COUNTRY CALL

Privacy policy

Effective November 5, 2026

This policy describes the Country Call game and its multiplayer service. For privacy questions, contact b@aught.digital.

Playing on your device

Solo and Pass & Play run on your device. If you use Cloud Saves, we store the game progress you choose to send, which can include campaign progress, scores, passport stamps and names entered for a saved table. You can approve a browser link from Country Call on your device. Link codes expire after ten minutes and browser access expires after seven days. Disconnect browsers in Cloud Saves to revoke their access. Deleting your online account also erases the cloud copy. Your local copies remain on your devices. When you open online play, your selected profile name may be used to create your public username; this can come from a local traveller name or your Game Center display name. Your selected avatar and table colour are also sent to the room service and shown to other players. If you host a public online table, the first nationality you selected is sent to the room service and shown to other players as the table illustration. Your other nationality choices stay on your device. If you enable optional gameplay analytics, the activity described below is also sent to our analytics service when a connection is available. Device backups may include local game data under your Apple account's backup settings.

Optional gameplay analytics

On first launch, you can choose whether to share gameplay analytics. Sharing is optional and does not affect play. Before you choose to share, the app does not send analytics events. In Privacy & Support, you can change your choice or turn sharing off and request deletion of your analytics history.

If enabled, the app sends a random installation identifier, app version and platform, a country-level network region, session and active-play timings, country and category deals, ranking actions, scores, game completion, matchmaking and connection outcomes, purchase outcomes, and app performance and error fingerprints. Traveller names, nationality selections, contacts, precise location and raw error messages are excluded. The identifier is separate from your online guest credential and is not used to track you across apps.

Events are saved on your device while offline and retried later. We use Cloudflare Workers and a dedicated D1 database to store and analyze this information. Access to the dashboard is restricted. Individual analytics events and purchase records are retained for up to 400 days. While an installation remains active, its original first-observed date and basic cohort information are retained to measure longer-term return; inactive installation records expire after 400 days without activity. When sharing is turned off, queued events are cleared immediately, further collection stops, and the app retries deletion of your server history when a connection is available. Keep the app installed until an offline deletion request completes.

For consenting players, the app may send Apple-signed purchase transaction information to verify purchase outcomes. The analytics service retains transaction identifiers, product, currency, price, purchase date and revocation status, rather than the signed receipt. Restoring a purchase does not count as a second purchase. Apple processes payments under its own terms.

Advertising

Mobile builds may display ads through Google AdMob and Unity Ads, with Unity Ads participating through AdMob mediation. Advertising providers may process IP addresses and approximate location, device and advertising identifiers where permitted, ad views and interactions, and diagnostic and performance information to deliver, measure and protect advertising. We do not pass local traveller names, nationality choices, contacts or your online guest credential to advertising providers.

Advertising privacy choices are separate from optional gameplay analytics. Before requesting ads with our own ad units, the app uses Google's User Messaging Platform to check applicable privacy choices and show required messages. You can reopen advertising privacy choices in Privacy & Support. Where offered, Apple's tracking permission controls tracking across other companies' apps and websites; denying it does not prevent you from playing. Ads need an internet connection, and gameplay continues when an ad is unavailable. Development builds may use sample ads for testing.

See Google's privacy policy, how Google uses information from partner apps, and Unity's game player and app user privacy policy. Advertising providers manage their own retention and privacy requests under those policies. Turning off our optional gameplay analytics does not by itself change your advertising privacy choices.

Online play

Opening online play creates a random guest credential stored on your device. Our server stores a hash of that credential, a public username, last sign-in activity, table membership, game rules, country and category deals, calls, votes, scores and progress. This lets us authenticate your turns and resume your table. Online play does not ask for your real name, email address, contacts, precise location, microphone or photographs.

Players can find your username, points and rank on public leaderboards. We store season points and lifetime match statistics, your friend requests and connections, and time-limited match invitations. If you enable invite or new chapter alerts, we store a device push token and send your selected notifications through Apple. New chapter alerts require a separate opt-in. You can turn chapter alerts off in traveller settings or disable all notifications in system settings. Other people at your table see your username, public calls, scores and the information needed to play. Hidden answers and caller-only information are withheld until the game rules reveal them.

Hosting and technical data

The multiplayer service is hosted by Cloudflare Workers and SQLite-backed Durable Objects. Cloudflare processes connection information, including IP addresses and request metadata, to deliver and protect the service. We use the connecting IP to limit repeated account requests and other expensive service requests. See Cloudflare's privacy policy for its practices. This service does not use advertising cookies or cross-app tracking, and we do not sell your game data.

Retention and deletion

Waiting tables expire after five minutes without updates. Active and completed tables expire after 24 hours without updates. Guest room sessions expire after 30 days without sign-in. Your online passport (username, rankings, statistics, friends and notification registration) stays until account deletion. Invites expire after five minutes. Expired records are removed during requests and by an hourly cleanup. Hosting recovery copies may retain recently deleted data for the provider's recovery window; these are not used for normal gameplay.

In the app, open Privacy & Support → Delete online account and data. Deletion removes your online passport, social data, notification token, guest record and associated tables from all service versions and then removes the credential from your device. Shared tables close for everyone when deleted. Other players' independent guest accounts remain. Solo settings and local saved games are unaffected. Opening online play afterward creates a new guest account.

Your choices and contact

You can play Solo or Pass & Play without creating an online account. For questions about access, correction or deletion, contact b@aught.digital. If you email us, we use your email and message to respond and resolve your request; do not include your device credential.

Changes

We will update this page when our practices change and show the effective date above.