account, we collect:

Account identifier – a unique user ID assigned by Apple or Google. We do not receive your name or email unless you explicitly choose to share it during sign-in.
Display name – optional, set by you for leaderboard display.

C. Gameplay Data (All Users on the Global Leaderboard)

For each completed match submitted to the leaderboard we record:

Difficulty level (Easy, Medium, Hard)
Match outcome (win, loss, or abandoned)
Points awarded
Match duration (seconds)
Turn count and shot / hit statistics for both player and AI
App version at the time of the match
A game-state hash used for integrity validation

D. Anti-Cheat Data

Our server-side validation may log anomalous match patterns (e.g., implausible accuracy or duration). These logs are used solely to enforce fair play and are not shared externally.

2. How We Use Your Information

Purpose	Legal Basis (GDPR)
Displaying your rank and score on the leaderboard	Contractual necessity / Legitimate interest
Validating match results to prevent cheating	Legitimate interest
Aggregated analytics (total matches played, average accuracy)	Legitimate interest
Responding to support requests	Contractual necessity

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

3. Third-Party Services

The App relies on the following sub-processors:

Supabase, Inc. – database hosting, authentication, and backend infrastructure. Data is stored on servers in the United States and governed by Supabase's Privacy Policy.
Apple Inc. – Sign in with Apple, governed by Apple's Privacy Policy.
Google LLC – Sign in with Google, governed by Google's Privacy Policy.

4. Data Retention

Anonymous local scores – retained on device until the App is uninstalled.
Account and match data – retained for the lifetime of your account. You may request deletion at any time (see Section 7).
Anti-cheat logs – retained for up to 12 months.

5. Children's Privacy (COPPA / GDPR-K)

PaperFleets does not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If you are a parent or guardian and believe your child has provided personal information without consent, please contact us at univgabi@gmail.com and we will delete the data promptly.

Anonymous (guest) play is available for all ages and requires no personal information.

6. Security

We implement industry-standard security measures including TLS encryption in transit, Row-Level Security (RLS) policies in our database, and server-side validation of all match data. No method of electronic transmission is 100% secure; we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access – request a copy of the personal data we hold about you.
Rectification – correct inaccurate data.
Erasure – request deletion of your account and all associated data.
Portability – receive your data in a machine-readable format.
Objection / Restriction – object to or restrict certain processing.

To exercise any of these rights, email univgabi@gmail.com. We will respond within 30 days. Account deletion can also be initiated directly from the Profile screen within the App.

8. California Privacy Rights (CCPA)

California residents may request: (a) categories and specific pieces of personal information collected; (b) deletion of personal information; (c) opt-out of the "sale" of personal information (we do not sell personal information). Submit requests to univgabi@gmail.com.

9. International Data Transfers

Your information may be transferred to and processed in the United States (where Supabase infrastructure is hosted). Such transfers are subject to appropriate safeguards in accordance with GDPR Chapter V.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via an in-app notice or by updating the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes acceptance.

11. Contact

For privacy questions or data requests, contact us at:
Gabriel Gendelev
univgabi@gmail.com