App: Uno Master League
Android package: com.unomaster.league
Effective date: 3 September 2026
Last updated: 3 September 2026
Replace the highlighted placeholders before you publish this page and paste the public URL into
Google Play Console → App content → Privacy policy.
Contact email: YOUR_EMAIL@example.com.
Legal name / developer: YOUR LEGAL NAME.
Country: India.
1. Who we are
This Privacy Policy describes how YOUR LEGAL NAME
(“we”, “us”, “our”) collects, uses, stores and shares information when you
play Uno Master League (the “App”, “Game”) on Android
(package name com.unomaster.league) and related platforms.
Uno Master League is an online and offline Uno-style card game. You can
play against bots on your device, join public matchmaking, host or join a
private room with a room code, climb a public leaderboard, claim a daily
bonus, and use Lucky Spin for in-game rewards.
By installing or using the App, you agree to this Policy. If you do not
agree, please do not use the App.
2. Summary for Google Play
This is the short version Play Console reviewers and players usually need:
We create an anonymous game account so online features work. We do not ask for your real name, email, phone number or password at sign-in.
We store a player profile (in-game name, avatar, coins, diamonds, XP, wins, daily rewards, Lucky Spin history) so your progress follows the device account.
We process matchmaking, private rooms, matches and leaderboards so you can play with other people.
We use Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, App Check / Play Integrity) to run and protect the Game.
The current release does not show ads and does not sell in-app purchases for real money. Coins, diamonds and items are virtual only.
We do not collect precise location, contacts, photos, microphone audio, SMS, or your government ID.
Other players can see your in-game name, avatar, level and public leaderboard stats.
You can ask us to delete your account and associated data (see Section 11).
3. Information we collect
We collect only what is needed to operate an online card game. We do not
require a Google, Apple, Facebook or email login.
3.1 Information you provide or that is created for your account
Data
What it is
Why
Anonymous user ID
A random Firebase Authentication identifier created on first launch. No email or password is collected for this sign-in.
A six-character private-room code and the roster of that room.
Play with friends
3.2 Information generated while you play
Matchmaking / lobby data: your user ID, display name, avatar, level, selected game mode (Classic, 2v2, Go Wild), seat count, stake tier (Casual / Pro / Elite), presence heartbeats, and whether a seat is a human or a bot.
Match data: match ID, seats, team assignment, shared deck seed, variant, status (starting / playing / finished). This lets every device deal the same table.
Private room data: host, guests, ready status, format, stake, bots, heartbeats, and the match created when the host starts.
Gameplay on your device: cards, turns, scores and sound effects are processed locally. The App does not currently upload a full move-by-move chat log of every card played.
Quick chat: only preset phrases and emoji reactions (for example “Nice move!”, “Good game”, thumbs-up). There is no free-text chat box. These lines are for the table; we do not operate a stored private-message inbox.
Diagnostics timestamps: created-at / updated-at / last-level-up / last-daily-claim server times on your profile.
3.3 Information from Google services on your device
Internet connection: the App needs network access for sign-in, profiles, matchmaking, rooms, leaderboards, Lucky Spin and analytics. Offline, you can still play locally against bots if sign-in fails.
Firebase Analytics: app opens, feature use (including Lucky Spin events such as spin started, completed, failed, reward type and amount), device and app-instance identifiers, approximate device/app metadata (for example OS version, app version, country/language as provided by Google Analytics), and — where Google Play services make it available — an advertising ID used by Analytics, even though the Game does not currently show ads.
Firebase App Check / Play Integrity: an attestation that the request comes from a genuine build of this App on a genuine Android device. This is used to protect Cloud Functions (for example Lucky Spin) from abuse. It can include device-integrity and app-integrity signals processed by Google.
Google Play / Android: standard install, update and crash reports that Google Play may collect as the store operator, under Google’s own policies. We do not currently ship a separate Crashlytics SDK.
3.4 Information we do not collect
Legal name, email address, phone number, postal address, date of birth, or government ID (unless you later email us for support — that email is only used to answer you).
Passwords (anonymous sign-in has none).
Precise or approximate GPS location collected by the App.
Contacts, call logs, SMS, calendar, photos, camera, microphone recordings, files, or health data.
Payment card numbers or Google Play purchase receipts (the current App has no paid in-app products).
Children’s real-world identity information.
4. How we use information
We use the information above to:
Run the Game: sign you in anonymously, load your profile, deal tables, match you with other players or bots, host private rooms, settle coins/XP after a round, show the leaderboard, grant daily bonuses and Lucky Spin rewards.
Keep the Game fair and secure: App Check / Play Integrity, server-side Lucky Spin (the client cannot mint coins), anti-duplication of spins, Firestore security rules, and filling empty seats with bots so lobbies are not stuck.
Personalise the experience: remember avatar, currencies, level, which room tiers you can enter, and whether Lucky Spin is ready.
Measure and improve the App: Firebase Analytics events (especially Lucky Spin) so we can see whether features work and where they fail. Analytics events do not include your display name or wallet balance as event parameters.
Comply with law and Google Play policies, and respond to support or deletion requests.
We do not use your data to sell you third-party products, and we do not sell personal information.
5. How we share information
5.1 Other players (visible in the Game)
Because this is a multiplayer game, some profile data is shown to other people:
In matchmaking lobbies, private rooms and at the table: display name, avatar, level, team, human/bot flag, ready/presence status.
On the public leaderboard (top players): display name, avatar, coins, wins and/or XP, depending on the board you open.
Preset quick-chat lines and emoji may be shown to others seated at the same table during play.
Do not put personal information (real name, address, phone, social accounts) into any name or room-related field if those become editable in a later update.
5.2 Service providers (processors)
We use Google to host and operate backend services:
Provider
Service
Role
Google LLC / Firebase
Firebase Authentication
Anonymous user IDs
Google LLC / Firebase
Cloud Firestore
Profiles, lobbies, rooms, matches, leaderboards, spin history
Google LLC / Firebase
Cloud Functions
Lucky Spin eligibility, rewards, anti-abuse
Google LLC / Firebase
Google Analytics for Firebase
Usage analytics and app-instance identifiers
Google LLC
Firebase App Check + Play Integrity
Confirm genuine app/device; reduce fraud
Google LLC
Google Play
Distribution, installs, store listing, policy enforcement
We may disclose information if required by law, to protect the Game against
fraud or abuse, or to defend legal rights. We do not sell player lists.
6. Google Play Data safety mapping
Use this section when you fill in Play Console → App content → Data safety.
“Collected” means we (or our processors, mainly Google Firebase) receive it
to provide the Game. “Shared” here means shared with other players or
independent third parties, not ordinary service-provider processing.
Play category
Collected?
Shared with other players / third parties?
Purpose
Name (in-game display name)
Yes
Yes — other players and public leaderboard
App functionality
User IDs (anonymous Firebase UID, app instance ID)
Yes
UID is used inside matches/rooms; not posted as a public contact
Email, phone, physical address, race, political, sexual orientation, other personal info
No
No
—
Financial info / purchase history
No (no real-money IAP in this version)
No
—
Precise / approximate location
No by the App. Analytics may infer coarse region from IP via Google.
No
Analytics (Google)
Photos, videos, audio files, calendar, contacts, files, health
No
No
—
Messages (in-app)
Preset quick-chat only; no free text stored as mail
May be shown to players at the same table
App functionality
App interactions / gameplay activity
Yes (matches, rooms, rewards, analytics events)
Match/room presence with other players; analytics with Google
App functionality, analytics
Crash logs
Not collected by a Crashlytics SDK we ship. Google Play may still collect store-level crashes.
Google Play’s own processing
App performance (store)
Diagnostics / performance
Yes, via Firebase Analytics
Processed by Google
Analytics
Device or other IDs (including advertising ID if available to Analytics)
Yes
Processed by Google Analytics / Play Integrity
Analytics, fraud prevention, app functionality
Data is used for App functionality, Analytics,
Account management and Fraud prevention, security and compliance.
Data is encrypted in transit (HTTPS). Firebase/Google apply encryption at rest
according to their platform. Account data is tied to the anonymous ID on the
device; clearing app data or uninstalling may create a new anonymous account
unless you later add a recoverable login method.
7. Advertising, purchases and virtual items
Ads: this version does not include an ad SDK and does not show banner, interstitial or rewarded ads. Lucky Spin has a server path for a future “watch ad for an extra spin”, but the shipped client does not play ads. If we add ads later, we will update this Policy and the Data safety form before release.
Advertising ID: even without ads, Google Analytics for Firebase may read the Android advertising ID if Google Play services provide it. We do not use it to retarget you with third-party ads in this version.
In-app purchases: this version does not sell products for real money. Coins, diamonds and inventory are virtual items with no cash value, not transferable out of the Game, and can be changed, reset or removed as we operate the Game.
Uno / UNO: the Game is an independent card-game experience. This Policy does not grant trademark rights and is not a statement by Mattel or any official UNO publisher.
8. Retention
Profile and progress are kept while your anonymous account exists so you can return to the Game.
Matchmaking lobbies and private rooms are short-lived operational data (heartbeats, open queues, room codes). Stale lobbies are abandoned after a short period.
Match documents may remain so a table can be opened and for abuse review; they are not a public history feed in the App.
Lucky Spin receipts are kept to prevent duplicate rewards and to show recent rewards.
Analytics are retained according to the Google Analytics / Firebase retention settings for the project (typically a rolling window configured in the Firebase console).
When you request deletion (Section 11), we delete or anonymise profile,
spin history and account data we control, except where we must keep a
limited record (for example a deletion log or legal obligation).
9. Security
We take reasonable technical and organisational measures, including:
Anonymous authentication and Firestore security rules (you can read public profile fields needed for play; you cannot freely rewrite other players’ accounts).
Lucky Spin rewards granted only by Cloud Functions, not by the client.
Firebase App Check with Play Integrity on release builds to reduce fake clients.
HTTPS for network traffic. Release builds do not allow cleartext HTTP.
No method of transmission or storage is 100% secure. Do not share room
codes with people you do not want at your table.
10. Children
The Game is a casual card game with preset quick-chat (no free-text chat),
no real-money store in this version, and no ads in this version. We do not
knowingly collect a child’s real name, email, or other contact details.
We do not direct the App at children under 13 (or under 16 in some
countries) as a primary audience, and we do not use the collected data for
interest-based advertising to children. If you are a parent or guardian and
believe we have data about a child that should not be stored, contact us
and we will delete the associated account.
If you later enrol the App in Google Play Families / Designed for Families,
you must also follow those extra policies (including ads and analytics
restrictions). This Policy should be updated at that time.
11. Your rights and account deletion
Depending on where you live (including the EEA/UK GDPR, California CCPA/CPRA
and similar laws), you may have the right to request access, correction,
deletion, restriction, objection, portability, and to lodge a complaint
with a supervisory authority. You may also opt out of “sale” or “sharing”
of personal information; we do not sell personal information.
How to delete your Uno Master League account and data
Email YOUR_EMAIL@example.com from a message that includes the in-game display name and, if you can, the anonymous user ID shown in the App (or a screenshot of your profile).
Subject line: Uno Master League — delete my account.
We will delete the Firebase Authentication user, the Firestore profile (users/{uid}), Lucky Spin history, and related account documents we control, typically within 30 days (often sooner).
Uninstalling the App alone does not always erase server data. Please send the deletion request.
After deletion, online progress, coins, diamonds, XP and leaderboard standing for that account cannot be restored. A later install may create a new empty anonymous account.
You can also limit analytics identifiers in Android settings
(Google → Ads → Delete advertising ID / Opt out of Ads Personalization),
and you can reset the Game’s local state by clearing app storage.
Google Play Console also requires an account-deletion URL. You may point
that field at this same page (Section 11) or at a short form that emails
the same address.
12. International transfers
We are based in India. Google Firebase
may store and process data in the United States and other countries where
Google operates. Where required, Google uses contractual safeguards
(such as Standard Contractual Clauses) for those transfers. See Google’s
privacy documentation for details.
13. Changes
We may update this Policy when we add features (for example rewarded ads,
Google sign-in, or a real-money store). The “Last updated” date at the top
will change. Material changes will be posted on this page. Continued use
of the App after an update means you accept the revised Policy.
14. Contact
Email: kingverse.games@gmail.com
For Google’s processing as a service provider, you may also review
Google Privacy Policy.