Privacy policy
Updated 8 October 2026
This policy explains how the Tarneb Android app and website handle information. Local play is available without an account; online and social features use a guest identity or a registered account.
Identity and account information
We process guest names and identifiers, usernames, display names, email addresses and authentication information to provide and secure accounts and gameplay. Google sign-in provides the account identity and email. Country and optional city are submitted during native signup; website signup also permits an optional birth year. Account profile and gameplay information can be visible to other players according to the feature and privacy settings.
Gameplay and activity
We store online results, progress, statistics, achievements, rewards and virtual-item transactions. After a guest or account session is established, the app reports screen paths and active foreground time for first-party activity analysis. Completed local matches linked to a registered account upload their replay and results when connected; unlinked local matches stay on the device unless you explicitly attach them to an account. Local preferences and saves also use device storage.
Friends, messages and reports
We process friendships, blocks, invitations, direct messages, table and game chat, custom names, feedback and reports to operate social features and review abuse. Messages and names are delivered to the intended participants or visible audience; direct messages are stored on the server. Waiting-table chat has a limited retained history. Reports and contact messages are available to administrators for review.
Notifications and installation identifiers
The Android app uses Google Firebase Cloud Messaging and Firebase installation identifiers for push delivery, along with a registration token and app version. Firebase initialization and identifier collection can occur even if notification display permission is denied. Device registrations are linked to the current account or guest. Push payloads use generic notification data rather than private message text; local inactivity reminders run on the device.
Service providers and security
Hosting, email delivery and notification providers process information needed to operate the service; Firebase processes installation and delivery information. Connections to the production service use HTTPS. Website visits and support submissions can include network metadata such as IP information, user agent, language and country. Operational logs and configured error monitoring support security and troubleshooting. Provider records and retention are separate from the application database.
Retention and account deletion
The application removes activity visits after the existing 90-day retention window, clears stored raw visitor IP addresses after 30 days without activity, and removes device registrations after 90 days without refresh. Other account data remains until account deletion or applicable service cleanup. Confirmed deletion removes account-linked profile, progress, social, activity and mobile push records. Opponents' results may remain with your account link and cached name removed. Financial transactions and audit records retain a scrubbed reference identity; deletion does not immediately erase backups, historical logs, delivered email, provider records or copies held by others. No fixed financial or backup retention period is stated here.
Your choices and requests
You can use local play without registering, choose whether to send messages or use voice, manage notification permissions, and change available profile visibility settings. Registered users can start deletion in account settings or on the linked deletion page and confirm it using a code sent to their stored email; finish any active match first. Guests do not have an account-deletion flow. Contact us for guest-data or other privacy requests, and identify the relevant guest or account without sending credentials.
Contact and requests
Tarneb operates this game and its website. For privacy questions, deletion assistance or reports of harmful content or users, contact us with the relevant player, message or match details. Do not send passwords or payment-card details.
Contact form Delete account