Privacy policy

Last updated 6 September 2026

Tic Tac Toe is an Android game published by Qolca Solutions. This policy explains exactly what the app stores about you, why, and how to get rid of it. It covers the app and the service it talks to at https://tictactoe.qolca.org.

You can use the app without an account

Playing against the computer and pass-and-play both work signed out, and in that mode the app sends us nothing at all — the game runs entirely on your phone and your settings stay in local storage on the device. You only need an account for online play, the leaderboard and cross-device match history.

What we collect when you sign in

Signing in uses your Google account. We never see or store your Google password. Google gives us, and we keep:

• Your Google account identifier — the stable ID Google uses for your account. This is what your data is filed under.
• Your email address, name and profile picture URL, so the app can show who you are signed in as.
• A username you choose, which is how other players find and challenge you. This is visible to other players.

While you play, we also store:

• Your record — wins, losses and draws.
• Your match history — the opponent, the mode, the result and when it was played.
• Online games — the board and whose turn it is, so a game can continue when you close the app.
• When you were last active, so opponents can see who is around.

Your sign-in token is stored only as a one-way hash, so even we cannot read it back out of the database and use it as you.

What we do not do

• No advertising, and no advertising or analytics SDKs in the app.
• No tracking you across other apps or websites.
• We do not sell or rent your data, and we do not share it with third parties for their own purposes.
• No location, contacts, camera, microphone or files. The app requests only internet access.

Who else is involved

Three companies process data on our behalf, and only to run the service: Google (sign-in), Railway (hosting) and Neon (the database). Servers and logs are in the United States. Routine server logs may briefly include your IP address, as with any website.

Other players

Other people using the app can see your username, your win/loss/draw record and the games you play against them. Your email address and your real name are never shown to other players.

How long we keep it

Until you delete your account. Sign-in sessions expire on their own, and unfinished sign-in handshakes are discarded within minutes.

Deleting your account

You can delete your account and everything listed above at any time, and you do not need our help to do it:

• In the app: Profile → Delete my account.
• On the web: https://tictactoe.qolca.org/delete-account — works even if you have already uninstalled the app.

Deletion is immediate and permanent. It removes your profile, your record, your match history and your games. Nothing is kept behind, and there is no recovery.

Children

The app is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has signed in, use the deletion link above or write to us and we will remove the account.

Changes

If this policy changes materially, the updated date at the top changes with it, and the current version always lives at this URL.

Contact

Questions about this policy, or about your data: info@qolca.org.