Privacy Policy

In short

Lioza is a free, ad-free stone-drafting game. We collect only what we need to sign you in and let you play: your email address, a username and a display name you choose, your friends list, and a record of the games you play. We do not run ads, we use no third-party analytics or tracking tools, and we do not sell your data. There is one thing we record about your activity: while the app is open, that your account is active and which part of the game you are in. Your accepted friends can see whether you are online — you can switch that off in Settings — and the detail of which part of the game you are in is visible only to the developer. It is never sold or given to anyone else, and it is explained in full below. Your email is used only to sign you in; other players never see it. This page explains the details.

What we collect, and why

We keep the data we hold deliberately small. We collect:

• Email address. Used only to identify your account and sign you in. There are three ways to sign in, and all of them involve an email: a one-time code sent to your email (a "magic code"); "Continue with Google", in which Google tells us the email on your Google account; or, on iPhone and iPad, "Sign in with Apple", in which Apple tells us the email on your Apple Account. If you use Sign in with Apple and choose "Hide My Email", Apple gives us a private forwarding address instead of your real one (it ends in privaterelay.appleid.com), and we never see your real email address at all — that is Apple's feature working as intended, and everything below applies to whichever address we were given. Your email is never shown to other players, and it is never written into the parts of our database that other players can read.
• Username. A short, unique handle you choose (3–20 characters). It lets friends find and add you, and it is the name opponents see when you play.
• Display name. A name you choose (1–30 characters), shown alongside your username to opponents and friends.
• An internal account ID. A random identifier that links your account to your profile, friends, and matches. It is not meaningful on its own.
• Game records. When a game finishes we store its result — who won, the final scores, the format and mode, and timestamps. During a live multiplayer match we store the current state of the shared board so both players see the same game. These records are tied to your account.
• Friends and friend requests. Who you are friends with, and pending requests you have sent or received, with timestamps.
• Presence while the app is open. A "last seen" timestamp and which part of the game you are currently in — for example the home screen, a solo game against a bot, a live match, the tutorial, or the Quick Match queue. This does two jobs: in online play it pairs you up and detects when an opponent has disconnected, and it tells the developer how many people are playing and what they are playing, which is what makes a bug report reproducible. We keep only the latest value, and it is overwritten every time it changes — there is no history of where you have been, and nothing is recorded once you close the app. It is deleted outright when you delete your account.

What we do not collect

We want to be clear about what is absent, because it is a deliberate choice:

• No advertising, and no advertising identifiers.
• No third-party analytics, telemetry, behavioural tracking, or crash-reporting tools of any kind — no other company's software development kits, scripts or pixels are in the app. (We do keep one first-party signal of our own, which is the presence record described above. It goes to nobody else.)
• No password (all three sign-in methods are passwordless).
• No phone number (phone sign-in is turned off), and no anonymous sign-in.
• No real name, profile photo or avatar, location, contacts, or device identifiers.

On Android, the app requests two permissions: access to the internet (to sign you in and play online) and vibration (for the optional haptic feedback you can turn off in Settings). Neither reveals anything about you.

Account and sign-in

You sign in without a password. You can request a one-time six-digit code sent to your email, use "Continue with Google", or — on iPhone and iPad — use "Sign in with Apple".

If you choose Google, Google acts only as an identity provider: during sign-in it confirms your identity and passes your account email to our backend. We do not request or store any other Google profile details, such as your name or picture. Google's handling of your information is governed by Google's own privacy policy.

Sign in with Apple works the same way, through Apple's own system sheet on your device: Apple confirms your identity and passes us an identity token containing your email. Apple offers to share your name at the first sign-in; we do not read or store it. If you choose "Hide My Email", the address we receive is a private Apple forwarding address rather than your real one, and we have no way to see behind it. Apple's handling of your information is governed by Apple's own privacy policy.

Where your data is stored, and who processes it

Lioza uses Supabase as its sole backend. Supabase provides the database, authentication, real-time multiplayer, and server functions, and acts as our data processor. Your account, profile, friends, and game records are stored in Supabase. Your email address in particular is held only within Supabase's authentication system; it is not copied into any other part of our database.

The only other companies that ever receive any of your data are Google and Apple, in each case only if you choose that sign-in method, and only during the sign-in handshake described above.

What other players can see

Lioza is a social game, so some information is shared with other players by design:

• Your username and display name are visible to opponents during a match and to your friends. Any signed-in player can also look you up by username to send a friend request, and your profile is technically readable by other signed-in players — so treat your username and display name as visible to anyone signed in to Lioza, not only your current opponents and friends.
• During a multiplayer match, the shared game board (tiles, scores, whose turn it is, and the turn clock) is visible to everyone seated in that match. This is a perfect-information board game, so the full board is meant to be mutually visible.
• A completed match's result is visible to the players who took part in it.
• Your summary record is visible to any signed-in player who looks at your profile: your username, the month you joined, your rank, how many games you have played, and how many you have won, lost and drawn. A player can reach this from a match you played together or from their friends list.
• Your detailed statistics — the breakdown by game mode, by player count, and by bot difficulty, along with your best scores — are visible only to you and to your accepted friends.
• Whether you are currently online is visible to your accepted friends, and to nobody else. You can turn this off in Settings, and when it is off your friends simply never see you as online.
• Your friends list and friend requests are visible only to you and the other person involved.

Your email address is never visible to other players.

Data stored on your device

A small amount of data is kept locally on your device and is never sent anywhere except as described above:

• Your app settings (sound, music and volume, colour-blind mode, theme, and whether you have finished the tutorial).
• Your sign-in session — a secure token that keeps you signed in across app restarts. This token is sent to our backend to authenticate your requests; it is not shared with anyone else. On Android, we turn off the system app-data backup so this token is not copied into device backups.

Third parties, ads, and tracking

Lioza contains no advertising and no third-party trackers. We do not embed any third-party tracking scripts, pixels, or software development kits, and no data about you reaches an advertising network, a data broker, or an analytics company. This is intentional, and part of how Lioza is designed: free to play, ad-free, and free of third-party tracking.

What we do keep is one first-party record, described under "Presence while the app is open" above: whether your account is active right now and which mode it is in. It exists so that one person — the developer — can see that the game is being played and can reproduce a bug you report. It is not linked to you across other apps or websites, it is not sold or shared, it has no history, and it is not used to profile or advertise to you.

The only external parties involved at all are Supabase (our backend and data processor), Google (only as a sign-in option, only if you use it), and Apple (likewise, on iPhone and iPad).

Keeping and deleting your data

We keep your account data — your profile, friends, and game records — for as long as your account exists, so your stats and match history remain available to you.

You can delete your account yourself, at any time, from inside the app: go to Settings → Account → Delete account. Deletion is immediate and permanent. If you no longer have the app installed, email us at the address below from the email you signed in with and we will delete the account for you.

When an account is deleted, we remove your profile, your friendships, and the link between your account and your past matches. A name already shown to people you have played against may remain part of their own game history.

Children

Lioza is a general-audience strategy game and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will remove it.

Changes to this policy

We may update this policy as the app evolves — for example, if a future version adds a feature that changes what data is collected. When we make a material change, we will update the effective date at the top and, where appropriate, note the change in the app. Continued use of Lioza after an update means you accept the revised policy.

How to contact us

If you have a question about this policy, or you want to access or delete your data, contact us at hi@lioza.app.