Privacy Policy for Mindicot
Last updated: September 16, 2026
This Privacy Policy explains how Mindicot ("the App," "we," "us," or "our") collects, uses, and protects information when you use our mobile application. Mindicot is a card game (also known as Mendicot or Mindi Kot) available on iOS and Android.
By downloading or using Mindicot, you agree to the collection and use of information as described in this policy.
1. Information We Collect
1.1 Account Information
Mindicot signs you in anonymously using Firebase Authentication so your progress can be saved and synced. We do not require or collect your name, email address, or phone number to create an account.
If you choose to set a display name / nickname in your profile, that name is stored with your account and may be visible to other players in online rooms and on leaderboards.
1.2 Gameplay & Profile Data
To provide progression, achievements, and leaderboards, we store gameplay statistics tied to your anonymous account, including:
- Matches played, matches won, hands won
- Dahlas (tens) captured
- Win/loss streaks
- XP, level, and Elo-style rating
- Achievements and badges unlocked
- Card-back/cosmetic selections and game settings (e.g., number of decks)
1.3 Online Multiplayer Data
When you play in Online Rooms, the following is shared with other players in your room/match for the game to function:
- Your display name and avatar/cosmetic selections
- Your in-game moves and match results
- Room codes you create or join
1.4 Device & Usage Information
We use Firebase Analytics and Firebase Crashlytics to understand app usage and diagnose crashes. This may include:
- Device model, operating system version, and app version
- Approximate (non-precise) location derived from IP address
- App usage events (e.g., screens viewed, features used, session length)
- Crash logs and diagnostic/performance data
1.5 Advertising Data
Mindicot displays ads through Google AdMob. AdMob and its partners may collect and use identifiers such as your device's advertising ID, IP address, and general (non-precise) location, and may use cookies or similar technologies to:
- Serve and personalize ads
- Measure ad performance and frequency
- Prevent fraud and abuse
On iOS, any tracking that requires cross-app/cross-website identification is subject to Apple's App Tracking Transparency framework and applicable consent requirements. On Android, you can manage ad personalization through your device's Google Ads Settings.
We do not control how third-party ad networks use the data they collect; please refer to Google's Privacy Policy and How Google uses information from sites or apps that use our services for details.
1.6 Information We Do NOT Collect
Mindicot does not request access to your camera, microphone, contacts, photos, or precise GPS location, and we do not collect payment card details (the app does not process in-app purchases).
2. How We Use Your Information
We use the information described above to:
- Create and maintain your game profile and save your progress
- Operate core game features: matchmaking, online rooms, leaderboards, achievements, and XP/levels
- Sync your data across sessions and devices tied to the same account
- Display and measure advertising that supports the free version of the app
- Monitor app stability, fix bugs, and improve performance
- Understand aggregate usage trends to improve gameplay and features
- Detect, prevent, and address fraud, cheating, or abuse in online play
3. Third-Party Services
Mindicot relies on the following third-party services, each with its own privacy policy:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase Authentication (Google) | Anonymous sign-in | Link |
| Cloud Firestore (Google) | Profile, stats, leaderboard storage | Link |
| Firebase Realtime Database (Google) | Live online multiplayer sync | Link |
| Firebase Analytics (Google) | App usage analytics | Link |
| Firebase Crashlytics (Google) | Crash reporting | Link |
| Google AdMob | In-app advertising | Link |
These providers may process data on servers located outside your country of residence, including in the United States, as part of their global infrastructure.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information:
- With other players, limited to your display name, cosmetic selections, and in-match gameplay actions, so that online and multiplayer features work
- With our service providers (Google/Firebase, Google AdMob) solely to operate the app and its features, as described above
- If required by law, to comply with legal obligations, enforce our terms, or protect the rights, property, or safety of our users or the public
- In a business transfer, such as a merger, acquisition, or sale of assets, in which case data may be transferred as part of that transaction
5. Data Retention
We retain gameplay and profile data for as long as your account is active, or as needed to provide the app's features (e.g., leaderboards, progression). If you request deletion of your data (see Section 7), we will delete or anonymize it within a reasonable time, except where retention is required for legal, security, or fraud-prevention purposes.
6. Children's Privacy
Mindicot is intended for a general audience and is not directed at children under 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal information, please contact us at the email below and we will take steps to delete it.
7. Your Rights and Choices
Depending on your location, you may have the right to:
- Request access to the data associated with your account
- Request correction or deletion of your data
- Object to or restrict certain processing (e.g., ask us to disable analytics where technically possible)
- Withdraw consent for ad personalization via your device settings (iOS: Settings > Privacy > Tracking; Android: Google Settings > Ads)
Since Mindicot uses anonymous sign-in, we cannot always independently verify your identity. To exercise these rights, contact us at iycreateapp@gmail.com from the app, and where possible include any in-app player ID or display name so we can locate your data.
You can also delete your local app data at any time by uninstalling the app, which removes locally stored settings and cached data from your device (this does not delete data already synced to our servers, which must be deleted by contacting us).
8. Data Security
We use industry-standard services (Google Firebase) that provide encryption in transit and access controls to help protect your data. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
9. International Data Transfers
Because our service providers operate globally, your information may be transferred to, stored, and processed in countries other than your own, including the United States, which may have different data protection laws than your country of residence.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the app, our practices, or legal requirements. We will update the "Last updated" date at the top of this page when changes are made. Continued use of the app after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:
This policy applies solely to the Mindicot mobile application and does not apply to third-party websites or services that may be linked from within the app.