Version of 17 October 2026.
One policy for the whole game: the Android app, the iPhone app and the version in the browser. First the common part, then a separate section for each version: Android (Google Play), iPhone (App Store), In the browser. The test version in the browser, which invited testers sign in to, is described separately.
In short
The Thousand (Tysiąc) app (a card game against bots and with friends) is for Android, iPhone and the browser. Playing against bots in the phone apps needs no internet: all deals are calculated by your device. Playing with friends over the internet exists only in the Android and iPhone apps (not in the browser) and sends to our server what a shared table needs: a random ID of a guest account, the nickname you choose, the moves in the game and the ready-made phrases you pick. The test version in the browser needs a sign-in with a Google account and records the screens and taps of the testers to improve the game (described below). The phone apps have no ads or purchases and ask for no password, e-mail address or phone number. The guest account is made only when you play with friends for the first time. The Android version asks only for access to the internet, which playing with friends needs.
Who is responsible for the app
The Thousand app is published by shotORno Studio. Privacy contact: privacy@shotorno.com.
What data the app collects
Playing against bots in the phone apps runs on your device and needs no internet. We process data when you play with friends, in the test version in the browser and when you report a bug; it is described below.
Playing with friends (only in the Android and iPhone apps, and only when you use it): the app then connects to our server over the internet and sends it: a random ID of a guest account and the secret key of that account, which proves that it is you (the server keeps only a hash of the key); the nickname you choose yourself, which the other players at the table see; the table code and the chosen rules; the moves in the game (bids, cards and other decisions), which the server checks and passes on to the players, each of whom sees only their own cards; the number of a ready-made phrase you pick from six (you cannot write your own words); whether the app is on the screen, in the background or disconnected, so that the other players know whether you are at the table. The server also sees the IP address of the connection and uses it only to limit abuse (counters in the server’s memory); it does not store it with the account or the game.
The game server runs on the Cloudflare platform (Workers and Durable Objects), which processes this data on our behalf. We pass it to no one else. The app does not use the advertising ID and contains no advertising libraries.
How long: the lobby of a table in which nothing happens is removed from the server after 3 days, and a game in which nobody has made a move after 30 days (together with its moves). A guest account stays until you delete it: Settings → Playing with friends → Delete the online account. Deleting removes the account, the nickname and the key from the server; the nickname may still be visible at tables that still exist until they expire. The code for moving the account to another device is valid for 10 minutes.
You send an invitation to a table (a link and a code) yourself, through the system “Share” sheet; the app has no access to your contacts or messengers. The app only draws the QR code on the screen; it does not use the camera.
What the app saves on your device
So that you can stop a game and come back to it later, and so that the app remembers your choices, it saves in the memory of your device (your phone, your iPhone or your browser):
- the game in progress: cards, bidding, scores, moves and the rules of that game;
- your last choice when starting a game: rules, number of players and bot level;
- settings: the look of the table, letters on the cards, the marriage reminder, the card-play animation and the “Less motion” mode;
- a counter of deals played (it counts only up to three, so that the hint “Touch a card, then play” shows in the first deals);
- an account for playing with friends (only in the phone app, and only after you first play with friends): a random account ID, the secret key of the account and your nickname;
- the table you are playing at with friends (only in the phone app): its code, name and rules, the counter of your moves and the moves the server has not yet confirmed;
- a damaged saved game, if one ever happens: it is set aside instead of deleted, so that the game is not lost for good.
Of this list, only what playing with friends needs goes to our server: the key of the account is shown to the server as proof that it is you, and the table code says which table you are returning to (what exactly goes to the server is described above). The saved game in progress disappears when the game ends or when you start a new one. The rest stays until you delete it. Where exactly it lies and how to delete it we write below, separately for each version.
Android (Google Play)
This applies to the app downloaded from Google Play.
What stays on your phone
The app keeps the data from the list above in its own storage on your phone. It can end up in the Android backup on your Google account (below), the key of the account for playing with friends included. Android keeps it in the app’s private folder, which other apps cannot access. You can delete everything from your phone by uninstalling the app, or in Android settings: Apps → Thousand → Storage → Clear data. The account on the server is deleted separately, in the game’s settings (Settings → Playing with friends → Delete the online account).
Android backup
If backup is turned on on your phone, Android may include this data in the backup on your Google account, so that the game can be restored on a new phone. Google makes and keeps that backup according to your settings; we have no access to it. On Android 9 and later, with a screen lock set, the backup is encrypted with your phone’s lock code. You can turn the backup off in your phone’s backup settings. The backup may also contain the key of your account for playing with friends; with it, on a new phone you are back on your account.
Google Play
You download the app from Google Play. Google processes data for this under its own privacy policy. In the Google Play Console, Google shows app developers aggregate statistics, such as the number of installs in a given country, and — if you agreed on your phone to send diagnostic data to Google — crash reports of the app (phone model, Android version, the course of the error). This data does not tell us who you are. We use it only to improve the app.
App permissions
The app asks for one permission: access to the internet, which playing with friends needs. It does not ask for access to contacts, location, camera, microphone, files or anything else on your phone. The vibration when you pick and play a card needs no separate permission.
iPhone (App Store)
This applies to the app from the App Store or, in the test version, from TestFlight.
What stays on your iPhone
The app keeps the data from the list above in its own storage on your iPhone. It can end up in the iPhone backup (below), the key of the account for playing with friends included. iOS keeps it in the app’s private area, which other apps cannot access. You can delete everything from your iPhone by deleting the app. The account on the server is deleted separately, in the game’s settings (Settings → Playing with friends → Delete the online account).
iPhone backup
If you have iCloud backup turned on, or you back up to a computer, iOS may include this data in the backup, so that the game can be restored on a new phone. The backup is made and kept by Apple, or by you on your own computer, according to your settings; we have no access to it. You can turn the backup off in your iPhone’s settings. The backup may also contain the key of your account for playing with friends; with it, on a new iPhone you are back on your account.
App Store and TestFlight
You download the app from the App Store or, in the test version, through TestFlight. Apple processes data for this under its own privacy policy. Apple shows app developers aggregate statistics, such as the number of downloads in a given country, and — if you agreed on your iPhone to share diagnostic data — crash reports of the app. In TestFlight the developer also sees the e-mail address to which the invitation was sent, and the feedback that you send yourself from TestFlight. This data tells us nothing beyond what you provide yourself. We use it only to improve the app.
App permissions
The app does not ask for access to the camera, microphone, photos, contacts, location or anything else on your iPhone. It connects to the internet to play with friends, which iOS needs no separate permission for. The vibration when you pick and play a card needs no separate permission.
In the browser
This applies to the game run in a browser, without installation.
What stays in your browser
The game saves the data from the list above in the browser’s memory (localStorage), on this device and only for the address from which the game is served. The browser keeps it separately for every site, so other sites cannot see it. You can delete everything by clearing this site’s data in your browser settings. The browser may also delete the data of a site that you have not visited for a long time; then the saved game and the settings are lost. The account and the table for playing with friends (two items of the list) do not exist in the browser: playing with friends is only in the phone apps.
Where the game is served from
The game is served by a Cloudflare server (Cloudflare Workers, static files). The page with the game has no ads. The server, like any web server, technically processes the IP address in order to send the game’s files to the browser. The fonts and the graphics engine are bundled with the page, so the game does not download them from third parties. The game needs no installation.
App permissions
The game does not ask the browser for access to the camera, microphone, location, notifications, files or anything else on your device.
Test version in the browser
The test version of the game in the browser is for invited testers, who sign in with a Google account. We process: the identifier of your Google account and the e-mail address of that account; a log of the screens you open and the taps you make (where and when, and how long things take); the bug reports you send, together with a screenshot of the game. We use this to run the test and to improve the game. The data is processed on our behalf by Cloudflare (hosting) and Resend (sending e-mails). Questions, requests to see or delete your data: privacy@shotorno.com.
The closed test of the Android app in Google Play will record screens and taps in a similar way; we will update this page before it starts.
Children
To play with friends we do not ask for a name, e-mail address, phone number or age. The exception is the test version in the browser: testers sign in to it with a Google account (see above). Other players at the table see the nickname, so it is worth choosing one that does not reveal who you are; a parent can help a child with that.
The page with this policy
This page is served by a Cloudflare server (Cloudflare Workers, static files). The page has no ads. The server, like any web server, technically processes the IP address in order to send the page to the browser.
The feedback form on this website
The website has a “Report a bug” form (in the footer of every page). When you send it, we receive the text of your message, the address and language of the page you are writing from, and your e-mail address only if you enter one. We ask for nothing else, and the form sets no cookies. The server, like any web server, technically processes your IP address in order to receive the message.
We use this only to fix the website and, if you gave an e-mail address, to reply to you. The message is stored on our Cloudflare server and deleted after 12 months at most. Questions and requests to see or delete your message: privacy@shotorno.com.
The website also remembers, in your browser (localStorage, key “jezyk”), the language you pick with the language switcher, so that it does not offer you another one. This stays on your device and is never sent to us.
Contact and your rights
If you write to us, we will use your e-mail address and the content of your message only to reply, and will not keep them longer than necessary. You can ask to see this data, to have it corrected or deleted. You can also complain to the Polish data protection authority, the Prezes Urzędu Ochrony Danych Osobowych (the President of the Personal Data Protection Office). E-mail: privacy@shotorno.com.
If you report a bug in the app, your email app sends us your message and the diagnostics shown in it (the app version, the device model and system version, the table settings and, if you report during a game, the deal). You see everything before you send it. We use it only to fix the bug and delete it when we are done.
Changes to this policy
If what the app sends changes (for example, push notifications or crash reports are added), we will first change this policy and describe the change on this page, with a new date.