Privacy Policy: Ace of Spades
Last updated: 3 November 2026
This policy explains what data the Ace of Spades: Bhabhi Card Game Android app, published by SJWin Solutions ("we", "us"), collects and how it is used. Package id: com.sjwinsolutions.ace.
Who can use the app
Ace of Spades is a card game with no betting or real money. It is intended for people aged 13 and over and is not directed at children under 13 and does not knowingly collect data from them. If you believe a child under 13 has used online play, email us and we will delete what we hold.
Playing against the computer
Games against computer players run entirely on your phone. Nothing about them is sent to us.
What we collect when you play online
Only when you create or join an online room, our game server (play-indianace.sjwinsolutions.com or play2-indianace.sjwinsolutions.com) receives:
- A random install ID that the app creates on first use. It identifies the app installation, not you. The server keeps only a one-way hash of it, with the last day it was seen, to count how many people play. A hash not seen for 400 days is deleted.
- The display name you type for the game (it does not have to be your real name) and the avatar picture you picked. They are shown only to the other players in your room.
- Your moves, the room code and a random seat key that lets you rejoin after a dropped connection.
- Your IP address, as part of the internet connection to the server (we do not store it).
Usage and crash reports
The app uses Google's Firebase Analytics and Crashlytics to learn how the game is used and to fix crashes. They receive a random Firebase installation ID, basic device and app information (model, Android version, app version, country), anonymous events (app opened, game started, finished or left with the mode, number of players and length, which buttons you use such as sort, borrow, share and report, tour progress, and which settings you change) and crash reports. Online connection events (whether joining or creating a room worked, the reason if not, and how long it took) also carry a random ID made for that one connection attempt; our server writes the same ID in its log (kept 7 days) so we can find why a room did not join. The ID is not linked to your install ID, name or room code. No names, no card or move details and no advertising ID. Google acts as our service provider (Firebase privacy information). Analytics data is kept 2 months and crash reports 90 days. Nothing is collected until you tap ACCEPT on the first-launch screen; NO THANKS keeps it off. You can change this any time in Settings > About > Privacy.
Notifications
If you allow notifications, the app sends a push token (an Android Firebase Cloud Messaging token) to the game server together with your online seat, so we can tell you when it is your turn or someone asks for a rematch while the app is in the background. The server keeps the token only in memory for the room, and deletes it when the room ends. The notification is delivered through Google's Firebase Cloud Messaging. You can turn notifications off in your phone's settings at any time; online play works without them.
Reporting players
If you report another player from the online profile sheet, our server writes the reported display name, the reason you chose, your own display name as the reporter and the room code to its log. It does not log any IP address. We read these reports to find rude or unsafe names, and the log is deleted after 7 days.
App version check
On start the app asks Google Firebase Remote Config for settings such as the minimum app version (for required updates) and whether online play is on. This sends Google the app version and a Firebase installation ID, and returns settings; no gameplay data.
What we do not collect
No email address, location, contacts, photos, advertising ID or purchase information, and no text other than the online display name you choose. There are no accounts. The app has no advertising SDKs.
How we use it
To run online games between you and other players, to count how many people play, to find and fix problems and to see which features are used. We do not sell the data, do not share it for advertising and do not use it to identify you.
Sharing and security
Online games run on our own servers; the connection goes through Cloudflare, which protects and carries it under its privacy policy. All data is encrypted in transit. Besides Cloudflare and Google (below) we share it with no one else.
Retention
Online game data (display names, avatars, moves, room codes) is held only in the server's memory and deleted when the room ends, at most 15 minutes after everyone leaves. Our server logs contain no moves and no names, except player reports as described above, and are deleted after 7 days. The install ID hash is kept as described above.
Your choices
- Play against the computer only and nothing is sent.
- Online, you can leave the name empty and use any avatar.
- Switch off usage and crash reports in Settings > About > Privacy.
- Uninstalling the app stops all collection.
Deleting your data
There are no accounts. Email [email protected] to ask for deletion. We cannot look up a person: the server keeps only a one-way hash of the install ID, so we cannot tell which hash is yours; it expires on its own after 400 days without use, and uninstalling the app discards the ID. Display names, avatars, moves and push tokens are not kept after a room ends, and logs expire after 7 days. Firebase analytics and crash data is deleted by Google after the periods above.
Ads
The current version has no ads, no in-app purchases and no subscriptions, and needs no app-ads.txt. If we add ads, we will update this policy first and ask for your consent where required.
Changes
We will post any changes on this page and update the date above.
Contact
SJWin Solutions, [email protected].