General information
Cardems is a card-game app without accounts or sign-in. The app may store game statistics and records, language, sound and haptic settings, Remove Ads entitlement information, advertising opportunity state, rewarded-ad progress, and unlocked card faces locally on your device.
iOS: Usage Analytics, ATT, and UMP
Firebase Analytics follows the current-launch UMP Consent Mode analytics_storage state once resolved and the Usage Analytics preference in Cardems Settings. Where UMP requests analytics consent, granting that purpose permits analytics; denying it keeps analytics off. Where UMP reports that this purpose does not apply to the user, analytics may be enabled by default and can be turned off in Settings. When UMP reports that this purpose is not configured, analytics stays off; that value is a configuration status, not a user’s grant of consent. Missing, unresolved, or invalid UMP values keep analytics off. The Settings opt-out cannot override a UMP denial.
ATT governs advertising tracking and is not a prerequisite for this product analytics. Declining ATT or revoking tracking permission does not by itself turn off Usage Analytics. Cardems always denies Firebase product-analytics consent for ad storage, ad user data, and ad personalization, and does not write analyticsStorage; UMP manages that signal.
While enabled, Firebase may receive app and gameplay usage events, including game selection, starts, results, active time, scores, and gameplay summary measurements. Cardems does not send names, email addresses, account identifiers, card hands or card content, contacts, precise location, or payment-card details in these events. We do not describe this data as anonymous.
iOS: Advertising and UMP
Google Mobile Ads may serve ads to users without a Remove Ads entitlement. UMP handles advertising privacy choices; advertising processing is separate from the Cardems product-analytics opt-out. ATT denial does not prevent all advertising: eligible privacy-appropriate ads may still be shown when UMP permits ad requests. Publisher First-Party ID is disabled, and when ATT is not authorized the advertising-personalization treatment is configured as disabled.
Third parties, including Google, may use cookies, device identifiers, and similar technologies to serve, personalize, frequency-cap, and measure ads. On iOS, Google Mobile Ads may process the Identifier for Advertisers (IDFA), which it can access only while ATT authorization is granted. The Firebase Analytics SDK version used by Cardems is built without IDFA support; this product analytics does not access IDFA. Firebase consent for ad storage, ad user data, and ad personalization is set to denied. You can review how Google uses information from apps that use its services at policies.google.com/technologies/partner-sites.
When Usage Analytics is enabled on iOS, Firebase may receive the app and gameplay events described above, along with SDK-generated app-instance and Firebase installation identifiers and technical information such as device model, operating system, app version, and session activity. Google may derive an approximate, region-level location from the IP address. When ads are requested, Google Mobile Ads may process IP addresses (including an estimate of general location), device identifiers, ad interactions, and diagnostic information for advertising, measurement, and fraud prevention; it can access the IDFA only with ATT permission. These SDK data flows are separate from game saves, and we do not describe them as anonymous. Cardems does not request location permission or send payment-card details in gameplay analytics.
Android: Usage Analytics, advertising, and identifiers
Android does not use Apple’s App Tracking Transparency (ATT) prompt. Firebase Analytics is disabled by default. It can be enabled only after the current-launch UMP state is resolved, analytics_storage is granted, not applicable, or not configured for that purpose, and Usage Analytics has not been disabled in Cardems Settings. A denial, missing value, unresolved state, or invalid value keeps collection disabled. A not-configured value describes the UMP configuration; it is not a user’s grant of consent. The Cardems switch is an additional opt-out and cannot override a UMP denial.
Cardems disables Android advertising ID collection for Firebase Analytics and always denies Firebase ad storage, ad user data, and ad personalization consent. Advertising is handled separately: Google Mobile Ads (AdMob) may use the Android advertising ID and other device identifiers subject to UMP choices and Android advertising privacy settings. Publisher First-Party ID is disabled. Turning Usage Analytics off does not itself disable advertising; Remove Ads disables interstitial ads.
When enabled, Firebase may receive the app and gameplay events described above, along with SDK-generated app-instance identifiers and technical information such as device model, operating system, app version, and session activity. When ads are requested, Google Mobile Ads may process IP addresses (including an estimate of general location), device identifiers, ad interactions, and diagnostic information for advertising, measurement, and fraud prevention. These SDK data flows are separate from game saves, and we do not describe them as anonymous. Cardems does not request precise location permission or send payment-card details in gameplay analytics.
Purchases on iOS and Android
Remove Ads uses Apple StoreKit and the App Store on iOS, and Google Play Billing on Android. The relevant store processes payments and keeps its own purchase and transaction records under its policies. Cardems receives product, purchase-status, and entitlement information to enable Remove Ads and restore a purchase; Cardems does not receive your full payment-card details or your Apple or Google account password.
An entitlement belongs to the relevant store account. An App Store purchase does not automatically transfer to Google Play, or vice versa. Deleting Cardems does not delete a store’s transaction records or cancel a completed non-consumable purchase. Restore Purchases checks the relevant store account again.
Rewarded ads and card designs
Optional rewarded ads on iOS and Android are served through Google Mobile Ads (AdMob). You start each ad separately. Serving and measuring rewarded ads are subject to the advertising data practices described above and your applicable privacy choices. On iOS, you do not need to grant ATT permission to earn a reward; when UMP permits ad requests, ads appropriate to your privacy choices may be served even if you have declined ATT.
Rewarded-ad progress and unlocked card faces are stored on your device. An identifier generated on the device for each ad is also stored locally to prevent duplicate rewards for the same ad. Cardems does not send these records to its own server. The advertising provider’s data processing is subject to the advertising practices described above.
Designs unlocked through ads remain unlocked while the relevant local app data is retained. Clearing app data or removing the app may cause you to lose progress and unlocked designs. Cardems does not synchronize these rewards between devices or between iOS and Android. Operating-system backups may retain or restore local data under the settings described below.
Children’s privacy
Cardems is a general-audience card-game app and is not directed to children. Cardems does not knowingly collect personal information from children, does not ask for age, name, or contact details, and has no accounts, chat, user-generated content, or social features. Ads shown in the app are limited to a maximum content rating of general audiences. If you believe a child has provided information through Cardems, contact us at support@cardems.com and we will delete it.
Data retention
Game statistics, settings, and advertising frequency state stay on your device until you clear them in Cardems or remove the app; Cardems does not upload them to a server. While Usage Analytics is enabled, events are retained by Google Analytics for Firebase for the retention period configured for the Cardems property and are deleted by Google when that period expires. Advertising-related data is retained by Google under its own policies. Support emails are kept only as long as needed to answer them.
Device and account backups may retain or restore local app data according to your operating-system settings. On iOS this can include Apple device or iCloud backups. On Android, Auto Backup is enabled and can include game saves, preferences, and SDK privacy state. Removing the app removes its local installation data but does not necessarily delete existing backups or store transaction records. You can manage backups through the relevant Apple or Android/Google backup settings. Cardems does not operate its own cloud game-save service.
Website
On normal pages, the Google Analytics for Firebase (GA4) web stream linked to our Firebase project uses Advanced Consent Mode. Before you enable analytics cookies, or when you decline them, limited page-view and app-store-link click signals are sent to Google without reading or writing analytics cookies. Requests may include the page URL, referring site, browser and screen information and, as part of network communication, an IP address; Google Analytics states that it does not store or log IP addresses. Google may use these signals to model aggregate reports when eligibility requirements are met. With your permission, analytics cookies enable more detailed measurement. Advertising consent remains denied. Your choice is saved in this browser and can be changed with “Analytics preferences” in the footer. Withdrawing permission returns measurement to cookieless mode and does not change your iOS or Android app preference. Normal pages also use Vercel Analytics. Privacy, legal, terms, support, and contact pages do not run either analytics service or send measurement requests to them.
Service providers and international transfers
Cardems uses Firebase Analytics, Google Mobile Ads, Google UMP, Apple StoreKit and the App Store on iOS, and Google Play Billing and Google Play on Android. These providers process information under their own settings and policies. They are based in the United States and may process information on servers outside your country, including outside the European Economic Area and the United Kingdom, under the transfer mechanisms described in their own policies.
Your choices and privacy rights
You can change advertising privacy preferences at any time from Privacy Choices in Cardems Settings where UMP requires it. You can turn Usage Analytics off in Cardems Settings, change tracking permission in iOS Settings → Privacy & Security → Tracking, and remove interstitial advertising entirely with the Remove Ads purchase. Deleting the app removes its local installation data; backups and store records are managed as described above.
If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, restrict, and object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time; withdrawing consent does not affect processing already carried out. Because Cardems has no accounts and does not store names, email addresses, or account identifiers, we usually cannot connect a request to a specific person; requests about data held by Google can also be made to Google directly. You can reach us at support@cardems.com, and you may lodge a complaint with your local data protection authority.
On Android, use Cardems Settings for Usage Analytics and Privacy Choices where UMP requires them, and your device’s advertising privacy settings to manage the Android advertising ID and available ad controls. ATT and the iOS Tracking menu apply only to iOS. Website analytics choices are separate from your choices in either app. On both platforms, Remove Ads disables interstitial ads; it does not automatically turn off Usage Analytics. Existing backups and store records are managed as described above.
US state privacy rights
Depending on your advertising choices, ads served in Cardems may involve processing that laws in California and other US states describe as “sharing” for cross-context behavioral advertising or as “targeted advertising”. Cardems does not sell personal information for money. You can opt out at any time by declining the ATT tracking request, by using Privacy Choices where UMP offers it, or by purchasing Remove Ads. Residents of states with applicable laws may also have rights to know, delete, correct, and appeal; use the contact address above to exercise them.
Changes to this policy
We update this policy when Cardems’ data practices change. The date at the top of this page shows the most recent update. When we make a material change, we update this page and revise that date.