Privacy Policy

Last updated: 25 September 2026

Previously updated: 4 July 2025

Key changes in this version: the Policy now covers the Backgammon City mobile apps; the list of third-party services, legal bases and retention periods has been updated; a section on US state privacy rights has been added.

1. Who we are and what this Policy covers

Backgammon City is operated by Online Radio Box sp. z o.o., Jana Dantyszka str. 18, 02-054 Warsaw, Poland (“we”, “us”). We are the controller of your personal data.

This Policy applies to:

• the website https://backgammoncity.com (the “Website”);
• the Backgammon City mobile apps for iOS and Android (the “Apps”).

Together, these are the “Services”. Where something applies only to the Website or only to the Apps, we say so.

2. What is personal data

Personal data is any information relating to an identified or identifiable person. Examples include a name, email address, location data and online identifiers such as an IP address, device identifier or advertising identifier.

3. Data we collect

3.1 Using the Services without an account

You can play on the Website and in the Apps without registering. The Apps do not offer registration at all. The Apps do not ask for your name, email address, phone number, contacts, photos or precise location.

3.2 Website accounts

Signing in on the Website is provided by Casual Games Collection (https://casualgamescollection.com), a shared account service for several of our games, also operated by us. You can create an account with an email address and password, or sign in with Google, Facebook, Telegram or Yahoo.

Registration, login credentials, profile details (such as nickname and photo) and subscriptions are described in the Casual Games Collection Privacy Policy: https://casualgamescollection.com/privacy/.

When you sign in on the Website, it receives your nickname, email address, account and sign-in provider identifiers and subscription status, and links them to your game data. The Apps do not use these accounts.

3.3 Game data

We process information about your games, such as:

• games played, results, difficulty level and time spent;
• board position, game format and moves during bot and online games.

On the Website, this data is linked to your account if you are signed in.

In the Apps, progress, settings and saved games are stored locally on your device. A technical session token for online play is kept in the device’s secure storage (Keychain on iOS, Keystore on Android). When you play against the bot, the App sends the current board position, game format, difficulty and elapsed time to our servers. When you play with a friend, the App uses a separate guest session. Both connections are TLS-encrypted (HTTPS and WSS).

These guest sessions are pseudonymous: they are identified by a session token stored on your device and are not linked to a Casual Games Collection account. Our servers also receive your IP address and technical connection data.

3.4 Support requests

When you contact us, we process your name, email address and the content of your message.

3.5 Data collected automatically

Website. Through cookies and similar technologies (see Section 5), we collect:

• IP address;
• browser and device information;
• pages visited;
• login times.

Apps. The Apps and the services built into them collect:

• IP address and approximate location derived from it;
• device and app information (device model, OS version, app version, language);
• Firebase installation and Crashlytics installation identifiers;
• automatically collected usage events (for example, first open and session start);
• crash reports (stack trace, device state at the time of the crash);
• if permitted, the device’s advertising identifier (IDFA on iOS, Advertising ID on Android) and ad interactions.

See Section 6 for details.

4. Why we process data and on what legal basis

Where we rely on legitimate interest, you can object at any time (see Section 12).

Providing personal data is not a legal or contractual requirement. However, bot and online games cannot work without the game data described in Section 3.3. If you decline advertising consent, you will see non-personalized or limited ads.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. Personalized advertising involves profiling by our advertising partners, with your consent where required.

5. Cookies (Website)

• Necessary cookies. These store the authorization token, your language and your cookie choices. The Website cannot work properly without them.
• Analytics cookies. Google Analytics uses cookies with pseudonymous identifiers to record visits, pages viewed, session duration and approximate location. We do not use Google Analytics to identify visitors by name or email.
• Marketing cookies. Google AdSense and Google DoubleClick use these to show and measure ads, including personalized ads.

Cookie consent is managed by the InMobi Choice consent management platform. You can change your choices at any time:

• using the “Cookies settings” button on this page or the cookie settings link in the Website footer (both shown to visitors in Europe), which reopen the consent settings;
• using the “Your Privacy Choices” link (shown to US visitors, see Section 13);
• in your browser settings, where you can also block or delete cookies.

6. Advertising, analytics and crash reporting (Apps)

Google AdMob shows ads in the Apps. To serve and measure ads and to prevent fraud, it may process:

• your advertising identifier;
• your IP address and approximate location;
• device information;
• ad interactions.

Google Firebase Analytics collects automatically collected usage events, a Firebase installation identifier, device and app information and approximate location, so that we can understand how the Apps are used. Where you have allowed it, it may also receive your advertising identifier. We use Firebase Analytics reports and event-level data associated with pseudonymous app-instance identifiers. We do not use Analytics to identify users by name or email.

Google Firebase Crashlytics sends us a crash report when the App crashes. The report contains the stack trace, device state and a Crashlytics installation identifier, and helps us fix errors.

Your choices in the Apps:

• EEA, UK and Switzerland: before personalized ads are shown, the App asks for your consent through Google’s consent management platform.
• US states with privacy laws: the App shows a privacy choices prompt that allows you to opt out of the sale or sharing of your personal information for interest-based advertising (see Section 13).
• Where these options apply to you, you can change your choice at any time in the App under Settings → “Privacy choices”.
• iOS: the advertising identifier is used only if you allow tracking in the App Tracking Transparency prompt. You can change this in iOS Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your Advertising ID, or opt out of personalized ads, in your device settings (Settings → Google → Ads, or Settings → Privacy → Ads).

If you decline personalized ads, you may still see non-personalized ads. These rely on limited data, such as general location and the content being viewed.

7. Third-party services

Service providers process data on our behalf and on our instructions. Advertising partners and sign-in providers process data as independent controllers under their own privacy policies.

8. Sharing of data

We do not sell or rent your personal data for money. We share it only with:

• service providers that help us run the Services (hosting, analytics, crash reporting, consent management), under data processing agreements;
• advertising partners, as described in Sections 5, 6 and 13;
• public authorities, where required by law.

9. International transfers

Some of our providers may process data outside the EEA, UK and Switzerland. Such transfers rely on:

• from the EEA: the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, where the recipient is certified under it, or the Standard Contractual Clauses approved by the European Commission;
• from the UK: the UK Extension to the EU-U.S. Data Privacy Framework, or the UK International Data Transfer Addendum to the Standard Contractual Clauses;
• from Switzerland: the Swiss-U.S. Data Privacy Framework, or the Standard Contractual Clauses adapted for Swiss law.

You can request a copy of the relevant safeguards by contacting us.

10. Retention

11. Deleting your data

• Website: use “Delete my Data” (available when you are signed in) or contact us. Your game data will be deleted within 30 days.
• Game data in the Apps: uninstalling the App deletes game data stored on your device. If device backup is turned on (Android Backup or iCloud), your saved games may be kept in that backup and restored when you reinstall the App. You can delete them in your device’s backup settings.
• Server, analytics and crash data from the Apps: this data is pseudonymous. It is linked to session or installation identifiers stored on your device, not to your name or an account. The Apps do not display these identifiers, so we usually cannot find your data from an email request alone (Art. 11 GDPR). This data is deleted automatically after the periods in Section 10. If you give us information that allows us to identify your data, we will delete it on request.
• Advertising data: this is controlled by Google. You can reset or delete your advertising identifier in your device settings and manage your Google ad data at https://myadcenter.google.com.

12. Your rights

Under the GDPR and similar laws, you have the right to:

• access your personal data and receive a copy of it;
• receive the data you provided to us, which we process by automated means based on your consent or a contract, in a structured, machine-readable format, or have it sent to another controller (data portability);
• have inaccurate data corrected;
• have your data erased;
• restrict processing;
• object to processing based on legitimate interest, and at any time to processing for direct marketing, including profiling;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email support@backgammoncity.com. We will respond within one month. For complex or numerous requests, this period may be extended by two further months, and we will tell you if so.

You may also lodge a complaint with a supervisory authority in the country where you live or work, or with our lead authority in Poland: the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, https://uodo.gov.pl.

13. US State Privacy Rights (including California)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you additional rights regarding your personal information. Residents of other US states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut and Texas) have similar rights under their state laws. The exact rights and deadlines vary by state.

Personal information we collected, disclosed, sold or shared in the past 12 months:

We use this information for the purposes described in Section 4: providing the Services and online games, security, crash reporting, analytics and advertising.

Sale or sharing of personal information. We do not sell your personal information for money. However, our use of identifiers and activity data with Google AdSense and Google DoubleClick (Website) and Google AdMob (Apps) for interest-based advertising may be considered “sale” or “sharing” for cross-context behavioral advertising under the CCPA/CPRA. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Sensitive personal information. The Services do not collect sensitive personal information. Account credentials are handled by Casual Games Collection under its own Privacy Policy.

You have the right to:

• know what personal information we collect, use and disclose about you;
• delete your personal information;
• correct inaccurate personal information;
• opt out of the sale or sharing of your personal information and of targeted advertising;
• not be discriminated against for exercising any of these rights.

How to opt out of sale or sharing:

• Website: use the “Your Privacy Choices” link in the Website footer or in this section of the Website (shown to US visitors). You will still see non-personalized, contextual ads.
• Apps: use Settings → “Privacy choices” in the App; deny tracking in the App Tracking Transparency prompt (iOS); or delete or reset your Advertising ID, or opt out of personalized ads, in your device settings (Android).

Your Privacy Choices

How to exercise your rights. Email support@backgammoncity.com, or use “Delete my Data” if you have a Website account. We will verify your request and respond within 45 days (extendable by an additional 45 days where necessary). An authorized agent may submit a request on your behalf with your written permission. These requests are free of charge.

Appeals. If we decline your request, you can appeal by replying to our decision or by emailing support@backgammoncity.com with the subject “Privacy appeal”. We will respond within the period required by your state’s law. If your appeal is denied, you may contact your state Attorney General.

14. Children

The Services, including the Apps, are designed for a general audience and are not directed to children. Registration on the Website is not permitted for children under 13, or under 16 in the EEA. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Security

Data on our servers is stored in Falkenstein, Germany (Hetzner). We use appropriate technical and organisational safeguards, including TLS-encrypted connections (HTTPS and WSS), access controls, confidentiality obligations, monitoring and backups.

No system is 100% secure, but we work to protect your data.

If a personal data breach occurs, we will notify the competent supervisory authority within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to your rights and freedoms. If the breach is likely to result in a high risk to you, we will also inform you without undue delay: by email where we have your contact details, or by a public notice on the Website.

16. Changes to this Policy

We may update this Policy. The date at the top shows the latest revision, and we will describe significant changes when they happen.

17. Contact

Online Radio Box sp. z o.o.

Jana Dantyszka str. 18, 02-054 Warsaw, Poland

Phone: +48 574 739 039

General: support@onlineradiobox.com

Privacy: support@backgammoncity.com