You can play against the CPU without an account. Local settings, progress and saved games are stored on your device. An account enables online features. Apple or Google sign-in sends authentication credentials to Supabase; the account may include an email address, provider identifier and technical account identifier. The app does not request your real name for display to other players.

The service processes usernames, avatars, friendships, invitations, presence, results, scores, rankings, missions and match data. Usernames, avatars and results exposed by social features may be visible to other players. Presence lets friends see availability and, where supported, watch matches. Reports, blocks and fraud checks support moderation and game integrity; not all associated information is public. Moderation sanctions and possible fraud flags, for example agreements to manipulate results, are kept in non-public records; after account deletion the linked identifiers are removed or anonymised.

Coins are earned by playing (missions and rewards) and spent on cosmetics. The backend records coin balances, credits, spending and cosmetic ownership. At present coins cannot be bought with real money, the app shows no advertising and uses no advertising identifiers. If we introduce purchases or advertising, we will update this policy first and tell you.

Notifications, if permitted, use device tokens and language for invitations and game events; you can change permission in system settings. At present the app shows no advertising.

Mobile diagnostics are optional: the Diagnostics switch controls both technical reports and optional usage events. They are disabled when no valid preference exists; saved choices, including a previously enabled value, are preserved and can be changed in Settings. Expo Observe receives predefined error codes, selected usage events and technical metrics; original JavaScript error messages and stacks, navigation URLs and parameters are not sent by application reporting paths. Technical installation and session identifiers and device/build metadata are included: this is not a promise of anonymity. Disabling stops subsequent dispatch and clears pending local events; it does not delete data already received by the provider. According to Expo Observe documentation, data is retained for 90 days and deleted in monthly batches, so it can remain for up to 120 days; aggregate billing counts remain. Backend errors may be sent to Sentry if configured. Supabase provides authentication, database, storage and online communications; Expo supports distribution, hosting and notifications. Apple and Google participate in sign-in and distribution. Provider roles and transfers are described in sections 6 and 7.

We process data to: (a) provide accounts, online play, rankings and rewards, on the basis of performance of the contract (Art. 6(1)(b) GDPR); (b) keep the service secure, prevent abuse and fraud, moderate and protect the integrity of rankings, on the basis of our legitimate interest in a fair and safe service (Art. 6(1)(f)); (c) run diagnostics and send push notifications, on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time without affecting processing already carried out; (d) comply with legal obligations, for example accounting and tax, where they apply. Account data is necessary for online features; without an account you can play against the CPU.

Data is processed by the controller and, on its behalf, by service providers: Supabase (authentication, database, storage, server functions and real-time communications), Cloudflare (domain, DNS and hosting of the information pages), Expo (distribution, updates, push notifications and, if diagnostics are on, Expo Observe) and, if configured, Sentry (backend errors). Apple and Google process data as independent controllers for sign-in and their respective stores. We do not sell players’ personal data. Supabase’s database and storage are hosted in Frankfurt (Germany), within the European Economic Area. Other providers may process data outside the European Economic Area, in particular in the United States: transfers rely, depending on the provider, on an adequacy decision (including the EU-US Data Privacy Framework), the European Commission’s standard contractual clauses or other safeguards under Chapter V of the GDPR. You can ask about these safeguards using the contact on this page.

Briscola Arena is intended for people aged 14 or over. Under 14, an account and online features require the consent of the person with parental responsibility. We do not actively verify age: we rely on the declaration made when the account is created (see the Terms of use) and on the store’s age rating. If you believe a minor created an account without the necessary consent, write to the contact on this page and we will delete the account.

Backend rules retain player views for one day after a match ends; spectator views for one hour; invitations until one day after expiry; unstarted rooms for one hour; full match state and room code for 30 days after the end once statistics are recorded; and trick details for 90 days. Account results and history, progress, friendships, wallet and coin ledger remain until account deletion, subject to the qualifications below. Stale queue entries are cleaned after 10 minutes, rate-limit counters after two days, and push tokens after 180 days without registration. Old username reservations last 14 days. Cleanup runs periodically: an operational backlog can delay removal.

Once a deletion request is accepted, the account is disabled and deletion continues asynchronously. The account and linked data are removed, with Apple revocation where applicable. Provider failures are retried. Reports may remain with the deleted account identifiers removed and its name replaced; some match records and opponents’ history may also remain. A technical receipt without the UID is retained for 30 days after completion. Credentials needed for the process are removed once no longer required. Provider backup copies follow the providers’ own rotation cycles, which we do not control: we cannot state a precise deletion deadline for them. See Account deletion for instructions.

You can manage diagnostics and notifications. You can request deletion in the app or through the contact on this page. Where the GDPR applies, you may exercise rights of access, rectification, erasure, restriction, objection and portability in the applicable circumstances, withdraw consent for processing based on consent, and complain to the competent supervisory authority; in Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it). We reply to requests within one month, extendable where the law allows. Proportionate account ownership verification may be necessary; do not send passwords, sign-in codes or payment details.

Consumer information. Briscola Arena is free and, at present, sells no content for real money and shows no advertising: coins and cosmetics are earned by playing. If we later introduce purchases or advertising, we will first publish a new version of these documents with its effective date and flag it in the app; purchases will go through the App Store or Google Play, with the consumer protections that apply to digital content. For complaints or support write to the contact on this page: we reply within one month. These documents are available in Italian, English and Spanish; if they differ, the Italian version prevails.