PRIVACY POLICY
TIC TAC TOE GAME
Effective Date: August 25, 2026
Last Updated: August 25, 2026
1. Introduction
This Privacy Policy explains how the TIC TAC TOE GAME Team and Company (“we”, “us”, “our”, or “TIC TAC TOE GAME”) handles information in connection with the Tic Tac Toe Game mobile application (“App”, “Game”, or “Service”).
The Game is a family-friendly strategy game offering offline and online gameplay. Current online features include invite codes, copying and sharing invite codes, joining matches by code, random matchmaking, and real-time chat during an active match. Google Sign-In/Firebase Authentication is used for account authentication and online functionality.
We aim to follow applicable privacy and data-protection laws and platform requirements, including the Digital Personal Data Protection Act, 2023 and applicable rules in India, the General Data Protection Regulation (GDPR) where applicable, applicable children’s privacy requirements, and Google Play/advertising requirements.
2. Privacy and Data Minimization
We do not intentionally collect unnecessary personal information. The information processed depends on the features a user chooses to use.
Offline gameplay can generally operate without an online account. Online gameplay, authentication, advertising, support, reporting, and other connected features may require processing of limited information necessary to provide those services.
3. Offline Gameplay
The App supports offline two-player gameplay and player-versus-computer/bot gameplay. Gameplay information such as scores, settings, statistics, progress, and other local game state may be stored on the device to operate the Game.
Information generated solely by offline gameplay is not intentionally transmitted to our online services merely because the user plays offline.
4. Google Sign-In and Firebase Authentication
The App uses Google Sign-In/Firebase Authentication for account authentication and online features.
When a user chooses to sign in, Google/Firebase may process information necessary for authentication, which may include a Firebase User ID (UID), Google account identifier, email address, display name, profile image where available, and authentication-related technical information, depending on the configuration of the authentication service.
We do not receive or store the user’s Google password.
Google and Firebase may independently process information under their own terms and privacy policies.
5. Online Multiplayer
Online multiplayer features may process limited game and session information needed to create, join, connect, and operate matches. This may include player ID, match ID, invitation code, game moves, selected symbol, match status, result, session information, and technical information necessary for service operation, security, and abuse prevention.
6. Invite Codes and Match Sharing
Users may generate, copy, and share invitation codes and may join a match using a code. The App does not control how a user shares a code through another application. Users should not include sensitive or unnecessary personal information when sharing codes.
7. Random Matchmaking
Random matchmaking may process limited information such as player ID, matchmaking status, session/match information, game status, and connection information needed to locate and connect an opponent. The feature is not intended to disclose a user’s private personal information to another player.
8. Real-Time Chat
The App provides chat during active online matches. Users voluntarily provide chat content when they send messages.
Chat messages are transmitted as necessary to deliver them to the other player. Ordinary match chat is not intended to be maintained as a permanent user chat history.
Temporary technical copies, logs, caches, or related information may exist for the period reasonably necessary to deliver messages, maintain service reliability, prevent spam or abuse, investigate a report, maintain security, or comply with law. If a chat message is reported as a violation, relevant information may be retained for a limited period when reasonably necessary to investigate or enforce applicable rules.
Users should never share passwords, OTPs, financial credentials, government identification numbers, precise location, or other sensitive personal information in chat.
9. Reports, Abuse and Safety
Users may report harassment, inappropriate chat, cheating, fraud, impersonation, match manipulation, security issues, or other violations through the contact method provided in this Policy.
A report may require reasonable information such as a screenshot, match ID, player ID, date/time, or description of the incident. We ask users not to submit unnecessary sensitive personal information.
Information relevant to a legitimate report may be processed and retained for a limited period when reasonably necessary for investigation, safety, security, dispute handling, or legal compliance.
10. Account Deletion and Local Data Deletion
A user may request permanent deletion of an online account by contacting the support/privacy contact stated in this Policy. Reasonable account-ownership verification may be requested to prevent unauthorized deletion.
Local App data can generally be removed using the device’s application settings (for example, Settings > Apps > Tic Tac Toe Game > Storage > Clear Data/Clear Storage) or by uninstalling the App. Menu names vary by device and Android version.
Deleting local App data does not automatically delete information independently processed by Google, Firebase, AdMob, or other third-party providers. Separate requests may be required where applicable.
11. Advertising
The App may display advertisements through Google AdMob and, if introduced in future versions, other advertising providers. We may also display our own in-app promotional content, such as information about our own features, games, services, or updates.
Advertising and promotional content is intended to be displayed within the App and should not unnecessarily interfere with gameplay.
12. Google AdMob and Advertising Data
Google AdMob may process information for advertising, measurement, fraud prevention, security, and related purposes. Depending on the user’s location, consent status, age treatment, device settings, and AdMob configuration, this may include advertising identifiers, device information, IP address, approximate location, app information, ad impressions/interactions, diagnostics, and cookies or similar technologies where applicable.
Google independently determines some aspects of its processing. Users should review Google’s current information about how Google uses data from partner apps and services:
Google — How Google uses information from sites or apps that use our services
13. Personalized and Non-Personalized Advertising
Where applicable law requires consent for personalized advertising, personalized advertising will only be enabled after the required consent is obtained. Users may refuse or withdraw consent where a consent mechanism is provided.
Refusing personalized advertising does not necessarily mean that no advertisements will be displayed. Where technically and legally available, non-personalized or contextual advertising may continue to be shown.
Advertising treatment may also be affected by age, child-directed status, platform requirements, device settings, and advertising-provider policies.
14. European Economic Area, United Kingdom and Switzerland
Where GDPR or equivalent consent requirements apply, users may be presented with an appropriate consent-management mechanism for advertising and other consent-based processing.
Users can choose whether to consent to personalized advertising where consent is legally required. Withdrawal of consent does not affect processing that was lawful before withdrawal.
The availability and type of advertisements may change according to the user’s privacy choices and applicable law.
15. Cookies and Similar Technologies
The mobile App does not necessarily use browser cookies in the same way as a traditional website. However, the App and third-party services may use SDKs, local storage, advertising identifiers, session identifiers, cookies where applicable, and similar technologies for authentication, security, advertising, measurement, fraud prevention, session management, and service functionality.
16. Children’s Privacy
The Game is intended to be family-friendly and may be used by people of different ages. We do not intentionally require children to provide unnecessary personal information for offline gameplay.
Online authentication, multiplayer, chat, advertising, and future reward features may involve additional legal and platform requirements. Where applicable law or platform rules require additional protections, we will apply the relevant restrictions and safeguards.
We do not knowingly use children’s personal data for purposes prohibited by applicable law.
17. Children’s Advertising
Where child-directed treatment or other children’s advertising requirements apply, advertising will be configured in accordance with applicable law, Google policies, and Google Play requirements.
Personalized advertising and remarketing may be restricted or disabled for child-directed users. Advertising SDKs used in a child-directed or Families context will be selected and configured in accordance with applicable platform requirements.
18. India – Digital Personal Data Protection Act, 2023
For users in India, we seek to process Digital Personal Data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), applicable rules and notifications, and other applicable Indian law.
The specific application and commencement of provisions may depend on applicable notifications, rules, the user’s circumstances, and the processing activity. Where we determine the purpose and means of processing, we may act as a Data Fiduciary. Third-party service providers may process information on our behalf where applicable.
19. Purposes of Processing in India
Information may be processed as reasonably necessary to provide authentication, online multiplayer, matchmaking, invite codes, chat delivery, security, fraud and cheating prevention, abuse handling, customer support, advertising, consent management, account deletion, privacy requests, technical operation, service improvement, and legal compliance.
20. Consent and User Choices under Indian Law
Where consent is required under applicable Indian law, we will seek consent through an appropriate mechanism. Where processing is permitted or required on another lawful basis, processing may occur on that basis.
Where processing is based on consent, users may withdraw consent through an available mechanism, subject to applicable law and technical limitations. Withdrawal does not affect processing that was lawful before withdrawal.
21. Rights and Grievance Redressal for Indian Users
Subject to applicable DPDP provisions and other applicable law, users may have rights concerning access to information, correction, erasure, withdrawal of consent where applicable, grievance redressal, nomination, and other rights provided by law.
Privacy requests and grievances may be submitted using the contact details in this Policy. The exact scope and procedure for exercising rights will depend on the DPDP Act, applicable rules and commencement provisions.
22. Children’s Data under Indian Law
Under the DPDP Act, a child is generally an individual who has not completed 18 years of age. Where provisions applicable to children’s personal data apply, we will implement the safeguards required by applicable law, including parental consent where required.
We will not knowingly process children’s personal data for prohibited tracking, behavioural monitoring, or targeted advertising where such processing is prohibited by applicable law.
23. GDPR – European Users
Where GDPR applies, processing may rely on an applicable lawful basis, including consent, performance of a contract, legitimate interests, or compliance with a legal obligation, as appropriate to the processing.
Depending on the circumstances, GDPR users may have rights to access, correction, erasure, restriction, portability, objection, withdrawal of consent, and other rights provided by GDPR, subject to applicable conditions and exceptions.
24. GDPR Children’s Privacy
Where GDPR children’s provisions apply, we will follow applicable requirements for services offered to children. For consent-based processing directly offered to a child, GDPR Article 8 provides a general threshold of 16, while EU Member States may provide a lower threshold subject to the limits in Article 8. Where parental authorization is legally required, appropriate verification measures will be used.
25. Data Retention
We retain information only for as long as reasonably necessary for the purposes for which it is processed, or as required or permitted by applicable law.
Information may be retained for account functionality, active multiplayer services, security, fraud and cheating prevention, abuse investigations, reports, dispute resolution, legal compliance, or other legitimate purposes.
Ordinary chat is not intended to be retained as a permanent chat history. Temporary technical information may remain for a limited period where necessary for service operation, security, abuse prevention, or legal compliance.
26. Third-Party Services
The App may use third-party services such as Google Sign-In, Firebase, Google Play services, Google AdMob, and other technical or advertising providers introduced in future versions.
Third-party providers may process information under their own privacy policies, terms, and technical practices. This Policy does not replace the privacy policies of those independent providers.
27. Security
We use reasonable technical and organizational measures appropriate to the nature of the information and services, which may include secure authentication, encrypted network communication, access controls, server/database security, validation, abuse prevention, and other safeguards.
No Internet service or electronic storage system can guarantee absolute security.
28. International Processing
Some third-party providers may process information using infrastructure located outside India or outside the user’s country. Where GDPR or other applicable law requires safeguards for international transfers, appropriate mechanisms will be used as required by law.
29. No Sale of Personal Information
We do not sell users’ personal information as a standalone commercial product. Third-party advertising and technology providers may independently process information for advertising, measurement, security, authentication, or other services according to their own policies and applicable law.
30. Future Virtual Coins and Rewards
Future versions may introduce virtual Coins, spin/reward features, bonuses, player challenges, and other engagement features.
Unless expressly stated otherwise, virtual Coins are in-game items with no cash value, are not cryptocurrency or financial assets, and are not redeemable for cash.
If real-money purchases or other monetized features are introduced, the App will provide applicable purchase disclosures, terms, refund information, and required platform/legal protections.
31. Future Player Challenges
If players can challenge other players using virtual Coins, the service may process player IDs, match IDs, Coin balances, challenge information, results, game-event records, and anti-fraud information needed to operate and protect the feature.
Such records may be retained for security, fraud prevention, disputes, and game integrity. The feature will be operated in accordance with applicable law and platform rules.
32. Privacy Requests and Identity Verification
Users may request access, correction, deletion, account deletion, consent withdrawal, or other privacy assistance through the contact details below.
For security, we may request reasonable evidence that the requester owns or is authorized to access the relevant account. We will seek to avoid collecting unnecessary sensitive information for verification.
33. Data Breach and Security Incidents
If we become aware of a security incident that creates notification obligations under applicable law, we will take reasonable steps to investigate, contain, mitigate, secure affected systems, and make required notifications to users, regulators, or other parties as applicable.
34. Changes to This Privacy Policy
We may update this Privacy Policy when features, advertising providers, authentication services, legal requirements, platform requirements, or data practices change.
Material changes may be reflected by updating the Last Updated date and, where required, providing additional notice.
The Policy should be reviewed periodically so that users remain informed about current practices.
35. Contact, Privacy Requests and Reports
For privacy questions, account deletion, data deletion, GDPR requests, DPDP requests, consent withdrawal, or violation reports:
TIC TAC TOE GAME Team and Company
Email: dasininfotech@gmail.com
Website: https://dasininfotech.com/
Suggested subjects:
• Tic Tac Toe Game – Account Deletion Request
• Tic Tac Toe Game – Data Deletion Request
• Tic Tac Toe Game – GDPR Request
• Tic Tac Toe Game – DPDP Request
• Tic Tac Toe Game – Privacy Grievance
• Tic Tac Toe Game – Violation Report
• Tic Tac Toe Game – Consent Withdrawal
Users should provide only the information reasonably necessary to process a request and should not send passwords, OTPs, payment credentials, or other unnecessary sensitive information.
36. Applicable Law and Interpretation
This Policy is intended to describe the privacy practices of the Tic Tac Toe Game and to be interpreted consistently with applicable privacy, data-protection, consumer-protection, children’s privacy, advertising, and platform requirements.
Where mandatory local law provides additional rights or protections, those requirements will apply to the extent applicable.
© 2026 TIC TAC TOE GAME Team and Company. All rights reserved.