Who we are
Furkan Kaynar, using the Appgea brand, operates Tavla. Contact devappgea@gmail.com for privacy questions and requests. The collection controls and deletion flow below describe Tavla version 1.5.3 with the corresponding game-server update. Store rollout is gradual; this page does not confirm that your installed app has updated. Earlier versions may continue the earlier Firebase and TikTok collection described below and may not include in-app deletion. Update to version 1.5.3 or email us for an account-deletion request. Updating does not erase historical provider data.
Local play and records
Game settings, statistics and local game records are stored on your device. LAN play exchanges nicknames and game state with devices on your local network. LAN messages are not encrypted. The app does not require your real name or an email address for local play.
Online accounts and matches
Online play creates a guest account through Firebase Authentication. A generated account identifier links your server profile, chosen nickname, avatar, rank, statistics, coins and cosmetics. Guest identifiers are pseudonymous, not a guarantee of anonymity.
Our game servers process connection information such as IP addresses, matchmaking requests, moves, outcomes and preset emote reactions. Your nickname, avatar and rank can be visible to opponents and on leaderboards. The app does not provide freeform match chat. Reports and blocks contain account identifiers and may contain the reason you submit. They support moderation and matchmaking safety.
Delete your online account
Open Settings > Delete online account and confirm. Deletion removes your backend profile, linked match records, blocks and reports involving your account. Other players' statistics remain. Your Firebase Authentication account is then deleted. If the second step fails, some game records may already be removed. Stay signed in and retry from Settings to finish deletion. Contact devappgea@gmail.com if you cannot complete the process or access the account.
A hashed account marker is retained for 24 hours to prevent an old sign-in token from recreating deleted records. This safeguard does not retain your profile or match content.
Local offline statistics remain separate. Deleting an online account does not cancel a store subscription or automatically erase purchase records. Manage subscriptions through Apple or Google. Backend deletion does not automatically erase historical telemetry held by third parties or external copies.
Analytics and diagnostics
Firebase Analytics and Firebase Crashlytics are optional and are controlled by two separate choices. Settings has a switch for each: Usage analytics and Crash reports. Your choice is stored on your device and re-applied every time the app starts.
Where consent is required (EEA, UK, Switzerland) both switches start off. Nothing is collected until you turn one on. Elsewhere both start on and can be switched off in the same place. The region is read from Google's User Messaging Platform consent information. Consent to ads does not switch either of these on: advertising consent is a separate question and is never treated as analytics consent.
With usage analytics on, the app sends game events: game mode, player colour, result, move counts, match scores and which screens are opened. Nicknames, chat text, board content and anything else you write are never sent as event names or parameters. With crash reports on, the app sends diagnostic reports, device and version information and stack traces when the game crashes.
Turning usage analytics off stops collection and asks Firebase Analytics to reset the data held for your app instance. Turning crash reports off deletes reports that have not been sent yet. Neither switch deletes data a provider already received.
TikTok event tracking remains disabled and will not be enabled without its own separate opt-in. Earlier versions sent usage events and device information to Firebase Analytics, diagnostic reports to Crashlytics, and app events and advertising identifiers to TikTok for attribution. To request access, correction or deletion of earlier analytics, diagnostic or attribution records, email devappgea@gmail.com. We will review records that can be located and applicable retention requirements.
Advertising and choices
Google AdMob supplies ads. The app refreshes privacy choices through Google's User Messaging Platform and presents consent when required. Ads are requested only when the consent service permits them. Where available, use the in-app Privacy options to change your choices. Device settings also control advertising identifiers and iOS tracking permission.
AdMob and the consent service may process IP addresses, approximate location, device identifiers, device and app information, ad interactions and privacy selections. Personalization depends on consent and provider settings. Permission for ads is separate from the optional telemetry choices and does not enable them.
Purchases and sharing
Apple or Google processes payments. RevenueCat processes app-user identifiers, purchase receipts and entitlement information to deliver and restore purchases. Appgea does not receive your payment-card details. Purchase records may remain for restore, support and applicable retention requirements after you delete a game account. Content shared through other apps is received by your chosen destination.
Retention and providers
Local data remains until reset or removed. Device backups and exported copies may remain separately. Online records remain until deleted or otherwise removed through service operations. Advertising, purchase and historical telemetry records are retained under provider policies and applicable requirements. This notice does not state that previous collection has already been erased.
- Google Authentication, AdMob and Firebase privacy: https://policies.google.com/privacy
- Firebase privacy information: https://firebase.google.com/support/privacy
- RevenueCat: https://www.revenuecat.com/privacy
- Apple: https://www.apple.com/legal/privacy/
- Historical TikTok processing: https://www.tiktok.com/legal/privacy-policy
Providers may process information outside your country. We do not sell your personal information for money.
Rights, children and security
Depending on applicable law, you may request access, correction, deletion or portability, restrict or object to processing, withdraw consent and complain to a privacy authority. Contact devappgea@gmail.com. This notice does not replace any consent required by law.
Tavla is not directed at children under 13. Contact us if you believe a child provided personal information. We use reasonable safeguards but cannot guarantee absolute security. We will publish changes to this notice here.