# Privacy Policy - Impostor Game

**Last Updated:** January 26, 2026

## 1. Introduction

Welcome to Impostor Game ("App", "we", "us", or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our App.

## 2. Information We Collect

### 2.1 Information You Provide Directly

**Game Setup Information:**
- Number of players
- Number of impostors
- Selected word pack (Pack Fácil or Pack Difícil)

**Note:** We do NOT collect player names or personal identifiers.

### 2.2 Automatically Collected Information

**Game Analytics:**
- Game events (game started, game ended, player eliminated, voting results)
- Word pack IDs used
- Game duration
- Number of players and impostors
- Game outcomes (civil win, impostor win)

**Technical Information:**
- Device type and operating system
- App version
- Timestamp of events
- IP address (for rate limiting purposes only)

**Cloud Storage (Firebase):**
- Word packs are stored in Firebase Firestore
- Word packs are downloaded and cached locally on your device for offline functionality
- Local cache expires after 7 days
- Firebase is a Google service that complies with GDPR and CCPA

**Local Storage:**
- Downloaded word packs are cached in your device's IndexedDB
- Cache expires after 7 days

## 3. How We Use Your Information

We use the collected information for:

1. **Service Improvement**
   - Understanding how players use the game
   - Identifying and fixing bugs
   - Improving game balance and user experience

2. **Analytics**
   - Measuring game popularity
   - Tracking feature usage
   - Monitoring app performance

3. **Security**
   - Preventing abuse and fraud
   - Enforcing rate limiting (30 requests per minute per IP)
   - Protecting against scraping and DoS attacks

4. **Legal Compliance**
   - Complying with applicable laws and regulations

## 4. Data Retention

- **Game Events:** Retained for 30 days
- **Local Cache:** Automatically expires after 7 days
- **IP Addresses:** Used only for rate limiting, not stored long-term

## 5. Data Sharing

We do NOT share your data with:
- Third-party advertisers
- Marketing companies
- Data brokers
- Any external services

Your data is used solely for operating and improving the App.

## 6. Data Security

We implement security measures to protect your information:

- **HTTPS Encryption:** All data in transit is encrypted
- **Rate Limiting:** 30 requests per minute per IP to prevent abuse
- **Security Headers:** Protection against XSS, clickjacking, and MIME-sniffing attacks
- **Input Validation:** All user inputs are validated
- **No Personal Data:** We don't collect names or personal identifiers

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

## 7. Cloud & Offline Functionality

The App includes cloud-synced and offline-first functionality:

**Cloud Storage:**
- Word packs are stored in Firebase Firestore (Google's secure cloud database)
- Word packs are automatically downloaded and cached on your device
- No personal data is stored in the cloud

**Offline Functionality:**
- The game can be played without internet connection
- Cache is stored in your device's local storage (IndexedDB)
- Cache automatically expires after 7 days
- You can clear cache anytime through your device settings

**Firebase Privacy:**
- Firebase is a Google service that complies with GDPR and CCPA
- Firebase does not collect personal information from the app
- Only word pack data is stored (no user data)

## 8. Children's Privacy

The App is designed for family and social gameplay. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

## 9. Your Rights

Depending on your location, you may have the following rights:

- **Right to Access:** Request what data we have about you
- **Right to Delete:** Request deletion of your data
- **Right to Opt-Out:** Opt-out of analytics collection (if applicable)
- **Right to Portability:** Request your data in a portable format

To exercise these rights, contact us at: impostorgamexiklana@proton.me

## 10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to delete personal information collected
- Right to opt-out of the sale of personal information

We do not sell personal information. To exercise your rights, contact us at: impostorgamexiklana@proton.me

## 11. European Privacy Rights (GDPR)

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR):

- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing

To exercise these rights, contact us at: impostorgamexiklana@proton.me

## 12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Your continued use of the App following the posting of revised Privacy Policy means that you accept and agree to the changes.

## 13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

**Email:** impostorgamexiklana@proton.me
**Address:** Online

## 14. Compliance

This App complies with:
- ✅ GDPR (General Data Protection Regulation)
- ✅ CCPA (California Consumer Privacy Act)
- ✅ Google Play Store Privacy Policy Requirements
- ✅ Apple App Store Privacy Policy Requirements

---

**Version:** 1.1
**Effective Date:** January 26, 2026