App Privacy Policy

This notice explains how we process data when you use the Strike Poker app. The game uses a technical identity: you do not need a real name, email address or password to play.

For browsing our web pages, see the Website Privacy Policy. This notice covers the app and its connected game services.

1. Who processes your data

The data controller is iRoma S.r.l., based at Via Pietro Rosa, 48b, 00122 Roma (RM), Italia, VAT no. 10954111000. For questions or requests about personal data, email info@iroma.net. The controller’s certified email address (PEC): iroma@pec.it.

2. What data we use and why

Guest progress is saved on the device. Registering links an email and password to the same player identity. Registered accounts can synchronise tutorial completion, level progress, records, avatar achievements, selected preferences and up to 10 recent completed solo games. In-progress games, local mission state and notification settings remain on the device. Wallet balances and owned items are recovered from the server, never from a client backup. Email and backups are private and kept until account deletion.

Verification, password reset and email-change messages are sent through Firebase. Registration records include the accepted terms/privacy versions and dates. A private stable account identifier is reserved for future purchase reconciliation; no in-app purchases are enabled by registration.

We use Firebase Crashlytics to collect crashes and unexpected technical errors, app version, device model, operating system and a technical installation identifier. We do not attach email addresses, nicknames, account IDs, passwords, tokens or request content to reports. We use these diagnostics to identify and fix stability issues. Server logs include technical identifiers and chip movements to detect errors and anomalies. We do not integrate Google Analytics. App versions with advertising enabled integrate Google AdMob, as described below. We do not request access to contacts, location, the camera or microphone. We do not sell personal data.

Friends and game invitations

Friends uses the account identity, player name and current avatar. Players searching your name can see your name and avatar and send you a request. Your friends list, reserved codes and notification addresses are not public. To check access to friendly games, the device synchronises tutorial completion, the number of games and the unlocked level.

Pending requests expire after 30 days; closed relationships are removed after about 30 days. Codes expire after 10 minutes and expired rooms are removed after about a day. Friendships remain until removal or account deletion. Friendly games do not change Elo.

Friends notifications are optional and separate from the daily challenge. Each installation address and language are stored privately for requests and invitations, and removed when disabled in the app or when the account is deleted. Addresses not refreshed for 90 days are not used. Friendships belong to the same identity preserved when a guest registers.

To protect players, we retain blocks until they are removed or either account is deleted. Reports are private: we record the reason, involved identifiers, reported name and review status for approximately 90 days, with periodic deletion, and delete them when either involved account is deleted. Details are accessible only to authorized operators. Name filtering and reports help address abuse and offensive content.

Google AdMob advertising

Advertising may be disabled or enabled through remote configuration. When disabled, we do not start the advertising service or make new ad requests. Activation remains subject to the required consent choices.

Full-screen ads may appear before new Classic games, Endless Climbs, Daily Challenges and multiplayer searches. There are no rewarded ads, banners on the table or ads in Free Practice. Game and advertising-opportunity counters are stored locally to control frequency and avoid repeating ads after an unsuccessful search.

Google’s advertising SDK may process IP addresses (including to estimate geographical area), device or app identifiers, information about ads viewed and interactions, diagnostics and performance. These data are used to deliver and measure advertising, provide security and operate the advertising service. We do not send the player’s nickname, hands or scores to AdMob.

Where required, Google’s consent message lets you choose advertising-related processing before ad requests are made. You can also manage your choices under Settings → Privacy and data → Ad preferences, when available. Processing that requires consent is based on that consent (Article 6(1)(a) GDPR); withdrawal does not affect earlier processing. This integration does not request access to the IDFA advertising identifier through the iOS tracking permission. An unavailable ad does not prevent you from starting a game.

Google and its providers may process data outside the European Economic Area under their own terms and applicable safeguards. For details about data, retention and choices, see Google’s advertising information and Google’s Privacy Policy. Test builds use test ads and do not generate revenue.

3. Legal bases and choices

We process the data needed to provide the game and support to perform the service you request (Article 6(1)(b) GDPR). Security, abuse prevention and integrity checks rely on our legitimate interest in maintaining a reliable service (Article 6(1)(f)). Optional notifications rely on consent (Article 6(1)(a)); mandatory obligations rely on the law (Article 6(1)(c)).

You can turn off solo leaderboards in Settings. Multiplayer games between people enter the leaderboard for their level. Data essential to online features are not optional if you choose to use those features; you can still use modes available offline.

4. What other players see

Leaderboards show nicknames, scores or ratings, positions and, for Multiplayer, match statistics. During a duel, your opponent sees your nickname and how your results develop. Choose a nickname that contains no personal information. There is no player chat.

5. Providers and transfers

We use Google Firebase and Google Cloud for authentication, databases, online functions, request protection, notifications, remote configuration and app diagnostics. Apple provides notification delivery and App Attest/DeviceCheck verification. The game database and functions are configured in Belgium; some provider services may also process data outside the European Economic Area.

Transfers are subject to providers’ applicable safeguards, including standard contractual clauses and adequacy decisions where applicable. You can contact us for information about these safeguards. Details: Firebase Privacy and Security, Firebase Data Processing Terms and Apple Privacy.

6. Retention periods

• Profile, reserved name and leaderboards: until account deletion.
• Online game details: completed solo sessions, duels, Battles and Climb runs expire 15 days after completion. Unsubmitted solo sessions expire 15 days after they start. Unsettled multiplayer games and resumable Climb runs are not deleted by this expiry policy. Removal is automatic, normally within 24 hours after expiry, and may take additional time. Summaries, statistics, leaderboards and chip transaction records are retained separately for the purposes described in this notice.
• Deletion: a technical record of the deleted identifier, without nickname or results, remains to prevent requests made using old credentials. It is retained for this security purpose and is not shown on leaderboards.
• Support: for as long as necessary to handle the request and any related disputes or obligations.
• Provider logs and copies: follow their respective retention and deletion cycles. Firebase indicates several weeks for authentication IP addresses and up to 180 days to complete certain deletions from systems and backups.

7. Deleting data and turning off notifications

In the app, open Profile → Account → Delete account (or Settings → Privacy and data → Delete all progress for a guest) and confirm. A connection is required to delete the account and online data. Local progress, the reserved name and leaderboard entries are removed; in your opponent’s games, your identity is replaced with “Deleted player”. Remaining duel results follow the multiplayer-game retention period.

After deletion, the app initialises a new, empty identity so you can keep playing. Uninstalling the app alone does not send a deletion request to the server. If you no longer have access to your device, contact us with your nickname: we may request proportionate information to verify that the account belongs to you.

You can disable notifications in the app’s Settings or iOS Settings. Disabling them in the app unregisters you from the service; if there is no connection, this is retried. Withdrawing consent does not make earlier processing unlawful.

8. Your rights

Where applicable, you can request access, rectification, deletion, restriction and portability of your data, object to processing based on legitimate interests and withdraw consent. Email info@iroma.net. You may lodge a complaint with the Italian Data Protection Authority or the competent authority in your country.

Matchmaking and score calculation are automated and used only for gameplay; we do not make decisions with legal or similarly significant effects on individuals.

9. Minors

Strike Poker is not designed as a service specifically for children. Use by a minor is subject to the age and permission requirements in their country. A parent or guardian can contact us to report data provided without the necessary permission and request its removal.

10. Updates to this notice

This notice may be updated when the service or processing changes. The date above identifies the version; for substantial changes, we will provide an appropriate notice in the app or on the website.