Privacy Policy

Last updated 31 October 2026

This policy covers MegaYatzy on Android, iOS, desktop and in the browser (package com.mikepenz.megayatzy), and this website at megayatzy.mikepenz.dev. The developer is Mike Penz, Austria (see Terms & legal notice).

What stays on your device

Saved games, high scores and settings are stored on the device you play on: in app preferences on Android and desktop, in the app’s defaults on iOS, and in browser storage (local storage) on the web. None of it is transmitted. Uninstalling the app, or clearing this site’s data in your browser, deletes it.

Android Auto Backup and Apple’s device backups may copy this local data into your own Google or Apple account if you have backups switched on. That is a setting on your device. We cannot read those copies.

Optional cloud backup of high scores

This is optional. The game works fully without signing in, and nothing in the game is locked behind it. No game mode, setting or feature depends on a Google or Apple account.

On Android the app can back up your high scores with Google Play Games, and on iOS with Game Center (Apple iCloud). Backup is on by default where the device offers it: if you are already signed in to Play Games or Game Center on the device, or you sign in from Settings, the app uses that account. On iOS, Game Center may show its own sign-in sheet when the app starts, if you are not signed in; you can dismiss it and keep playing. The app:

• stores one backup of your high-score lists in the saved-games storage of your own Google account (Play Games) or Apple account (Game Center). Each entry holds the name shown with the score, the score, the game mode and its modifications, the number of dice and players, and the time;
• reads that backup back and merges it with the scores on the device, so a new device or a reinstall gets your scores again;
• shows your Play Games or Game Center display name in Settings, so you can see which account is used.

Nothing else is backed up: no saved games in progress, no settings and no online-play data. The backup goes from your device straight to Google or Apple. It does not pass through the developer’s relay or any server of ours, and we cannot read it. Google and Apple handle it under their own policies (Google, Apple).

You stay in control, at any time. In Settings you can switch backup off, after which the app makes no further calls to Play Games or Game Center. You can delete the backup from your account with the delete-backup button there. Switching backup off never removes the scores on your device.

The app has no sign-out of its own. On Android, Google Play Games signs the player in on its own, and the connection between your Google account and the game is kept by Google. To remove it, use the settings of the Google Play Games app, which can delete your Play Games data for this game or for your whole profile. Deleting Play Games data does not by itself revoke the game’s access to your Google account; you can do that separately in your Google Account settings. On iOS, Game Center stores the backup as saved-game data, which Apple keeps in iCloud; manage Game Center and iCloud storage in the iOS Settings app. We hold none of this data, so there is nothing for us to delete on our side.

Android permissions

The Android app requests two permissions: internet access, used only for online rooms (see Online play), and network state, used only to notice a Wi-Fi or cellular switch and reconnect. The network-state check stays on your device; neither permission gives the app access to your contacts, files, location or accounts.

Online play

Online rooms are optional. When you create or join one, the app opens an encrypted (TLS, wss://) connection to a relay at relay.megayatzy.mikepenz.dev. The relay is a Cloudflare Worker with a Durable Object per room, written and operated by the developer. It receives:

• the room code, and the optional room password you set or entered;
• your lobby name: two initials and an optional word from a fixed list, sent as a token such as MP:animal_otter. You cannot enter free text;
• a random identifier for your install and, for the host, a random host token, both generated by the app;
• the game messages: rolls, held dice, chosen categories and the game state;
• a request signature made with an application key. It identifies the app, not you.

The relay forwards messages between the players in a room. Other players in the room receive your lobby name and game state, and the host sees all of it. The relay has no database and writes nothing to storage. The room, its password and its connections exist in memory only while at least one player is connected, and are gone when the room ends. The relay code does not log messages. The score card you can share as an image never contains the room code.

IP addresses

Every network connection reveals its IP address to the server. Cloudflare, which runs the relay as the developer’s processor, handles everything listed above in transit: room code, name token, game messages and the IP address of each connection. It uses IP addresses to deliver traffic and may keep standard request logs under its own policy (Cloudflare privacy policy). The relay code itself reads your IP address for one purpose: limiting how many connections one address can open per minute. It does not store the address. We do not use IP addresses to identify players.

Motion sensors

Tilt and shake move the decorative dice on the home screen, and shake to roll is a setting. Both are optional. The app reads the motion sensors on your device and does not store or transmit the readings.

Retention

The developer keeps no player data. Local data stays on your device until you delete it. A cloud backup, if you use one, stays in your Google or Apple account until you delete it there or with the button in Settings. Relay data exists in memory only for the life of a room. Cloudflare and store operators keep data under their own policies.

This website and the web app

There are no tracking cookies. These pages and the web app load no third-party scripts, fonts or images and run no analytics. The web app keeps saved games, scores and settings in browser storage (in practice local storage, not cookies). That data is functional only, is never sent to us or used for tracking, and no third party can read it. A service worker with a cache lets the app start offline and update itself. Clear both in your browser’s site settings.

Cloudflare serves the site as a CDN and keeps edge logs (IP address, user agent, requested URL, time) for security and operations — Cloudflare privacy policy.

Uberspace hosts the files and keeps the usual web-server logs (IP address, user agent, requested URL, time) — Uberspace privacy policy. We do not store or have access to those logs.

App stores

If you install the app from Google Play or the App Store, that store collects installation and device information under its own policy and may give us aggregate figures. We receive nothing that identifies you. See Google and Apple.

Children

The app collects no personal data from anyone, children included. Online play has no chat and no free-text names.

Your rights

Because we hold no data about you (a cloud backup is held by Google or Apple in your own account, not by us), there is usually nothing to access, correct or delete. If you think we do, write to [email protected]. Where the GDPR applies you have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to the Austrian data protection authority (dsb.gv.at) or the authority where you live. We do not sell or share personal information, including under the CCPA.

Changes

If this policy changes, the date at the top changes with it.

Contact

Mike Penz, Austria · [email protected]