Privacy Policy
The short version
- There is no sign-up. The game never asks for your email, phone number, photos, contacts or location. Players 13 or over (18 or over on phones set to the India region) may type their own player name if they want to; children only pick names from a safe list.
- The app makes a random guest ID on your phone. Our server keeps your Player ID, the player name and character you picked, your game progress and your purchase records.
- Signing in with Google or Apple is optional and only saves your progress for a new phone. We keep only the user ID Google or Apple gives us (and, for Apple, a token used only to disconnect the app from your Apple ID when you delete your account), never your name or email. Child accounts cannot sign in.
- Ads come from Google AdMob. Players under 13 only get child-directed, non-personalised ads, and players under 16 never get personalised ads.
- We count how the game is used as daily totals on our own server, only to run and improve the game, never for ads.
- There is no chat. Players talk with preset emotes only, and every player name is picked from a safe list or checked by our name filter.
- If you contact us (by email, the contact page or the form in the app), we use your email address only to answer you. Children cannot use the form in the app.
- We do not sell personal information.
- You can delete your account at any time in Settings > Delete account, or by asking us on the web.
1Who we are
3D Ludo is published by Manisha Yadav, based in India, who operates the app and holds its Apple App Store, Google Play (developer account "Techienoid") and Google AdMob accounts. She is responsible for your personal data under this policy (the "data controller", or "data fiduciary" under India's Digital Personal Data Protection Act). The game is created and developed by Umang Sharma, who builds and runs it for her. In this policy "we", "us" and "our" mean Manisha Yadav as publisher, together with Umang Sharma as developer.
For any privacy question, a data request, a complaint or account deletion, write to techienoid@gmail.com or use our contact page. This address is also our contact for grievances under Indian law. Please include your player code or Player ID, which you find in the game under Settings > About. We hold no email addresses for players, and player names are not unique, so this is how we find your account.
2What we collect and why
3D Ludo creates a guest account automatically the first time you play. Here is everything our own server stores, and why.
| What | Details | Why |
|---|---|---|
| Guest ID and Player ID | A random ID made by the app on your phone the first time you play (our server stores only a scrambled one-way hash of it), and a random Player ID for your account (the short "player code" in Settings is made from it). Neither is your phone's serial number or advertising ID. | To sign you in without a password and keep your progress on your account. |
| Player name and look | Your player name (picked from our list of generated names or, for players who are not on a child account, typed by you; a typed name can be a real first name and must pass our name filter, which blocks links, contact details and rude words), your avatar, frame and character look, and the dice, pieces and board you use. | To show you to other players in online matches and on the weekly leaderboard. |
| Game progress | Level and XP, coins, gems, trophies, game stats, items you own and use, daily rewards, spins, chests, missions, achievements, weekly league standings and prizes, results of online matches and their entry fees, records of rewarded ads you watched, promo codes you redeemed, and when these happened (for example when you started playing and when you last opened the game). | To run the game, save your progress, give rewards fairly and stop cheating. |
| Under-13 setting | A yes or no: is the player a child (under 13, or under 18 on phones set to the India region), based on the age screen. The birth month and year stay on your phone and are never sent to us. | To give children the child experience (see Children's privacy). |
| App build and platform | Which build of the app you use (store or test build) and whether it runs on iPhone, Android or the web. | To support players and find test accounts. |
| Google or Apple sign-in (optional) | Only if you choose Save progress and sign in with Google or Apple: which of the two you used and the user ID it gives us for this app. Sign-in shares no name, email or profile details with us. For Sign in with Apple we also keep, encrypted, a token Apple gives us, used only to tell Apple to disconnect 3D Ludo from your Apple ID when you delete your account. Child accounts cannot sign in. | To give you your progress back on a new or reset phone. |
| Purchase records | Which products you bought (for example Remove Ads, a coin or gem pack, or a VIP subscription), the store's transaction ID, when it was granted, and for VIP whether it is active, in a free trial and until when. We never see your card or bank details. | To give you what you paid for, never twice, and to restore purchases. |
| Usage statistics | When things happen in the game, for example that the game was opened, a tutorial step or a match was started or finished, an ad was shown, or the shop, VIP or league screen was opened, with the app version and platform. These events contain only fixed values chosen by the game, never anything you type. Our server adds them straight into daily totals and keeps no list of who did what. To count how many different players play each day and how many come back, it also keeps for each day a short scrambled code made from your Player ID, which cannot be turned back into it. | To see which parts of the game work and fix the ones that do not. Never used for advertising, never shared or sold. |
| Crash reports | When the app hits an error it sends the error message and technical trace, when it happened, the app version and build number, platform, OS version, device model, screen size and language, which screen of the game was open (for example "online Ludo match") and the last few screens and game steps before the error (for example "Home, then match started, then app went to the background"), each with how many seconds before the error it happened. These are fixed names chosen by the game, never your name or anything you type. Our server removes anything in the error text that looks like personal information and never stores your IP address with a report. If you are signed in, it keeps a short scrambled code made from your Player ID, only to count how many players hit the same bug. | To find and fix bugs. |
| Notification token (optional, 13 and older) | Only if you allow notifications: a token for your device, your Player ID, your phone's platform, language and time zone (see Notifications). | To send at most one reminder a day, in your language, never at night. |
| Messages you send us | If you use the contact form (on this website or in the app, 13 and older): the topic, your email address, your name if you give it, your message and, if you add it, your player code. Messages from the app also carry the app version, platform and language. If you email us, we receive your email address and whatever you write. | To answer you and handle your request. Never used for marketing. |
| IP address | Seen by our server for every request (and by Cloudflare, our host). We use it for about a minute to limit abuse (for example too many sign-ups or messages from one address) and never store it in our database. | Security and abuse prevention. |
| Ad data (collected by Google) | Google AdMob collects device identifiers, your IP address and the approximate location it reveals, device information, ad interactions and diagnostics. See Advertising. | To show and measure ads and prevent ad fraud. Ads keep 3D Ludo free. |
What other players see
In online matches and on the weekly leaderboard, other players see your player name, avatar, frame, character look and level, the dice and pieces you use, and your trophies for the week. Their app also receives your Player ID so the game can tell players apart, but it is not shown on screen. Nobody can send you messages. To keep games quick, online matches may include computer-controlled players when no one else is available.
Kept only on your phone
The app keeps some things on your phone that are never sent to us: your age answer (birth month and year) and your sound, music, vibration, language and graphics settings. It also keeps a copy of your profile for offline play, your sign-in token, and the reminders it schedules on the phone itself.
Invites
Invites use your phone's own share sheet. You choose the app and the person; we do not see your contacts or who you sent the invite to. Children need a grown-up to share an invite.
Our legal reasons (EEA, UK and Switzerland)
- Providing the game you asked for (contract): guest ID and Player ID, name and look, game progress, the under-13 setting, purchase records, rewarded-ad checks, and the Google or Apple user ID if you choose to save your progress.
- Our legitimate interests in keeping the game working, fair, secure and free, and in answering you: crash reports, usage statistics (daily totals only), anti-cheat and fraud checks (including keeping used purchase IDs after an account is deleted), rate limits, non-personalised ads, and messages you send us.
- Your consent: personalised ads (Google's consent form), on iPhone tracking (Apple's prompt), and push notifications (your phone's permission prompt). You can withdraw it at any time.
- Legal obligations: answering your privacy requests, keeping records the law requires, and lawful requests from authorities.
In India we process personal data on the basis of your consent given when you start the game and for the legitimate uses the law allows. You do not have to give us anything, but without the guest ID the game cannot save your progress or let you play online. We do not make decisions about you by purely automated means that have legal or similarly important effects.
3What we do not collect
- No real names, email addresses, phone numbers or passwords for playing. There is no sign-up. (Only if you contact us do we receive the email address and name you choose to give.)
- No contacts, photos, camera, microphone, files or calendar.
- No precise (GPS) location.
- No chat or messages between players: only preset emotes, and names from a fixed list.
- No payment card or bank details (Apple and Google handle payment).
- No third-party analytics, attribution or social media SDKs, and no web fonts or trackers on this website. Apart from our own server, only the companies listed in section 7 receive data.
4Advertising
3D Ludo shows ads from Google AdMob: banners, occasional full-screen ads (for example after some matches), and optional rewarded ads you choose to watch for a bonus. Ads start only after the age screen, so no ad request is made for a player whose age group is unknown. Google collects data such as device identifiers (the Android advertising ID, or on iPhone the IDFA if you allow tracking), your IP address and the approximate location it reveals, device information, how you interact with ads, and diagnostics. Google uses this to show and measure ads and prevent fraud, under its own privacy policy. Learn more: How Google uses information from sites or apps that use its services.
When you watch a rewarded ad, the app passes your Player ID and a random one-time code to Google, so that Google can confirm to our server that the ad was watched before we give you the reward.
Players under 13 (child accounts)
Ad requests are tagged as child-directed (Google's "tag for child-directed treatment"). Under Google's rules these ads are not personalised, do not use remarketing, and we limit them to general-audience (G-rated) content. Google AdMob is a Google Play Families self-certified ads SDK. Children never see the iPhone tracking prompt or the ad consent form.
Players aged 13 to 15
Ad requests are tagged as "under the age of consent", so their ads are never personalised. They never see the tracking prompt or the consent form.
Players 16 and older: your choices
- In the EEA, the UK and Switzerland, Google's consent form (shown when the game starts) asks how ads may use your data and lists the ad partners. If you refuse personalised ads, Google shows non-personalised or limited ads.
- In US states with privacy laws, Google's privacy form lets you opt out of the "sale" or "sharing" of your personal information for advertising.
- You can change your choice at any time in Settings > Ad choices (shown wherever Google's rules require it).
- On iPhone, Apple's tracking prompt asks whether 3D Ludo may use your advertising identifier. The game works the same either way. Change it any time in iOS Settings > Privacy & Security > Tracking.
- On Android, you can reset or delete your advertising ID in your phone's Settings > Privacy > Ads (the menu depends on your phone).
Remove Ads and an active VIP subscription turn off banners and full-screen ads. Rewarded ads stay available as an option.
5Purchases and VIP
In-app purchases are optional and are processed by Apple (App Store, In-App Purchase) or Google (Google Play Billing) under their own terms and privacy policies. We never see your payment details. Purchases include coin and gem packs, a Starter Pack, Remove Ads, and the VIP auto-renewing subscriptions (VIP Weekly, which may start with a 3-day free trial for eligible players, and VIP Monthly). See our Terms of Use for how subscriptions renew and how to cancel.
We use RevenueCat to check that a purchase is real, to know whether a VIP subscription is active and to restore purchases. RevenueCat's code in the app receives your Player ID, your store purchase receipts and purchase history, subscription status, and the basic technical details it needs to talk to the store (such as app version, OS version, store country and your IP address). RevenueCat handles this for us as our service provider. When you delete your account, we ask RevenueCat to delete its record of you.
For child accounts, purchases and the VIP screen are behind a grown-up check (a parental gate), and the store's own parental controls (Apple Ask to Buy, Google Family Link purchase approvals) also apply.
6Notifications
Reminders (for example "your daily reward is ready") are scheduled on your phone itself, and we receive nothing about them.
Push notifications (for example "the weekly league ends soon" or a small welcome-back gift) are sent through Google Firebase Cloud Messaging, currently on Android only, and only to players aged 13 or over (18 or over on phones set to the India region) who allow notifications. For this we store a notification token for your device, your Player ID, your phone's platform, language and time zone, so we can send messages in your language and never at night. We send at most one campaign message a day. Occasionally the developer may send a single test message to check that notifications work. The token is deleted when you turn notifications off, delete your account, or it stops working. Players with a child account never get push notifications.
You can turn reminders and notifications off in the game's Settings or in your phone's settings.
7Service providers and other companies
| Company | What it does and receives | Its policy |
|---|---|---|
| Cloudflare, Inc. | Hosts our game server, database (Cloudflare Workers and D1) and this website. Processes everything our server stores, and sees IP addresses. Service provider (processor). | cloudflare.com/privacypolicy |
| RevenueCat, Inc. | Checks purchases and subscriptions (see section 5). Service provider (processor). | revenuecat.com/privacy |
| Google (AdMob) | Ads, ad measurement and the consent form (see section 4). Acts as an independent controller for its own uses. | policies.google.com/privacy · Google advertising |
| Google (Firebase Cloud Messaging) | Delivers push notifications to Android phones (notification token and the message). Service provider (processor). | firebase.google.com/support/privacy |
| Google (Google Play) and Apple (App Store) | Distribute the app and process payments and refunds, under their own terms. | Google · Apple |
| Google and Apple sign-in (optional) | Sign in with Google or Sign in with Apple, only if you choose Save progress. Tells our server only that the sign-in is real and your user ID for this app. | Google · Apple |
Our service providers use data only to provide their service to us, under data processing terms that require them to keep it secure. We may also disclose information if the law requires it, to protect players' safety or our rights, or if the game is ever transferred to a new owner (who would have to keep this policy's promises).
This website sets no cookies and runs no scripts or analytics. Its contact form sends what you type to our server (see section 2).
8How long we keep data
| Data | How long we keep it |
|---|---|
| Your account and game data | Until you delete the account, or until it has had no activity for 24 months (12 months for child accounts), when it is deleted automatically in the same way. If you uninstall the app without deleting your account, it can no longer be opened from any phone; its data stays until the inactivity limit or until you ask us to delete it. |
| Google or Apple sign-in | Until the account is deleted. Removed at once if the account becomes a child account. |
| Notification tokens | Until you turn notifications off, delete the account, or the token stops working. |
| Crash reports | 30 days, then removed by a weekly clean-up (at most about 5 weeks). |
| Usage statistics | Daily totals, which are not about any one player: about 13 months. The daily scrambled player codes: 30 days, and deleted at once with your account. |
| Messages you send us | Contact form messages: until we have handled them, then deleted about 12 months later. Emails: as long as we need to handle your request and show that we did. Ask us any time to delete them sooner. |
| Purchase records after deletion | Only the store transaction ID, product and date, no longer linked to any player, while the game runs, so the same purchase can never be claimed twice (and for tax and accounting records where the law requires them). |
| Deleted account marker | The deleted Player ID and deletion time, so old sign-ins stop working at once. Removed after about 1 year. |
| Online match in progress | Removed about 10 minutes after the match ends (the result is saved with your game data). |
| IP addresses | Used for about a minute in rate-limit counters; never written to our database. |
9Children's privacy
3D Ludo is a family game for a mixed audience of children and adults. We built a separate child experience and designed it to follow the US Children's Online Privacy Protection Act (COPPA), the GDPR's rules for children (including Article 8 and the UK Age Appropriate Design Code), India's Digital Personal Data Protection Act, the Google Play Families Policy and Apple's App Store rules for apps used by kids.
How we know a player is a child
The first time the game starts, a neutral age screen asks for birth month and year, without hinting at any age limit. The answer stays on the phone; our server only learns whether the player is a child. Players under 13 get the child experience everywhere, and on phones set to the India region so do players under 18. Once an account is a child account, it stays one.
What we collect from child accounts
Only what the game needs to run, stay fair and get fixed, used for these internal operations only:
- the random guest ID (stored as a hash) and Player ID;
- the generated player name and the character, avatar and items chosen;
- game progress, match results and league standings;
- the child yes/no setting;
- purchase records, only if a grown-up approves a purchase;
- crash reports and usage statistics (daily totals, as for everyone);
- the technical data Google needs to deliver and count child-directed ads (see below).
What we never collect from child accounts
- No names, email addresses, phone numbers, photos, voice, location or any free text. Names come from a fixed list.
- No chat or messages with other players (preset emotes only).
- No Google or Apple sign-in: the option is not shown.
- No push notifications and no notification tokens (only on-phone reminders, if allowed).
- No contact form: the app asks children to get a grown-up, who can email us after a grown-up check.
- No personalised ads, no remarketing, no tracking prompt and no ad consent form.
- No data sold, and no profile of a child built for advertising.
Ads for child accounts
Only child-directed, non-personalised, G-rated ads from Google AdMob, a Families self-certified ads SDK. To deliver and count these ads, Google still receives technical data such as the IP address and device information, and the Player ID when a rewarded ad is watched.
Grown-up checks
For child accounts, purchases, the VIP screen, sharing invites, emailing us, and the links from Settings to our web pages (this policy, the Terms of Use and the help pages) are behind a grown-up check.
Parents' rights
Parents and guardians can, at any time:
- review what we hold about their child: email techienoid@gmail.com with the player code or Player ID from Settings > About;
- have it deleted: in the app with Settings > Delete account, or by email (see how to delete an account);
- refuse further collection: deleting the account and the app stops all further collection.
To protect children, we may ask for a detail only the player can see in the game before we act on a request. If you believe we have collected information from a child in a way this policy does not describe, contact us and we will delete it.
10Your rights
Wherever you live, you can ask us to:
- see the data we hold about your account, and get a copy of it;
- correct it;
- delete it (in the app, or by asking us);
- object to or restrict how we use it, and withdraw consent (personalised ads in Settings > Ad choices; notifications in Settings or your phone's settings).
EEA, UK and Switzerland (GDPR and UK GDPR): you have all the rights above, including data portability, and you can complain to your local data protection authority (in the UK, the Information Commissioner's Office).
India (Digital Personal Data Protection Act, 2023): you can ask for a summary of your data and how it is used, correction and erasure, nominate someone to exercise your rights if you cannot, and raise a grievance with us at techienoid@gmail.com. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
California and other US states (CCPA/CPRA and similar laws): in the last 12 months we collected these categories of personal information: identifiers (guest ID and Player ID, a player name you typed yourself, the Google or Apple user ID if you choose to sign in, notification tokens; Google also collects the advertising ID and IP address), commercial information (purchase records), internet or other electronic activity (game progress and usage statistics; ad interactions collected by Google), approximate location (worked out by Google from your IP address), age group (the child setting) and, if you contact us, your email address and message. We get it from you and your device, use it for the reasons in section 2, and disclose it only to the companies in section 7. We do not collect sensitive personal information as these laws define it.
We do not sell personal information. Personalised ads from Google may count as "sharing" for cross-context behavioural advertising under California law; you can opt out in Settings > Ad choices. We do not sell or share the personal information of anyone we know is under 16: they never get personalised ads. You can have an authorised agent make a request for you. We will not treat you differently for using your rights.
How to use your rights: email techienoid@gmail.com or use the contact page, with your player code or Player ID. Because we hold no email addresses for players and other players' apps can receive a Player ID, so to protect you we may ask for one more detail that only you can see in the game, such as your coin balance or level. We answer within 30 days (sooner where the law requires).
11Deleting your account
- In the app: open Settings > Delete account (at the bottom), then confirm twice. Your account and its server data are deleted straight away, and the game starts over on your phone. This needs an internet connection.
- Without the app: follow the steps on our account deletion page. We handle emailed requests within 30 days.
The account deletion page lists exactly what is deleted and the little that is kept. Deleting the app does not cancel a VIP subscription: cancel it in your App Store or Google Play account.
12Security
All connections between the app and our server are encrypted (HTTPS). Sign-in uses signed tokens instead of passwords, Google and Apple sign-ins are checked against their published keys, the guest ID is stored only as a one-way hash, our admin tools need a secret key and log every action, and our server limits how fast requests can be made. We keep as little data as possible. No system is perfectly secure. If we learn of a breach that affects you, we will act quickly, tell the authorities where the law requires, and tell players in the app and on this website.
13International transfers
We are based in India, and our service providers (Cloudflare, RevenueCat and Google) may process data in other countries, including the United States and in data centres close to you. Where the law requires it, these transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses in the providers' data processing terms.
14Changes to this policy
If we change this policy, we will post the new version on this page and update the date at the top. If a change affects how we use data we already hold, we will tell you in the app before it takes effect and ask for consent where the law requires it (for child accounts, a parent's consent).
15Contact us
Manisha Yadav (publisher of 3D Ludo, responsible for your data), India
Game created and developed by Umang Sharma
Email: techienoid@gmail.com
Contact form: 3dludo.pages.dev/contact