Privacy policy
Last updated: 2026-10-02
Draft — pending legal review. A lawyer hasn't reviewed this yet and it may change before it is published. Periods marked with * are proposals. The Spanish version prevails.
Effective from: [FECHA DE VIGENCIA]
This policy explains what data Manuzzio (the app and the web version) uses, why, and what you can do about it. In short: we use the minimum needed for you to play online with your friends. We don't sell your data, there are no ads and there are no purchases.
1. Who we are
Manuzzio is a game by [NOMBRE O RAZÓN SOCIAL] (CUIT [CUIT]), with its address at [DOMICILIO], Argentina. We are the controller of your data. For any privacy question, write to support@theboccgames.com.
2. What data we use and why
You don't need an account to play against bots. Most of the data below appears when you play online.
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Account: display name, friend code, an internal account number, whether you are a guest, sign-up and last-seen dates | To create your account, show you at the table and let your friends find you | Contract | While you use it. Guest accounts: deleted after 12 months without use*. Accounts linked to Apple or Google: after 24 months without use* |
| Sign-in: the identifier Apple or Google Play Games gives us; for guest accounts, a random code generated on your device (we keep only a hash: a fingerprint that can't be turned back into the code) | So you can sign in without a password | Contract | Same as the account |
| Sessions: codes that keep you signed in (we keep only their hash) | Account security | Contract | Up to 60 days |
| Friends and invites: friend requests, friendships and table invites | Playing with your friends | Contract | Friendships: until either of you removes them. Invites: 30 minutes |
| Approximate continent (for example, "South America"), which Cloudflare derives from your IP address | Placing each table on the server closest to its players | Contract | Updated when you connect; deleted with the account |
| Games: the state of a table in progress; when a game ends, the result (names, points, winner) and the full record (each round's deck and every move) | Running the game, showing your history and stats, settling disputes and detecting cheating | Contract and legitimate interest (fair play) | Table in progress: until it closes. Finished games: 12 months*, then anonymised |
| Table chat messages: what you write in an online table's chat (before the game, during it and at the end) | Delivering them to the people at that table | Contract | Until the table closes: then they are deleted. If someone reports you for your messages, a copy of your last 20 messages at that table stays with the report for 90 days* |
| Reports, blocks and moderation: who reported whom, the reason, the table, what we decided and, in a report about messages, the reported person's last 20 messages at that table | Keeping the game safe and enforcing the terms | Contract and legitimate interest (safety) | Blocks: while your account exists. Reports: 12 months after the case is closed*. Attached messages: 90 days* |
| Pseudonymous usage data: events such as "started a game", screens, app version, platform and country, with an identifier that is not your name | Understanding how the game is used and improving it | Legitimate interest (in the European Union, your consent) | 3 months |
| Error reports (optional): what failed, device model and system, app version | Fixing crashes and bugs | Consent: only if you turn them on | 90 days at most |
| IP address and technical logs | Protecting the service (rate limits, abuse) and diagnosing faults | Legitimate interest (security) | Rate limits: seconds. Logs: up to 7 days |
| Deletion and support requests: your email and what you write to us | Answering you and complying with the law | Legal obligation | 12 months after the request is closed* |
* Proposed period, pending confirmation.
What each legal basis means: contract, we need it to provide the game you use; legitimate interest, we use it for something reasonable (security, fair play, improving the game) without overriding your rights; consent, only if you say yes, and you can withdraw it at any time in Settings; legal obligation, the law requires it.
We don't use: passwords, your email to play (if you sign in with Apple, we don't store your email), your precise location, your contacts, photos, microphone, advertising identifiers or payment data.
3. What other players see
- At the table: your display name, how many tricks you bid, the cards you play, your points, your emotes, your messages in the table chat (read by the players and by anyone watching that table) and whether you are connected. Nobody sees the cards in your hand.
- In the public table list: the name of whoever created the table.
- Your friends: your name, your friend code and when you were last online.
- People who played with you: your name in their history and in "Recent players".
Your display name may be your real name if you type it yourself or if you shared it when signing in with Apple or Google Play Games. You can change it in the app at any time.
4. Who we share data with
We don't sell or rent your data. Only these parties use it, to provide the service:
- Cloudflare, Inc. (United States): servers, database, live tables, security and logs. It acts on our behalf and on our instructions.
- Apple and Google: if you sign in with Apple or Google Play Games, they confirm who you are. What they do with your data is governed by their own policies. They also distribute the app.
- Sentry (Functional Software, Inc., United States): receives error reports, only if you turn them on.
- Authorities, only when a law or a court order requires it.
5. International transfers
Our providers store and process data outside Argentina, mainly in the United States: for example, tables for players in South America run on servers in North America. We protect these transfers with each provider's data protection agreement and with the model clauses approved by Argentina's AAIP. [REVISIÓN LEGAL: confirm the transfer mechanism for each provider.]
6. How long we keep data
The periods are in the table above. When something is deleted, it can remain in backups for up to 30 more days and then it is gone. "Anonymising" a game means we remove the names and the link to the accounts: only the game itself remains, with no way to tell who played.
7. Your rights
You can ask us for access to your data and ask us to correct, update or delete it (Argentina's Law 25.326). We answer access requests within 10 calendar days, and correction or deletion requests within 5 business days.
- In the app: you can change your name, remove friends, block players and delete your account.
- By email: write to support@theboccgames.com with your friend code (it's in the app, under Friends). To protect your account, we may ask for details that confirm it is yours.
The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in article 14, paragraph 3 of Law No. 25.326. The Agencia de Acceso a la Información Pública (AAIP), as the supervisory authority for Law No. 25.326, handles complaints and claims about breaches of the personal data protection rules. [REVISIÓN LEGAL: DNPDP Disposition 10/2008 wording, updated to the AAIP.]
If you live in Uruguay, you also have the rights under Law 18.331 and can complain to the Unidad Reguladora y de Control de Datos Personales (URCDP). [REVISIÓN LEGAL]
If you live in the European Union (once the game is available there), you also have the right to restrict or object to the use of your data, to receive it in a common format, and to complain to your data protection authority (in Spain, the AEPD). We answer within one month at most.
8. Deleting your account
In the app: Settings → Account → Delete account. If you no longer have the app, use the form on Delete your account. That page explains what is deleted, what is kept and how long it takes.
9. Minimum age
You must be at least 13 to play online (or the minimum age set by the law of your country, if higher; in Spain, 14). If we learn that an account belongs to someone younger, we delete it. If you are a parent or guardian and believe your child gave us data, write to us.
10. Security
Everything travels encrypted (HTTPS). We don't use passwords, we store session and sign-in codes only as hashes, and we limit who can access the data. No system is perfect: if an incident affects your data, we will tell you as the law requires.
11. What is stored on your device
The app stores your settings and your session (encrypted) on your device. The web version uses the browser's storage for the same thing. We don't use advertising cookies or trackers.
12. Changes
If we change this policy, we publish the new version here with its date. If the change is important, we tell you in the app before it takes effect.
13. Contact
[NOMBRE O RAZÓN SOCIAL], CUIT [CUIT], [DOMICILIO]. Email: support@theboccgames.com. Website: [DOMINIO].