Privacy Policy for Trumple Studios

Last updated: 10 April 2026

This policy covers all mobile applications published by Trumple Studios, including Trumple and Ricochet.

1. Information We Collect

All Games

Player Profile: We store your chosen display name and avatar selection on our servers.

Device Information: We collect an anonymous device identifier solely for app functionality purposes. We do not use this identifier for advertising or tracking across other apps.

Local Preferences: We use on-device storage (UserDefaults) to save your app preferences such as sound and volume settings.

In-App Purchases: Our games use Apple’s StoreKit 2 for in-app purchases. Purchase receipts are cryptographically verified on our server to confirm entitlements. We store your purchase status on our servers. We do not receive or store your payment details — all payment processing is handled by Apple.

Trumple

Authentication: Trumple requires Apple Game Center sign-in to play. We receive your Game Center player identifier, display name, and a cryptographic signature from Apple to verify your identity. We do not collect your Apple ID, email address, or password.

Game Statistics: We track gameplay statistics such as games played, games won, tricks won, bid accuracy, win streaks, and scores. These stats are used to report achievements and leaderboard scores to Apple Game Center.

Voice Chat: When you use voice chat in online games, your microphone audio is transmitted in real time to other players in your lobby via LiveKit (a third-party audio server). Voice audio is streamed live and is not recorded or stored by us or by LiveKit. Microphone access requires your explicit permission and can be revoked at any time in iOS Settings.

Ricochet

Authentication: Ricochet supports Sign in with Apple and Sign in with Google. When you sign in, we receive a unique user identifier and, if you choose to share it, your name and email address. We use this information solely to create and maintain your game account. We do not access your Apple ID password or Google account password.

Game Data: Ricochet stores match history, player ratings, character loadouts, and progression data in Cloud Firestore (Google Cloud).

Push Notifications: Ricochet uses Firebase Cloud Messaging (FCM) to deliver match invitations and event notifications. You can disable push notifications at any time in iOS Settings.

Diagnostic and Crash Data: We use Firebase Crashlytics (Google) to collect automatic crash reports and non-fatal error diagnostics to improve app stability. This includes stack traces, device model, iOS version, and runtime state at the time of the crash, along with your anonymous user identifier so we can correlate crashes across sessions. No personally identifiable information such as your email address, display name, or location is included in crash reports. Data is retained by Google for up to 90 days and is not used for advertising or tracking across apps.

2. How We Use Your Information

• To authenticate you and maintain your game account
• To enable real-time multiplayer gameplay
• To transmit voice chat audio between players in your lobby (Trumple)
• To deliver push notifications for match invitations and events (Ricochet)
• To diagnose crashes and improve app stability (Ricochet)
• To track your game statistics and progress
• To report achievements and leaderboard scores to Apple Game Center
• To verify and restore your in-app purchases across devices
• To restore your profile when you return to the app

3. Data Storage and Security

Trumple: Your data is stored on Supabase (hosted on AWS). Game state and player data are protected by row-level security policies that prevent players from accessing other players’ private information (such as card hands). Spectators can watch games but cannot see any player’s hand.

Ricochet: Your data is stored on Firebase (Google Cloud). Firestore security rules restrict each player to their own data.

All communication between our apps and our servers is encrypted via HTTPS.

4. Third-Party Services

• Apple Game Center — Authentication (Trumple), achievements, and leaderboards (subject to Apple’s Privacy Policy)
• Apple Sign-In — Authentication for Ricochet (subject to Apple’s Privacy Policy)
• Google Sign-In — Authentication for Ricochet (subject to Google’s Privacy Policy)
• Supabase — Database and real-time multiplayer infrastructure for Trumple (hosted on AWS)
• Firebase — Authentication, Cloud Firestore database, Cloud Functions, Cloud Messaging (push notifications), and Crashlytics (crash reporting) for Ricochet (subject to Google’s Privacy Policy)
• LiveKit — Voice chat audio streaming for Trumple (audio is transmitted live, never recorded or stored)

No advertising or cross-app tracking SDKs are used in any of our games.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties. Your gameplay statistics are reported to Apple Game Center for achievements and leaderboards. Voice audio (Trumple) is transmitted directly between players and is not stored.

6. Data Retention

Your player profile and statistics are retained as long as your account is active. Game and lobby data older than 30 days is automatically deleted. You may request deletion of your account and associated data by contacting us at the link below.

7. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your data under the following legal bases:

• Legitimate interest — Providing core gameplay functionality, maintaining your player profile, tracking game statistics, verifying in-app purchases, and ensuring fair play.
• Consent — Voice chat microphone access (Trumple). Push notifications (Ricochet). You can withdraw consent at any time in iOS Settings.
• Contract performance — Fulfilling Trumple+ subscription, Ricochet Premium purchase, and other in-app purchases.

8. Your Rights (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Request deletion of your account and all associated data.
• Data portability — Request your data in a structured, machine-readable format.
• Restriction — Request that we limit processing of your data in certain circumstances.
• Objection — Object to processing based on legitimate interest.

To exercise any of these rights, please contact us using the form on our Contact & Support page. We will respond within 30 days.

9. Children’s Privacy

Our games do not knowingly collect personal information from children under 13. Trumple uses Game Center authentication, which is managed by Apple and subject to parental controls. Ricochet uses Sign in with Apple or Sign in with Google, both of which are subject to parental controls.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by the “Last updated” date above.

11. Contact Us

If you have questions about this privacy policy or wish to request data deletion, please use the form on our Contact & Support page.