Privacy Policy

This policy covers the Kartaz apps: KartazTV for Apple TV and iPad (the game host) and Kartaz for iPhone (the player companion app), together "the Apps", as well as this website, kartaz.app.

Data the Apps handle

1. Information shared over your local network during a game

When you join a table, your phone sends the following to the host device (Apple TV or iPad) over your local Wi-Fi network using Apple's peer-to-peer networking (Bonjour / Multipeer Connectivity, service _kartaz._tcp):

• Display name. The name you type to identify yourself at the table.
• Device identifier. Apple's per-app "identifier for vendor" (a UUID specific to Kartaz on your device). It is used solely so the host can return your seat and chips if your phone briefly disconnects mid-round. It cannot be used to track you across other apps or services.
• Virtual chip balance and game actions. Bets, hits, stands, and similar gameplay messages.

The host broadcasts game state (including player names and chip counts) to all phones at the same table. This traffic never leaves your local network. It is not routed through the internet and is not visible to us.

The host device may also advertise a custom table name you set, so nearby players can find your table.

2. Information stored on your device

The Apps store the following locally (and only locally):

• Virtual chip balance and daily-bonus bookkeeping (phone).
• Game settings, table name, and audio/haptics preferences.
• Gameplay statistics on the host device.
• A persistent peer identifier so nearby devices can reconnect to your table reliably.
• On the host, a cached record of which games you have purchased.

Deleting the app deletes this data.

3. Information synced through your iCloud account

If you are signed into iCloud, the Apps use Apple's iCloud key-value storage to sync a small amount of data within your own Apple ID so it survives reinstalls and roams between your devices:

• Phone: your virtual chip wallet and daily-bonus status.
• Host: your purchase entitlements cache.

This data goes only to your personal iCloud account under Apple's terms. DND Technologies cannot access it.

4. In-app purchases

Kartaz offers one-time in-app purchases (individual games and a complete bundle) processed entirely by Apple through the App Store. We never receive your name, payment details, or billing information. The Apps receive only Apple's transaction record confirming which products are unlocked, which supports purchases, restores, Family Sharing, and refunds. Apple's handling of your payment data is governed by Apple's Privacy Policy.

5. Anonymous usage analytics

To understand how the Apps are used and where players run into trouble, the Apps send a small number of anonymous, aggregate usage signals to TelemetryDeck, a privacy-focused analytics service. These signals record events, not people: that a screen was opened, a round finished, or a purchase screen was shown. They contain no name, email, account, advertising identifier (IDFA), precise location, or game content, and they are never linked to your identity or used to track you across other apps. TelemetryDeck is designed so signals cannot be tied back to an individual device or person. There is no cross-app tracking, so no App Tracking Transparency prompt is required.

6. Anonymous internet time check

To prevent device-clock tampering from re-triggering the free daily chip bonus, the phone app occasionally verifies the current date by sending a minimal HEAD request to a well-known public website (cloudflare.com or google.com) and reading only the standard Date response header. This request contains no identifiers, account information, or game data. Like any internet connection, the contacted server technically sees your IP address, but we send nothing about you and receive nothing but the time. No other internet communication occurs anywhere in the Apps.

7. The website: anonymous analytics and the Android waitlist

This website, kartaz.app, is a simple marketing site. It runs no advertising trackers, sets no cookies at all, and does no fingerprinting.

It does measure, anonymously, whether the site is doing its job. Using the same TelemetryDeck service described in section 5, the site records a page view when you open a page, and an event when you tap a download button, a game link, the share/copy buttons, or the waitlist. Each one notes the page, which button, and where you arrived from (the referring site, and any campaign tag in the link you followed). These are events, not people: they contain no name, no email, no advertising identifier, no precise location, and nothing you type into the page. The purpose is narrow, and we would rather just say it: to find out whether people who visit kartaz.app go on to download the app.

Nothing about you is stored in your browser to do this. TelemetryDeck works out an anonymous visitor count on its own servers using a daily-rotating salt, so the count cannot be linked back to you or followed from one day to the next. The only thing the site puts in your browser is a random number identifying your current tab, held in sessionStorage, which your browser throws away when you close the tab. It is not a cookie, it is never sent anywhere else, and it identifies a visit, not a person.

The one place the site collects personal data is the Android waitlist: if you choose to enter your email address there, we collect that email address (and nothing else) so we can email you once, when the free Kartaz player app is available on Android. Providing it is entirely optional. Your email is never included in any analytics event.

Waitlist emails are stored and delivered through Kit (formerly ConvertKit), an email service provider acting as our processor. Your address is shared only with Kit for this purpose and is never sold, rented, or used for advertising. Kit's handling of your data is governed by Kit's Privacy Policy. We rely on your consent, which you can withdraw at any time: every email includes a one-click unsubscribe link, or you can email admin@dndtechnologies.dev and we will remove you. We keep your address only until Kartaz for Android ships or you unsubscribe, whichever comes first.

Data we do NOT collect

The Apps contain no advertising or ad identifiers (IDFA), do no cross-app or cross-site tracking, run no crash-reporting service that identifies you, and never sell or share your data. Apart from the anonymous usage analytics and time check described above, the Apps make no connections to servers of ours (we have none). The Apps do not access your microphone, camera, photos, contacts, location, or health data. Audio in the Apps is playback only (sound effects and pre-recorded caller voice lines bundled with the app). On the App Store privacy label, the only data collected is anonymous "Usage Data," not linked to your identity and never used to track you. The only piece of personal data we ever hold is an Android-waitlist email address you choose to give us on the website (section 7), and we never sell or share it.

Virtual currency

Chips and coins in Kartaz are virtual play money with no real-world value. They cannot be purchased, cashed out, or exchanged. Kartaz does not offer real-money gambling.

Children

Kartaz includes simulated gambling (card games played with virtual chips), carries an 18+ App Store age rating, and is not directed at children. The Apps collect no personal information from anyone, children included, and the website's Android waitlist is not directed to children. We do not knowingly collect personal information from a child.

Your rights

European Economic Area, UK, and Switzerland (GDPR)

The Apps collect no personal data on our systems, so for app data there is nothing held by DND Technologies to access, rectify, erase, restrict, or port; the limited processing that occurs (gameplay messages between your own devices on your own network) happens under Article 6(1)(b), as it is necessary to provide the game you've asked for, and never reaches us. The one set of personal data we do hold is the Android-waitlist email addresses collected on this website, which we process under Article 6(1)(a) (your consent). For that data you have the rights to access, rectify, erase, restrict, port, and to withdraw consent at any time: use the unsubscribe link in any email, or contact us at the address below. You can also erase all locally stored app data by deleting the Apps, and remove iCloud-synced data via Settings, [your name], iCloud on your device. If you believe we have processed your data unlawfully, you may lodge a complaint with your local supervisory authority.

California (CCPA/CPRA)

We do not sell or share personal information as those terms are defined by the CCPA, and we do not use or disclose sensitive personal information. The only personal information we collect is an Android-waitlist email address you choose to give us on this website; you may request that we disclose or delete it by emailing us, or unsubscribe at any time.

Everyone else

The same answer applies everywhere: your data stays with you. For any privacy question or request, email admin@dndtechnologies.dev and we will respond within 30 days.

Data retention

From the Apps we receive and retain nothing on our systems. Android-waitlist email addresses are retained by our email provider only until Kartaz for Android ships or you unsubscribe, whichever comes first. On-device app data persists until you delete the Apps; iCloud-synced data persists in your Apple ID until you remove it or delete the Apps' iCloud data.

Changes to this policy

If a future version of Kartaz changes what data is handled (for example, adding online play), we will update this policy, change the effective date above, and describe the new practices before they take effect.

Contact