Shift Tac Toe Privacy Policy
Effective date: January 1, 2026
This policy explains how Shift Tac Toe handles information in its web and Android versions.
Information Stored On Your Device
Shift Tac Toe stores limited information in your browser profile or app installation:
your most recently selected game mode;
your generated display name;
an app-generated identifier used to participate in online multiplayer; and
during an unfinished forfeit-and-mode-switch transition, serialized game information needed to recover or safely complete that transition.
This information remains on the device or in the browser profile until the app removes it or you clear the app or browser data. It is not an account and does not provide cross-device recovery. Local storage is not represented as encrypted storage.
Local training game progress is held for the current app session and is not uploaded as online multiplayer data.
Online Multiplayer
When you use online multiplayer, Shift Tac Toe sends information to the Shift Tac Toe service so it can match players and operate games. This service information can include:
your display name;
the app-generated multiplayer identifier;
game identifiers;
moves, current game state, results, and rematch choices; and
timestamps used for matchmaking, turns, results, and service operation.
The other player receives the display name and game information required to participate in the same match. Shift Tac Toe does not require a user account.
Online multiplayer records are stored in Google Cloud Firestore and processed through hosting and Firebase or Google Cloud infrastructure used to provide the service. The repository does not enforce an automatic deletion period for online game records.
Diagnostics
Android builds can use Google Firebase Crashlytics when crash reporting is enabled for that build. Crashlytics can process crash reports, diagnostic information, device and app details, and build context needed to investigate failures. Diagnostic retention is controlled by the deployed Firebase configuration and Google's applicable terms.
The web configuration does not initialize Crashlytics. The application does not include a standalone analytics service.
Android Advertising And Privacy Choices
Shift Tac Toe's declared audience is age 13 and older, with worldwide availability. This declaration does not verify an individual player's age or establish that the player is above the applicable regional age of consent. Advertising configuration must protect minors and players whose age is unknown without treating them as confirmed adults.
Android builds include the Google Mobile Ads SDK for AdMob integration. When advertising is enabled and the applicable privacy outcome permits requests, the app requests non-personalized adaptive banner ads. Every advertising session uses Google's under-age-of-consent restrictions in both its User Messaging Platform (UMP) and Google Mobile Ads as conservative treatment for unknown age. This is not an individual age check or a child-directed classification. The Google Mobile Ads restriction prevents transmission of the Android advertising ID (AAID) in these ad requests. Non-personalized ads can still involve processing device and app information, IP address, approximate location derived from technical signals, and ad interactions. Google and its advertising partners may process this information to provide, measure, secure, and improve advertising. Processing and permitted ad treatment depend on the applicable privacy choices, audience protections, regional requirements, and provider configuration. Advertising retention is controlled by the provider's configuration and applicable policies; this repository does not establish a single retention period.
The app requires a successful current-session UMP privacy check and UMP permission to request ads before it initializes Google Mobile Ads or requests ads. A restricted privacy assessment may permit requests without a consent form. When required by the provider, Advertising privacy choices is available in the Android header menu. Privacy checks or forms that fail or leave permission unresolved do not authorize advertising requests, and gameplay remains available without ads.
The web app does not initialize advertising services or request ads. Android builds with advertising disabled do not invoke advertising or UMP privacy services.
For information about Google's processing, see Google's Business Data Responsibility page and How Google uses information from sites or apps that use its services.
Sharing And Service Providers
Shift Tac Toe does not sell information. Information is shared only as needed to operate the features described above:
with the opponent in an online match for required display and game information;
with hosting, Firebase, and Google Cloud providers that process service or diagnostic data;
with Google and its advertising partners for permitted Android advertising as described above; and
when required by law or necessary to protect the service, users, or others.
Retention And Deletion
Local information remains until Shift Tac Toe removes it or you clear the relevant app or browser data. No repository-enforced automatic deletion period applies to online multiplayer records. Diagnostic retention depends on Firebase configuration and terms.
You may send a deletion inquiry to the contact below. Because multiplayer uses an app-generated identifier rather than an account, it may not be possible to reliably identify or match an anonymous online record to your request. A request therefore does not guarantee that a particular anonymous record can be located or deleted.
Security
Shift Tac Toe uses reasonable technical and operational measures appropriate to the service. No method of storage or transmission is completely secure, and this policy does not guarantee absolute security.
Changes To This Policy
This policy may be updated when Shift Tac Toe's behavior, providers, distribution, or legal requirements change. The effective date above identifies the current version.
Contact
For privacy questions or deletion inquiries, contact Michal Kapusnik at michal.kapusnik@gmail.com.