The short version. Red 10 collects only what it needs to run. It never sells your data, never uses it for advertising, and carries no advertising identifier. You can play against the AI without an account at all.
What the app collects
Account information — only if you sign in
- Sign in with Apple: your name as you give it to Apple, and an email address — which may be a private relay address if you use Hide My Email.
- User ID: a Firebase-generated identifier tied to your account.
- Username: a display name you choose. It is visible to other players and is how friends find you.
Signing in is optional. Solo games against the AI need no account, and no account data is collected when you play them.
Gameplay data — only if you sign in
- Aggregate statistics: games played, wins, finishing positions, achievements, skill tier, and your ranked rating.
- Your most recent 10 game records — mode, room code where applicable, and the outcome.
- Private room membership and session scores while you play with friends.
- Friend connections: who you've added, and pending requests. A friendship is visible to both people in it.
Diagnostics and usage
To find crashes and understand which parts of the game people actually play, the app reports:
- Crash reports — the technical details of a crash: device model, iOS version, and where in the code it happened.
- Coarse usage events — that a game started or finished, which mode it was, how many players, whether matchmaking found a match, and tutorial progress.
These reports are tied to a random per-install identifier, not to your account: they carry no names, usernames, room codes, user IDs, or card data, and they are never used for advertising or shared with data brokers. The app deliberately uses the build of Google Analytics that has no advertising identifier (IDFA) support at all, and nothing here is used to track you across other companies' apps or websites.
Purchases
Tips and cosmetic unlocks are handled entirely by Apple's App Store. The app never sees your payment details — it only records which items you own so it can unlock them.
What the app does not collect
- Location data.
- Contacts, photos, microphone, or camera content.
- Advertising identifiers (IDFA).
- Browsing history or cross-app tracking signals.
- Anything from solo games when you aren't signed in, beyond the crash and usage reports above.
How your data is used
Everything collected is used to run the app:
- Authenticating you so your account works across devices.
- Syncing your stats and recent games between your own devices.
- Letting you join private rooms, add friends, and see scoreboards and leaderboards.
- Fixing crashes and deciding what to build next.
It is not used for advertising, marketing, profiling, or sold or shared with third parties.
Third-party services
Red 10 uses Google Firebase, operated by Google LLC, for four things:
- Firebase Authentication — handles Sign in with Apple.
- Cloud Firestore — stores your profile, statistics, friends, and private room data.
- Firebase Crashlytics — crash reports.
- Google Analytics for Firebase — the coarse usage events described above, in the build without advertising-identifier support.
Firebase processes this data on Google's infrastructure under their privacy terms. No other third-party SDKs, ad networks, or data brokers receive your information.
Data retention and deletion
Account and gameplay data is kept for as long as your account exists. You can delete it yourself from inside the app at Profile → Account → Delete account, which removes your account and its records. You can also email me from the address linked to your account and it will be deleted within 30 days.
Children's privacy
Red 10 is rated 4+ and contains no objectionable content, but it is not directed at children under 13, and does not knowingly collect personal information from them. If you believe a child has provided personal information, email me and it will be deleted.
Security
Credentials are handled by Apple and Firebase Authentication, which use industry-standard encryption and secure token exchange. Data is transmitted over HTTPS and protected by Firebase security rules that limit what each account can read and write.
Your rights
- Sign out at any time from inside the app.
- Request a copy of your stored data.
- Delete your account and its data, in the app or by email.
Email me for any of these.
Changes to this policy
If this policy changes, the new version is posted at this address with a new effective date.