Privacy Policy

This policy covers the Kartaz apps: KartazTV for Apple TV and iPad (the game host) and Kartaz, the player app for iPhone and for Android phones, together "the Apps", as well as this website, kartaz.app. Your use of Kartaz is also governed by our Terms of Use.

Data the Apps handle

1. Information shared over your local network during a game

When you join a table, your phone sends the following to the host device (Apple TV or iPad) over your local Wi-Fi network, using a direct device-to-device connection (WebSocket over TCP, service _kartaz._tcp):

• Display name: the name you type to identify yourself at the table.
• Device identifier: on iPhone, Apple's per-app "identifier for vendor"; on Android, a random identifier Kartaz creates the first time you open it and keeps only on that phone. Either way it is specific to Kartaz on your own device, is used so the host can give your seat back if your phone drops out mid-round, and cannot be used to track you across other apps or services. Deleting the app deletes it.
• Profile photo, if you choose to add one: a photo taken with your phone's front camera so it can be shown at your seat. See section 9 for how it is handled.
• Game actions: the moves and choices you make, sent as gameplay messages.
• Your play record: the tally your own phone keeps of how many games you have played of each game, how many nights you have won, and the dates you have played.

The host shares the table's state with every phone at it: each player's name, seat colour, points tonight, and the play record above. This traffic never leaves your local network. It is not routed through the internet and is not visible to us.

The connection is not encrypted. Everything above, including a photo and a recorded voice clip, travels between the devices at your table in the clear. Someone with technical tools on the same Wi-Fi could in principle read it. Play on a home or private network you trust rather than an open public one.

What the table announces so phones can find it. The host puts a short notice on your local network naming the table (the device's own name, unless you set your own), which game is running, whether a game is already in progress, how many of the seats are taken, and, for each player already sitting down, the first letter of their name and the colour they picked. Nothing else about a player is announced, and none of it goes to the internet.

2. Information stored on your device

The Apps store the following locally (and only locally):

• Game settings, table name, and audio and haptics preferences.
• Your profile photo, if you added one (phone). It stays on your phone until you remove it or delete the app. On iPhone it sits in the app's own folder and is therefore part of your ordinary iPhone backup, so restoring your phone restores it. On Android nothing Kartaz stores is included in a backup at all (see below).
• On the host, tonight's table: each player's name, colour and points, kept so the night survives closing the app, and cleared as soon as a new day starts.
• Your own play record: games played, nights won, and the dates you played.
• A persistent peer identifier so nearby devices can reconnect to your table reliably.
• On the host, a cached record of what you have purchased.
• On the host, any Lotería caller voice your household has recorded (see section 3).

On Android, none of this is included in Google backup or in a device-to-device transfer when you set up a new phone. It stays on the phone it was created on, so a new Android phone starts fresh and you re-enter your name and pick your colour again. That is what the app asks Android to do; a few manufacturers' transfer tools do not honour an app's opt-out, which is outside our control.

Deleting the app deletes this data.

3. Your recorded Lotería caller voice (microphone)

Lotería lets your household record its own voice calling the cards, instead of using one of the voices bundled with the app. This is the only feature that uses the microphone, and it only runs while you have deliberately started a recording session from the TV.

• Recording happens on a phone, one short clip per card, and each clip is sent over your local Wi-Fi network to your own Apple TV or iPad, where it is saved together with the first name of whoever recorded it, so the table can see whose voice it is. On iPhone the clip is written to a temporary file for a moment while it is prepared, and deleted as soon as it has been sent. On Android it never touches the phone's storage at all.
• The recordings never leave that console. They are not uploaded to us, not synced to iCloud, and not sent to any third party. We have no servers and no way to hear them.
• On Apple TV the recordings live in a cache folder the system never backs up. On an iPad host we ask the system to leave them out of your backup.
• You can delete the whole recorded voice at any time. On the TV or iPad, open the Lotería settings, choose Your recorded voice, then Delete recording. That deletes the recorded names along with the audio, and deleting the host app deletes them with it.

If you decline microphone access, the app simply tells you that this phone cannot record. Nothing else in Kartaz changes.

4. Information synced through your iCloud account (Apple devices only)

On Apple TV and iPad only, and only if you are signed into iCloud, the host app uses Apple's iCloud key-value storage to sync three small records within your own Apple ID, so they survive a reinstall and follow you to a new device:

• What you have purchased, so a purchase follows you to a new Apple TV or iPad.
• Whether your free game night has been used.
• A note that you have already been shown the message about a game that was withdrawn.

None of it contains a name, a photo, a recording, or anything you typed. The player app on iPhone syncs nothing, and nothing on Android is synced to any account. This data goes only to your personal iCloud account under Apple's terms. DND Technologies, LLC cannot access it.

5. In-app purchases

Your first game night on the host is free. After that, Kartaz sells one thing: a single one-time purchase that unlocks the whole game, handled entirely by Apple through the App Store. We never receive your name, payment details, or billing information. The Apps receive only Apple's transaction record confirming that the purchase is unlocked, which is what supports purchases, restores, Family Sharing, and refunds. The free Kartaz player app for Android has no purchases at all. Apple's handling of your payment data is governed by Apple's Privacy Policy.

When a purchase completes, the host also sends one anonymous purchase event to our analytics provider (section 6). It carries which product was bought, the price converted to US dollars, the currency, the App Store country you bought in, and whether it was a one-time purchase or a subscription. It carries no name, no email, no card number, and no billing address.

6. Anonymous usage analytics

To understand how the Apps are used and where players run into trouble, the Apps send a small number of anonymous usage signals to TelemetryDeck, an analytics service based in the European Union that acts as our processor. These signals record events, not people: that a screen was opened, a round finished, or a purchase screen was shown.

They contain no name, no email, no account, no advertising identifier (IDFA), no precise location, no photo, no recording, and nothing you type, and we never use them to track you across other apps. There is no cross-app tracking, so no App Tracking Transparency prompt is required.

We would rather be exact than reassuring, so here is what rides along with each signal. TelemetryDeck attaches a small amount of technical context: your device brand and model, operating system version, screen size and orientation, time zone, language and region, your accessibility settings, and which version of Kartaz you are running. It also attaches a hashed per-installation identifier, worked out on your device from an identifier belonging to this installation of Kartaz alone. That is what lets TelemetryDeck count returning installations rather than raw launches. It is not your Apple ID or your Google account, it is not shared with anyone else, and deleting the app removes it. It does mean a signal can be associated with an installation, which is why we describe it here rather than calling these signals untraceable.

We rely on our legitimate interest in knowing whether the app works for the people using it. There is no in-app switch to turn analytics off today. We are adding one in an upcoming version. Until it ships, you can write to admin@dndtechnologies.dev with any objection or question. We will be straight with you about the limit: because the signals carry nothing that tells us who you are, we cannot pick one person's signals out of the rest, so the switch is the real answer and it is on its way.

Apart from these signals, the Apps reach the internet only for the App Store when you buy or restore the game (section 5), and for Apple Music if someone at the table turns music on (section 7). A game night itself needs no internet at all.

7. Music from Apple Music (optional)

If someone at the table turns on music, the host connects to Apple Music using the Apple ID signed in on the Apple TV or iPad, and asks for Apple Music permission the first time. Players can search for songs from their phone: the words you type travel over your local Wi-Fi to the host, and the host sends them to Apple to run the search. On Android phones, the artwork for the song playing is fetched from Apple's servers so it can be shown on your screen.

Apple sees those searches and the songs played, under the host's own Apple Music account, governed by Apple's Privacy Policy. We never see them. The songs a table searched for and played are not kept once the night ends, and the feature is entirely optional: with music off, nothing is sent to Apple.

8. The website: anonymous analytics

This website, kartaz.app, is a simple marketing site. It runs no advertising trackers, sets no cookies at all, and does no fingerprinting. Opening a page loads nothing from anyone else's servers: the text, the pictures and the fonts all come from kartaz.app itself.

It does measure, anonymously, whether the site is doing its job. Using the same TelemetryDeck service described in section 6, your browser sends a page view when you open a page, and an event when you tap a download button, a game link, or the share and copy buttons. Each one notes the page, your browser's language, which button you tapped, and where you arrived from (the page that linked you, and any campaign tag in the link you followed). These are events, not people: they contain no name, no email, no advertising identifier, no precise location, and nothing you type into the page. The purpose is narrow, and we would rather just say it: to find out whether people who visit kartaz.app go on to download the app.

Nothing about you is stored in your browser to do this. TelemetryDeck works out an anonymous visitor count on its own servers using a daily-rotating salt, so the count cannot be linked back to you or followed from one day to the next. The only thing the site puts in your browser is a random number identifying your current tab, held in sessionStorage, which your browser throws away when you close the tab. It is not a cookie, it is never sent anywhere else, and it identifies a visit, not a person.

The website collects no personal data. Historical note: Before Kartaz for Android shipped, the site ran an optional email waitlist through Kit (formerly ConvertKit). That waitlist is closed. Addresses given there were used only to send one launch email; you can unsubscribe with the link in that email or ask us at admin@dndtechnologies.dev to delete yours, and we will.

9. Profile photos (optional)

If you choose to add a profile photo, the Apps capture it using your phone's front camera only. There is no photo-library access: the photo is cropped and encoded to a small square image on your own phone before it goes anywhere else.

Kartaz never scans, measures or analyses your face. A profile photo is stored and shown as an ordinary picture, cropped to the middle of the frame. The Apps run no face detection, no face recognition and no biometric processing of any kind, on any platform.

When you play, that photo is sent to the host device (Apple TV or iPad) and, from there, to the other phones at your table, over the same local Wi-Fi network described in section 1. It is never uploaded to the internet and never reaches DND Technologies, LLC.

The host holds your photo in memory only, for the length of that session. It is never written to the host's storage, and it is gone the moment the host app closes. The host has a Hide player photos setting that turns photos off for the whole table, and a Remove this photo control for any single seat.

Adding a photo is entirely optional. Kartaz works the same way with just your name and seat colour.

Data we do NOT collect

The Apps contain no advertising or ad identifiers (IDFA), do no cross-app or cross-site tracking, run no crash-reporting service, and never sell or share your data. Apart from the anonymous usage signals described in section 6, the Apps make no connections to servers of ours (we have none).

The Apps access your front camera only if you choose to take a profile photo (section 9), and use the microphone only if you take part in recording your household's Lotería caller voice (section 3). They do not access your photo library, your contacts, or your health data.

One Android exception, about location. If you open the "can't find a table" help screen on an Android phone, Kartaz asks for location permission, for one reason: Android treats the name of the Wi-Fi network you are on as location data, and that screen compares your Wi-Fi name to the TV's so it can tell you whether the two devices are on different networks. The name is shown on your own screen and is never sent to the TV, to us, or to analytics. Say no and the help screen simply gives its general advice instead. Kartaz never asks for location on iPhone, iPad or Apple TV, and never reads your position on any platform.

Profile photos stay on your phone and on your table's local network, and caller recordings stay on your own console. Neither ever reaches us. The only thing we collect is the anonymous usage data described in section 6, together with the hashed per-installation identifier that rides with it, and it is not linked to your identity or used to track you.

Virtual currency (prior versions)

Versions of the Apps up to and including 1.0(8) included virtual chips: a chip balance, a free daily chip bonus, and an iCloud-synced chip wallet. Those chips were virtual play money with no real-world value, could not be purchased, cashed out, or exchanged, and did not involve real-money gambling. Current versions of the Apps have no currency of any kind. A game night keeps score in placement points, the way Uno or Yahtzee does.

Children

Kartaz is a family party game console with no simulated gambling and no currency of any kind (see "Virtual currency (prior versions)" above). It is made for general audiences: a household may include players of any age at the same table. It is not a service directed at children, and we do not enrol it in the App Store Kids Category or in Google Play's Designed for Families programme.

We do not knowingly collect personal information from a child. A child can type a name, take a front-camera selfie and record a few seconds of their voice, and all three stay on your household's own devices and Wi-Fi: they reach the TV and the other phones at your table, and they never reach us (sections 1, 3 and 9). The only thing any installation sends us is the anonymous usage data in section 6, which we use to run and improve the app itself. We do not use it to advertise to anyone, to build a profile of anyone, or to follow anyone across other apps or websites.

An adult sets up the host device and makes any purchase. In the European Economic Area and the United Kingdom, a parent or guardian should set up Kartaz for a child under 16, or under the lower age their country sets. We ask a child for no consent, because none of a child's personal data reaches us. If you are a parent or guardian and have a question or a request, email admin@dndtechnologies.dev and we will answer.

Your rights

European Economic Area, UK, and Switzerland (GDPR)

For everything the game itself handles, there is nothing held by DND Technologies, LLC to access, rectify, erase, restrict, or port: gameplay messages pass between your own devices on your own network under Article 6(1)(b), because they are necessary to provide the game you asked for, and they never reach us.

The anonymous usage signals in section 6 are the one thing we do receive. We process them under Article 6(1)(f), our legitimate interest in knowing whether the app works for the people using it, with TelemetryDeck, based in the European Union, as our processor. That basis carries a right to object, and there is no in-app switch yet, so today the way to object is to email admin@dndtechnologies.dev. We will tell you what is held and have TelemetryDeck delete the signals for your installation, though because those signals are tied to no account of ours we may need your help identifying which installation is yours. Deleting the app also stops the signals, and it is the only way to stop them immediately until the switch ships.

We hold no personal data from the website either, except any address left over from the now-closed email waitlist (section 8), which we originally processed under Article 6(1)(a) (your consent) and which we delete on request. For any such remaining address you have the rights to access, rectify, erase, restrict, and port it: use the unsubscribe link in that waitlist's launch email, or contact us at the address below.

You can erase all locally stored app data by deleting the Apps, and remove iCloud-synced data through your device's iCloud settings. If you believe we have processed your data unlawfully, you may lodge a complaint with your local supervisory authority.

California (CCPA/CPRA)

We do not sell or share personal information as those terms are defined by the CCPA, and we do not use or disclose sensitive personal information. Apart from the anonymous usage data in section 6, we hold no personal information except any address left over from the now-closed website email waitlist (section 8); you may request that we disclose or delete it by emailing us, or unsubscribe using the link in that waitlist's launch email.

Everyone else

The same answer applies everywhere: your data stays with you. For any privacy question or request, email admin@dndtechnologies.dev and we will respond within 30 days.

Data retention

From the game itself we receive and retain nothing on our systems. The anonymous usage signals in section 6 are held by TelemetryDeck on our behalf for as long as they are useful for the counts described there.

How long each thing lasts, and how to delete it.

• Your profile photo. On your own phone it stays until you remove it or delete the app: open Settings, tap Name, color, and photo, then Remove photo. On the host it exists in memory only, for the length of the session, and is gone the moment the host app closes.
• Your household's recorded Lotería caller. It stays on your Apple TV or iPad until you delete it or delete the host app. On the TV or iPad, open the Lotería settings, choose Your recorded voice, then Delete recording.
• Tonight's table on the host, including the other players' names, is cleared when a new day starts.
• Everything else stored on a device, including your play record and your settings, lasts until you delete the app from that device.
• iCloud-synced data (section 4) stays in your own Apple ID until you remove it through your device's iCloud settings or delete the Apps' iCloud data.
• Any leftover website waitlist address (section 8) is deleted on request.

Changes to this policy

If a future version of Kartaz changes what data is handled (for example, adding online play), we will update this policy, change the effective date above, and describe the new practices before they take effect.

• September 18, 2026: Added an optional profile photo (section 9): adding one is entirely your choice, it is captured with your phone's front camera only, and it stays on your phone and your table's local Wi-Fi network. The same update rewrote this policy against what the Apps actually do. We removed a described internet time check the Apps no longer perform, said honestly what the anonymous analytics carry (a hashed per-installation identifier and your device's technical details, with no in-app way to switch them off yet), added the optional Apple Music feature, said that the connection between your phones and the table is not encrypted and what the table announces on your Wi-Fi, explained the one place Android asks for location permission (the Wi-Fi name on the connection-help screen), listed everything that syncs through iCloud, and corrected the move to a single one-time purchase and the virtual chips that versions up to and including 1.0(8) had.

Contact