Privacy Policy
Effective: 23 September 2026
This policy explains how Goti Time handles information when you use the Goti Time mobile game and website. “Goti Time”, “we”, “us” and “our” refer to the publisher of the Goti Time service. Questions can be sent to privacy@gotitime.com.
Information we handle
Stored on your device
- Sound preferences, unfinished local matches and local match results.
Stored for online features
- A random account identifier created by our authentication provider.
- Your chosen player name, illustrated or optional custom-photo avatar, age, gender selection, country and level progress.
- An email address only if you choose email recovery.
- Online match records, moves, wins, losses, draws, invitations, recent activity and online-presence time.
- A random app-installation identifier, stored as a one-way hash, to keep one player connected to an installation and reduce duplicate accounts. When notifications are enabled, we also store a device notification token and mobile platform. These values do not identify your contacts or other phone contents.
- Technical authentication and security records generated by our service provider, which may include IP address, device/browser information and timestamps.
- Limited diagnostic reports when the app fails, including app version, platform, error type, a short error message and truncated technical stack. These reports are designed to exclude names, emails, photographs and game contents.
- Anonymous app interactions and gameplay measurements, such as tutorial completion, board level, game mode, match result, invitation outcome, predefined reaction category, sharing action and session activity. Analytics events exclude player names, email addresses, photographs, free-form text and match or invitation identifiers.
- Firebase may process a resettable app-instance identifier, device and app information, and approximate country-level location to provide analytics, crash reporting, notification and configuration services. Goti Time removes the Android advertising-ID permission and does not enable advertising personalization in the current release.
Why we use information
- To create and recover your player, run matches, find opponents and deliver invitations.
- To show match history, statistics, player names, avatars and recent availability.
- To let you take or select, crop, compress, replace and remove an optional profile photograph. Camera and photo-library access starts only after you choose the related button; Goti Time does not continuously access either source.
- To protect accounts, enforce game rules, diagnose failures and prevent misuse.
- To send requested account verification or recovery messages.
- To notify you about friend invitations and invitation responses when Goti Time is in the background or closed. You can disable notifications in your device settings.
Who can see or process it
Only signed-in Goti Time players may retrieve a custom profile photograph. Other players may see your chosen name, avatar, country, match relationship and whether you were recently online. They do not receive your age, gender or email address. Authorized Goti Time administrators may access account and gameplay records to operate, support and protect the service. They may remove an unsuitable custom photograph, suspend access for safety or misuse, permanently delete an account when requested or needed for test-data cleanup, legal, safety or service-integrity reasons, and record the moderation action in a restricted audit log. Permanent deletion removes the login, profile and custom photo; an opponent's historical match result may retain an anonymized former-player entry. We use Supabase to provide authentication, database, realtime and related infrastructure. We use Firebase services operated by Google: Cloud Messaging for optional push notifications, Analytics for anonymous use and retention measurement, Crashlytics for stability reports, and Remote Config for non-secret feature settings. Hosting and email-delivery providers process limited information as needed to provide their services. We do not sell personal information and the current app contains no advertising.
Retention
Your profile and online match history remain while your account is active so that statistics, history and rematches work. Short-lived queue, presence and invitation information expires or is updated as the service operates. Device notification tokens are replaced when refreshed and stale tokens are removed. Local information remains until you remove the app data or delete it through the app. Backup copies held by service providers may take a limited period to cycle out.
Your choices and rights
You can edit your name and avatar, replace or remove a custom photograph, choose whether to link an email, mute sounds and delete your player from inside the app. Account deletion removes the account and associated profile, invitations and online data according to the service’s deletion process. You can also follow the instructions on our account deletion page. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, or lodge a complaint with a regulator.
Children and families
Goti Time is a family-friendly strategy game. It does not knowingly ask children to submit an email without parent or guardian involvement, and it does not provide chat. If you believe a child supplied personal information without appropriate permission, contact us so we can investigate and delete it. Parents can request deletion through the app or the account deletion page.
Security and international processing
We use access controls, encrypted network connections and server-side game validation. No system can guarantee absolute security. Service providers may process information in countries other than yours under their own legal and security obligations.
Changes
We may update this policy as the game changes. We will update the effective date and provide additional notice when required.