Privacy Policy — Tablić Online

Effective date: September 16, 2026

Srpski sažetak: Tablić Online čuva samo ono što je potrebno za igru: email i korisničko ime (nalog), avatar koji sam izabereš, istoriju partija i novčića, i push token za obaveštenja. Ako sam odgledaš reklamu za novčiće, Google AdMob pritom koristi reklamni identifikator tvog uređaja radi prikaza i merenja reklame — a to se na iPhone-u i iPad-u dešava samo ako u sistemskom pitanju dozvoliš praćenje. Podatke ne prodajemo nikome. Nalog i sve podatke možeš trajno obrisati u aplikaciji (Profil → Obriši nalog) ili mejlom na tasic.vuk007@gmail.com.

1. Who we are

Tablić Online is a multiplayer card game for iOS and Android developed by Vuk Tasić ("we", "us"). For any privacy question, contact tasic.vuk007@gmail.com.

2. Information we collect

Account data: email address and password (or an anonymous guest identifier), and the username you choose.
Profile picture: a photo you optionally select from your library as your avatar. We never access your photo library beyond the image you pick.
Gameplay data: match history, scores, in-game coin balance and coin transactions, quests, achievements, and friend connections.
Push notification token: a device token (Firebase Cloud Messaging) used solely to notify you about game events, such as when it is your turn.
Purchase data: if you buy a coin package, we receive a purchase confirmation (product bought, transaction identifier, and whether it succeeded) from Apple, Google, and our purchase provider RevenueCat. We never see or store your card number or billing details — those stay with Apple and Google.
Social sign-in data: if you sign in with Facebook, Google, or Apple, that provider confirms your identity to us and returns your email address. The Facebook SDK is embedded in the app for this purpose and, like other Meta components, may receive device-level identifiers and app events. On iOS it does so only if you allow tracking when the system asks.
Diagnostic data: crash reports and basic performance traces are sent to Sentry so we can find and fix bugs. These contain technical data (device model, OS version, error stack) and your account identifier, not the contents of your games.
Advertising identifier: if you choose to watch a rewarded ad in exchange for coins, Google AdMob accesses your device's advertising identifier (IDFA on iOS, Advertising ID on Android) and technical data such as device type, coarse region, and IP address in order to serve and measure the ad. On iOS this only happens if you allow tracking when the system asks.

We do not collect your location, contacts, or browsing data, and we use no product-analytics SDKs that profile your behaviour — the only third-party SDKs that receive data are those listed above (advertising, sign-in, purchases, push, and crash reporting). Ads appear only as rewarded ads you start yourself — there are no banners, pop-ups, or ads between hands.

3. How we use it

Most of the data above is used only to run the game: authenticating you, matching you with other players, showing profiles and leaderboards, and sending gameplay notifications. We never sell or rent your data.

Tracking for advertising. There is one exception, and we want to be explicit about it. Our advertising and sign-in partners — Google AdMob and Meta (Facebook) — may combine your device's advertising identifier and your interaction with ads in this app with data they hold from other apps and websites, in order to show and measure personalised advertising. Under Apple's definition this counts astracking, and it is declared as such on our App Store product page.

On iOS and iPadOS this never happens without your permission: the system asks you directly through Apple's App Tracking Transparency prompt, and if you decline, no tracking identifier is shared and ads become non-personalised. You can change the answer at any time in Settings → Privacy & Security → Tracking. The game itself, including rewarded ads, works exactly the same either way.

4. Where it is stored

Data is stored with our backend provider Supabase (database, authentication, and file storage). Push notifications are delivered through Google Firebase Cloud Messaging. Purchases are processed by Apple and Google and reconciled through RevenueCat. Rewarded ads are served by Google AdMob. Facebook sign-in is handled by Meta. Crash and performance diagnostics are processed by Sentry. Each of these receives only what is necessary for its part of the service. Google's use of data as an advertising partner is described at policies.google.com/technologies/partner-sites.

4a. Advertising and consent

Rewarded ads are optional: they play only when you choose to watch one to earn coins. If you are in the EU/EEA or UK, we ask for your consent through Google's consent form before any personalised ad is shown, and you can change or withdraw that choice at any time from the app's settings. Without consent you can still watch ads — they will simply be non-personalised. Our lawful basis for advertising is your consent; for everything else it is the performance of our contract with you.

5. How long we keep it

Your data is kept for as long as your account exists. When you delete your account, your profile, avatar, match history, transactions, friendships, and push tokens are permanently deleted immediately. The only exception is records of real-money purchases, which Apple, Google, and we must retain in anonymised form to meet accounting and tax obligations.

6. Your rights

You can at any time:

Delete your account and all data in-app: Profile → "Obriši nalog" (Delete account).
Request access, correction, or deletion by email: tasic.vuk007@gmail.com. We respond within 30 days.

If you are in the EU/EEA, these rights are provided under the GDPR (our lawful basis for processing is the performance of our contract with you — providing the game). You also have the right to lodge a complaint with your local supervisory authority.

7. Account deletion / Brisanje naloga

You can permanently delete your account and all associated data directly in the app:

Open Tablić Online and go to Profile (Podešavanja/Profil).
Tap "Obriši nalog" (Delete account) and confirm.

This immediately and permanently deletes your profile, username, avatar, match history, coin balance and transactions, quests, achievements, friend connections, push tokens, and your login credentials (including accounts created with Facebook, Google, or Apple sign-in). Deletion is irreversible — we keep no copy of your data afterwards.

If you can no longer access the app, email tasic.vuk007@gmail.com from any address and tell us your username or the email you signed up with — we will delete the account for you within 30 days.

Srpski: Nalog i sve podatke brišeš u aplikaciji:Podešavanja/Profil → "Obriši nalog". Brisanje je trenutno i trajno (profil, istorija mečeva, novčići, avatar — sve). Ako ne možeš da pristupiš aplikaciji, piši na tasic.vuk007@gmail.com i obrisaćemo nalog za tebe.

8. Children

Tablić Online is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

9. Changes

If we change this policy, we will update this page and the effective date above.