Privacy Policy
Draft for legal review. This text is not final.
Who we are
Ninja Fight ("we") runs the Ninja Fight app and this website. This policy explains what we collect when you play and what we do with it.
What we collect
Account: a guest ID for guest play; or your email and a hashed password; or, if you sign in with Apple, Google or Facebook, the account ID and email that provider shares with us. Apple may give us a private relay email instead of your real one.
Profile: your display name, ninja ID, chosen ninja, language and theme.
Gameplay: rooms you create or join, matches, answers, scores, rankings, friends and emotes, so the server can run fair games.
Device and connection: app version, device type and the technical data needed to keep a live connection to the game.
Purchases: what you bought and its status, confirmed with Apple or Google. We never see your card details.
Support: what you send us when you contact support.
What we don’t collect
We don’t collect your precise location. We don’t upload your contacts: invitations go through your phone’s own share sheet.
How we use it
To run the game and your account, match you with other players, keep play fair, process purchases, provide support, and improve Ninja Fight with aggregated statistics.
Who we share it with
Other players see your display name, ninja, scores and rankings.
Service providers that host and run the game for us, under contract.
Apple and Google, to process purchases and, if you choose, sign-in. Facebook, only if you choose to sign in with it.
If we enable analytics (Firebase), push notifications or ads (AdMob), the relevant data goes to Google for that purpose. We will update this policy and ask for consent where required before enabling them.
We don’t sell your personal data.
Children
Ninja Fight is a family game. We collect only what the game needs, and parents can ask us to delete a child’s account at any time.
How long we keep it
We keep your data while your account exists. When you delete your account, we delete your personal data within 30 days, except records we must keep by law (for example, purchase records).
Your rights
You can ask to see, correct, export or delete your data. Use the account deletion page or write to us. We answer within 30 days.
Security
Connections are encrypted, passwords are hashed, and access to data is limited to the people who need it.
Changes
If we change this policy in a meaningful way, we will tell you in the app before the change applies.
Contact
Privacy questions: our support email (added before launch).