KaramBall

Privacy Policy

Effective date: 8 October 2026

This policy is written in English and translated into other languages. If a translation differs from the English version, the English version prevails.

KaramBall is a mobile game made by Viento Apps. This policy explains what data the game and this website collect, why, and what you can do about it. We collect as little as we can: you never give us your name, e-mail address or phone number to play.

Who we are

Viento Apps publishes KaramBall and is responsible for the data described here (the data controller).

Contact: karamball@vientoapps.com

The short version

  • No ads, no advertising ID and no selling of your data.
  • No tracking across other apps or websites.
  • Your account is anonymous: no name, e-mail address or phone number.
  • You can turn off analytics and crash reports in the game's Settings.

What we collect and why

Anonymous account. When the game starts for the first time, it creates an anonymous account with Firebase Authentication (Google). The account is a random ID that is not linked to your name or e-mail address. We use it to let you play online, to limit abuse (for example, too many tries) and to keep banned players out. Analytics and crash reports use it as their user ID.

Online play. When you play online, our game server receives your nickname, the room code, your moves in the match and your IP address. Your nickname is shown to your opponent. Your moves are kept in memory only while the match runs. Your IP address is used for rate limits, to stop code guessing and room flooding. The server logs record the account ID and the nickname so that we can deal with abuse.

Analytics. With Firebase Analytics (Google) we count how the game is used: events such as the first launch, the language chosen, the tutorial finished, a match started or ended, a rematch asked for, an invite shared and a failed attempt to join. They come with device and app details: device model, operating system version, language, app version, a Firebase installation ID and an approximate country that Google derives from the IP address. We use them to see whether players come back and where the game needs work.

Crash reports. With Firebase Crashlytics (Google) the game sends crash and error reports with technical details, such as stack traces, the device model, the operating system and the app version, so that we can fix crashes.

Invites. When you install the game from a friend's invite link, Google Play passes the room code to the game. The game reads it on your phone to join the room. It never leaves your phone.

Bans. If an account is banned for abuse, we keep the account ID, the reason and the date in our database until the ban is lifted.

This website. This website sets no cookies, runs no analytics and loads nothing from other sites. Like any website, our hosting providers process your IP address and browser details to deliver the pages. We do not keep these logs. If you pick a language, your browser remembers it on your device.

Legal bases. We process this data to provide the game you asked for, such as online play, and for our legitimate interests in keeping the game safe, understanding how it is used and fixing crashes. You can object to analytics and crash reports at any time with the data sharing switch.

What we do not collect

We do not collect your name, e-mail address, phone number, precise location, contacts, purchase details or advertising ID. The game shows no ads, and it tells Google not to use its data for ads or ad personalisation. We do not sell your data or share it for advertising, and we do not track you across other apps or websites.

Your choice: data sharing

Data sharing is on by default. To turn it off, open Settings (the gear on the main menu) and switch off data sharing (the switch next to the chart icon). The game then stops sending analytics and crash reports, and it deletes any crash report still waiting on your phone. Your choice is remembered. Online play keeps working, because it needs the anonymous account.

Who processes the data

We use these service providers. They process data on our behalf, only to provide their services:

  • Google (Firebase Authentication, Analytics, Crashlytics and Hosting): the anonymous account, analytics, crash reports and the pages at the old karamball.web.app address.
  • Fly.io: our game servers and their logs, and our own database (Redis), which holds the ban list. Our servers are in Frankfurt, Germany.
  • Cloudflare: this website.

International transfers

Our providers may process data in other countries, including the United States. When data leaves your country, they protect it with the safeguards the law requires, such as the European Commission's Standard Contractual Clauses.

How long we keep data

  • Analytics data: 14 months, then it is deleted automatically.
  • Crash reports: 90 days.
  • Anonymous account: until it is deleted. If you reinstall the game, it creates a new account and the old one is no longer used.
  • Rate-limit counters with your IP address: at most 60 seconds.
  • Your moves in a match: only while the match runs.
  • Server logs (account ID, nickname, IP address): for the limited time our hosting provider Fly.io keeps logs.
  • Ban records: until the ban is lifted.
  • On your phone: your nickname and settings stay until you uninstall the game or clear its data.

Children

KaramBall is meant for players aged 13 and over and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has used the game, contact us and we will help delete the data we can find.

Your rights

Depending on where you live (for example under the GDPR in the EU and the UK, the KVKK in Türkiye or the CCPA in California), you have the right to access your data, to have it corrected or deleted, to object to or restrict its use, to receive a copy and to complain to a data protection authority. We do not sell or share personal data as the CCPA defines these terms.

To use these rights, e-mail karamball@vientoapps.com. Your account is anonymous, so we cannot look you up by name or e-mail address. Tell us your nickname, your device model and roughly when you played. We will do our best to find your data, but we may not be able to link a request to your device. We answer within 30 days.

You can also act yourself at any time: turn off data sharing in Settings, or uninstall the game, which deletes everything it stored on your phone. The old anonymous account is then no longer used, and its analytics and crash data are deleted on the schedule above.

If you write to us, we use your e-mail address and your message only to answer you.

Changes to this policy

We may update this policy when the game changes. We will post the new version on this page and change the effective date at the top. If a change is important, we will also tell you in the game or in the store listing.

Contact

Viento Apps, karamball@vientoapps.com