XO Arena operates the XO Arena mobile application (the "App") for Android and iOS. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have.
By creating an account or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
Contact: support.xoarena@gmail.com
When you register or sign in, we collect:
Email and password — if you create an account with email and password (passwords are handled by our authentication provider; we do not store your password in plain text).
Google Sign-In — if you sign in with Google, we receive basic profile information from Google (such as your name, email address, and profile picture) as permitted by your Google account settings.
We assign an internal user identifier (UID) to your account.
You may provide optional profile details, including:
Username (display name)
Profile photo (uploaded image or a preset avatar)
Phone number, gender, bio, country, and date of birth (if you choose to add them)
Profile data is stored in our cloud database and, for photos you upload, in cloud storage linked to your account.
To run matches, rankings, and your game history, we collect and store:
Match and game results (wins, losses, draws)
Ratings, rank points, streaks, and related statistics
Game history and match metadata (for example, game mode, opponents’ usernames or IDs, and timestamps)
Achievements, cosmetics selections, and in-app progression data
For online multiplayer, we also process:
Matchmaking queue data (such as your user ID, username, and device messaging token when you join online play)
Private room and live game state (room codes, player assignments, and moves during active games)
Some live multiplayer data is stored temporarily in real-time databases during active sessions.
If you use the in-app Share Code feature to invite friends, the room code is sent through your device’s native share sheet (for example, messaging or social apps). We do not receive your contacts or which apps you use to share.
If you allow push notifications, we collect and store a Firebase Cloud Messaging (FCM) device token so we can send you notifications related to the App (for example, matchmaking or game-related alerts). You can disable notifications in your device settings at any time.
We may also receive standard technical information needed to run the App (such as device type, operating system version, and general app performance data provided by our platform and service providers).
If you buy a subscription or in-app purchase:
Apple App Store or Google Play processes your payment. We do not receive your full payment card number.
RevenueCat helps us manage subscriptions and entitlements. We receive subscription status (for example, whether you have an active plan and which tier applies) and related identifiers needed to unlock features.
We may store a summary of your subscription tier in our cloud database (for example, free, basic, or pro) to provide the correct experience in the App.
The App uses Google AdMob to show ads (including banner, interstitial, and rewarded formats). AdMob and its partners may collect or receive information from your device as described in Google’s Privacy Policy and Google’s advertising policies, which may include:
Advertising or device identifiers
IP address
General usage data related to ad delivery and measurement
You can limit ad personalization through your device settings (for example, “Limit Ad Tracking” on iOS or “Opt out of Ads Personalization” on Android) and through Google Ad Settings.
We use on-device storage (for example, shared preferences) for settings such as:
Whether you completed onboarding
Theme and sound preferences
“Remember me” and similar app preferences
The last known signed-in user identifier (to improve sign-in experience)
This data stays on your device unless the App syncs related account data to our servers as described above.
We do not intentionally collect:
Government-issued ID numbers
Precise real-time location for tracking purposes
Contacts from your address book
Health or financial account credentials beyond what payment platforms handle
We do not sell your personal information.
We use the information described above to:
Create and manage your account
Provide gameplay, matchmaking, private rooms, and online multiplayer
Display profiles, leaderboards, stats, and achievements
Process subscriptions and restore purchases
Show advertisements (including rewarded ads where applicable)
Send push notifications you have allowed
Maintain security, prevent abuse, and troubleshoot issues
Respond to support requests
Improve and operate the App
If you are in the European Economic Area, the United Kingdom, or another region that requires a legal basis, we process personal data on the following grounds:
Performance of a contract — to provide the App and features you request (account, gameplay, purchases).
Legitimate interests — to secure the App, prevent fraud, improve features, and show ads where permitted (balanced against your rights).
Consent — where required, for example optional profile fields you choose to provide, push notifications, or certain advertising preferences. You may withdraw consent through device settings or by contacting us.
We use trusted service providers. They process data on our behalf according to their own policies:
Service
Purpose
Privacy information
Google Firebase
Authentication, cloud database, real-time database, file storage, push messaging
Google Sign-In
Optional social login
Google AdMob
Advertising
RevenueCat
Subscription and purchase management
Apple App Store
iOS payments
Google Play
Android payments
We encourage you to review these providers’ policies. We are not responsible for their independent practices.
We share personal information only as needed to operate the App:
Service providers — such as Google (Firebase, AdMob, Sign-In), RevenueCat, and app store platforms, under contracts or terms that limit their use of your data.
Other players — limited information visible in multiplayer contexts (for example, username and avatar in a match or room).
Legal requirements — if required by law, regulation, legal process, or to protect the rights, safety, and security of users, XO Arena, or others.
We do not sell your personal information to third parties.
We keep your information for as long as your account is active or as needed to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements.
When you request account deletion (see Section 10), we will delete or anonymize your personal data within a reasonable period, except where we must retain certain information for legal, security, or backup purposes.
Backup copies may persist for a limited time before they are overwritten.
We use reasonable technical and organizational measures designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for keeping your account credentials confidential and for activity under your account.
The App is not directed at children under 13 years of age (or under 16 in the European Economic Area where that age applies). We do not knowingly collect personal information from children below the applicable age.
If you believe a child has provided us personal information, contact us at support.xoarena@gmail.com and we will take steps to delete that information.
Depending on where you live, you may have rights to:
Access a copy of personal information we hold about you
Correct inaccurate profile information (many fields can be updated in the App)
Delete your account and associated data
Object to or restrict certain processing
Data portability — receive your data in a structured, commonly used format where required by law
Withdraw consent where processing is based on consent
Account deletion: The App does not currently offer an in-app “delete account” button. To request deletion of your account and associated data, email support.xoarena@gmail.com from the email address linked to your account. We may ask you to verify your identity before processing the request.
Logout: You can sign out of the App at any time from your profile settings.
Push notifications: Disable them in your device’s notification settings for XO Arena.
Advertising choices: Use your device’s privacy settings and Google Ad Settings to limit personalized ads.
If you are a California resident, you may have the right to know what personal information we collect, request deletion, and opt out of the “sale” or “sharing” of personal information. We do not sell personal information as defined under California law. To exercise your rights, contact support.xoarena@gmail.com. We will not discriminate against you for exercising these rights.
You may lodge a complaint with your local data protection authority. Our contact for privacy requests remains support.xoarena@gmail.com.
XO Arena is operated from jurisdictions that may differ from yours. Your information may be processed in the United States and other countries where our service providers (including Google and RevenueCat) maintain facilities. Those countries may have different data protection laws than your country.
Where required, we rely on appropriate safeguards (such as standard contractual clauses offered by providers) for cross-border transfers.
We may update this Privacy Policy from time to time. When we do, we will change the “Effective date” at the top of this document. If changes are material, we may notify you through the App or by email where appropriate.
Your continued use of the App after the updated policy takes effect means you accept the revised policy.
For privacy questions, requests, or complaints:
Email: support.xoarena@gmail.com
App: XO Arena
This policy applies to the XO Arena mobile application. If you access the App through a third-party store, that store may also collect information under its own privacy policy.