Privacy Policy

Last updated: October 17, 2026

This policy explains how Xo Duel handles information when you play locally or online. For privacy questions, contact info@quantivoworks.com.

Local play

Local two-player games and games against the computer work without the game server. Your local scores, difficulty, appearance, sound and haptic settings are saved on your device. The app does not upload those local scores.

Online play

When you start online play, the server issues a random guest credential. The app stores it in your device's Keychain. The server stores a hash of that credential, its expiry and the room associated with it. We do not ask for a name, email address, phone number or password to play.

The game server stores room membership, invite codes, moves and board state, turn information, timestamps, reconnection status, accepted request identifiers, round results and online win/draw/loss totals. These records are associated with your guest session so we can run the match, reconnect players, prevent duplicate moves and count scores correctly. Other room members see the shared game state and their own mark, not your credential.

Network and security information

The server and its hosting infrastructure process IP addresses, request paths, response codes and connection timing to deliver requests, prevent abuse and diagnose service failures. Server/proxy logs may retain technical request information. We do not use this information for advertising or cross-app tracking. Do not put private information in room codes or send guest tokens to support.

Retention

Guest sessions expire 24 hours after creation or their latest renewal. Active use renews them. Waiting room invitations expire after ten minutes; joined rooms have a 24-hour lifetime, and closed rooms normally expire after ten minutes. The server periodically removes expired records. Detailed round results are normally removed after seven days. Guest online score totals remain until that guest session expires and is removed.

Local settings, local scores and cached online totals remain on the device until reset or removed. Keychain credentials may persist according to iOS behavior and are not an account-recovery mechanism. Server backups and infrastructure logs may retain historical data under the operator's backup/log retention settings and are not immediately changed by deleting active records.

Advertising, analytics and permissions

Xo Duel contains no advertising SDK or third-party analytics SDK and does not sell personal information. It does not request access to contacts, photos, the microphone or precise location. It does not use an advertising identifier or track you across other companies' apps or websites.

Service providers and support

Hosting, database, network and email providers may process information to operate the service. If you email support, your email address and the information you voluntarily provide are used to respond to your request. Please avoid sending passwords, tokens or other sensitive information.

Your choices

You can play locally without using online multiplayer. You can reset local statistics in Settings/Statistics; this does not reset server online scores. Leaving a room ends that room but does not immediately erase all retained results. Xo Duel has no registered account and no account-recovery process. For a privacy request, email support with the approximate time of the game and any room reference you still have; do not share your token. We may need information to locate and verify the relevant records. Depending on your location, you may have rights to access, correction, deletion or to contact your local data protection authority.

Changes and contact

We may update this policy as the app changes. Material changes will be reflected here with an updated date. Privacy and support contact: info@quantivoworks.com.