King (Rifki) — Privacy Policy
King is a classic trick-taking card game for iPhone with 7 contract types, also known as Barbu, Kierki, Kingen and Rıfkı. It supports solo play against 3 computer opponents and online play in private rooms hosted on our own server at king.albooren.com.
Last updated: November 1, 2026 · Effective: November 1, 2026Summary
king.albooren.com for online rooms. There is no account sign-up, and the app does not ask for your email or phone number. Player names are chosen by you and can be any nickname.Data We Process
| Data type | Purpose | Legal basis | Retention |
|---|---|---|---|
| Advertising identifier (IDFA), only if you allow tracking in the App Tracking Transparency prompt | Personalised ads and ad measurement through Unity LevelPlay, frequency capping, fraud prevention | Consent (ATT; in the EEA, UK and Switzerland also the in-app consent dialog) | Per Unity / ironSource and mediated network retention |
| Ad request data: device model, OS version, IP address and the coarse location derived from it, ads shown and tapped | Delivering ads (non-personalised when you have not allowed tracking), fraud prevention | Legitimate interests (non-personalised ads); consent (personalised ads) | Per Unity / ironSource and mediated network retention |
Firebase Analytics: App Instance ID, automatically collected events (such as first_open, session_start, app_update), the "Remove Ads" purchase event (product, price, currency), ad impression events (ad network, ad format, ad unit, estimated revenue), device model, OS version, app version, country-level location | Usage statistics, measuring ad and purchase revenue | Consent (Google Consent Mode is "granted" only after you allow tracking and, in the EEA, UK and Switzerland, agree in the consent dialog) | Event and user-level data currently set to 2 months, the shortest Firebase offers. Aggregated reports are kept by Google and do not identify users |
| Firebase Installation ID (Remote Config) | Fetching app settings such as ad pacing and safety switches | Legitimate interests | Per Firebase retention |
| Crash reports (stack trace, device model, OS version, app version, locale, time of crash, Firebase Installation ID) — App Store and TestFlight builds only | Finding and fixing the bugs that crash the app | Legitimate interests | Up to 90 days (Firebase Crashlytics) |
| On your device only: settings, player name, saved game, game history, online rejoin details, your consent answer and whether "Remove Ads" is owned | App functionality | Not sent to us | Until you delete the app |
| Online player name, shown to the other players in the same room | Online play | Performance of a contract | Server memory for the life of the room; the game server's log (see below) |
| Online room code, rejoin token and game state (hands, scores, cards played, contract choices) | Online play and reconnecting after a dropped connection | Performance of a contract | Server memory only. A room is removed 10 minutes after the last player leaves (2 minutes if nobody joined) and at the latest 3 hours after its last game started |
| IP address when connecting to king.albooren.com | Connection, rate limiting, abuse prevention | Legitimate interests (security) | Rate-limit counters in memory for up to 10 minutes; web server access logs, deleted by automatic log rotation |
| Ad reports you send us by email (your email address, your message, the last ad's format, network, time, creative ID and auction ID, app and iOS version) | Investigating inappropriate ads with the ad network | Legitimate interests | Until the report is resolved |
The app does not collect your real name, email address, phone number, precise location, contacts, photos, microphone or camera data. We only receive your email address if you write to us.
Third-Party Services
Unity LevelPlay (advertising)
King shows banner ads and ads between hands. They are delivered by the Unity LevelPlay (ironSource) mediation SDK, which may pass an ad request to ironSource Ads, Unity Ads and other ad networks it mediates. On first launch, iOS asks whether King may track you (App Tracking Transparency). If you allow it and you are in the EEA, the UK or Switzerland, King then shows its own consent dialog. If you do not allow tracking, ads are non-personalised, the advertising identifier is not used and nothing else is asked. You can change your choice at any time in Settings → Privacy options; if tracking is turned off, that option opens the iOS settings where it can be turned on. With "Remove Ads" owned, King shows no ads and asks neither question. Ad impression reports to our analytics contain only the ad network, format, ad unit and estimated revenue. Unity privacy policy · Unity Ads & LevelPlay privacy policy.
Firebase Analytics, Remote Config and Crashlytics
Firebase Analytics tells us how the app is used and how much the ads and the purchase earn. King uses Firebase Analytics without advertising-identifier support, so Firebase does not read the IDFA. Google Consent Mode stays "denied" until you allow tracking and, where required, agree in the consent dialog. Event data and user-level data are currently kept for 2 months, the shortest period Firebase offers, in line with GDPR Art. 5(1)(e). Remote Config lets us change settings such as how often ads appear without an app update. Crashlytics sends a crash report when the app crashes; player names, game state and purchases are not included. Firebase privacy and security.
In-App Purchase
The optional king_remove_ads purchase is handled by Apple. We never see your payment details. King checks the purchase on your device using the transaction Apple signs; nothing about the purchase is sent to our server. "Restore purchases" asks Apple again.
Our Online Game Server (king.albooren.com)
Online rooms use a server we run ourselves. Endpoints used:
POST https://king.albooren.com/api/rooms— create a room and receive its codeGET https://king.albooren.com/api/rooms/{code}— check whether a room still existswss://king.albooren.com/ws/{code}— real-time game traffic (player names, cards, contracts, scores, rejoin tokens)
The server keeps rooms, player names, game state and rejoin tokens in memory only; there is no database. Rooms are private (joined by code) and have no chat. Player names are checked for offensive words on the device. The game server writes an operational log (room codes, player names, join and disconnect events); it stays on our server, is not shared and is cleared whenever the server is updated. All traffic uses TLS (HTTPS / WSS).
Report an Inappropriate Ad
Settings → Report an inappropriate ad opens a draft email to privacy@albooren.com with details of the last ad shown (format, network, time, creative ID and auction ID) and the app and iOS version. Nothing is sent unless you send the email yourself.
International Transfers
Firebase data may reach Google data centres, and ad requests may reach Unity / ironSource and the ad networks it mediates, worldwide, including the United States, under the EU–US Data Privacy Framework and Standard Contractual Clauses (GDPR Art. 46). Online play (player names, game state, rejoin tokens, IP address) goes to our server in Frankfurt, Germany, hosted by Hostinger. See the common policy — International Data Transfers section.
Analytics Deletion Request
To delete the Firebase Analytics data associated with your App Instance ID, email privacy@albooren.com with the subject "Firebase Analytics Deletion - King". Requests are submitted via the Firebase User Deletion API and processed within 30 days. The App Instance ID is not shown in the app; uninstalling King resets it, and data tied to the old ID expires under the 2-month retention above.
Children's Privacy
King is a card game for teens and adults and is not directed to children under 13 (COPPA) or 16 (GDPR Art. 8). We do not knowingly collect data from users below these ages. Contact privacy@albooren.com to report data collected from a child by mistake.
Your Rights & Deletion
Online game data is deleted when the room is removed. Deleting the app removes everything stored on your device, including your player name. To stop tracking, turn it off in iOS Settings → Privacy & Security → Tracking, or use Settings → Privacy options in King. For your full GDPR / KVKK rights, including access, rectification, portability and complaint to a supervisory authority, see the common policy.
Direct requests: privacy@albooren.com