Privacy Policy
Effective 9 August 2026
Just Blackjack is a single-player game. There is no multiplayer, no chat, no friends list, and nothing you can upload. This policy explains the small amount of data the app does handle, where it lives, and how to get rid of it.
01 The short version
- You can play the entire game without an account. As a guest, nothing leaves your device.
- Signing in is optional. It exists so your progress survives a reinstall and so you can appear on the leaderboards.
- If you sign in, your username, chip total, prestige and weekly result are public — that is what a leaderboard is.
- We do not sell your personal data, and we do not run analytics, tracking or crash-reporting SDKs in the app.
- Ads are opt-in, rewarded video only, and requested as non-personalized.
- You can delete everything from inside the app: Settings → Delete account.
02 Playing as a guest
The app is fully playable with no account at all. In guest mode your progress — chips, level, prestige, streak, statistics, achievements, owned characters and settings — is written to encrypted on-device storage (MMKV) and nowhere else. No account is created, no identifier is assigned, and none of it is transmitted to us.
Guest data lives and dies with the app on that device. Deleting the app deletes it. There is no backup and no way for us to recover it.
03 If you choose to sign in
Sign-in uses Firebase Authentication (Google). You can sign in one of two ways, and both are optional:
- Google — we receive the email address and display name attached to the Google account you pick. We never see your Google password.
- Email and password — Firebase Authentication stores the email address and a hashed credential. The password is handled by Firebase; it is never sent to us or stored in the game.
Firebase assigns your account a user ID (UID). That UID is the key everything else is filed under.
04 Exactly what we store in the cloud
Signing in creates records in Cloud Firestore. There are four collections, and this is all of them:
| Where | What's in it | Who can read it |
|---|---|---|
users/{uid} |
Your chosen username, chip balance, total XP, prestige level, daily-reward streak and last claim time, equipped character, owned characters, weekly net result, and created/updated timestamps. | Public. This is what the leaderboards and player cards read. |
usernames/{name} |
The lowercased username, the UID that holds it, and when it was claimed. This is the registry that makes names unique. | Public. |
hallOfFame/{week} |
An archive of each week's top three — username, prestige and score. | Public. |
feed/{entry} |
The World feed. Each entry is a net chip result and a timestamp — nothing else. No UID, no username, no device information. Entries cannot be traced back to a player. | Public and anonymous. |
Your email address stays inside Firebase Authentication. It is never written to your public profile and never shown to other players.
05 What stays on your device and never leaves it
Some things are deliberately local-only. These are never uploaded, never synced, and we cannot see them:
- Your birthday, if you set one. It is optional, it is month and day only — never a year — and it exists solely so the game can pay you double on the day. It is stored on your device and is not part of cloud sync.
- Detailed statistics and hand history — session logs, hands played, win rates and the shoes you've retired.
- Achievements and trophies.
- Every app setting — sound, haptics, table speed, strategy hints, left-handed mode, OLED mode, reduce motion, and the rest.
06 What the app does not collect
Stated plainly, because earlier versions of this game had features that no longer exist:
- No photos or avatars. Characters are a fixed set of emoji supplied by the game. There is no image upload anywhere in the app.
- No user uploads of any kind — no files, no images, no audio, no text posts.
- No friends, friend requests or social graph. Those features were removed.
- No multiplayer and no local network play. The game no longer uses Bonjour, mDNS, Wi-Fi or Bluetooth discovery of any kind.
- No chat or messaging. There is no way to send anything to another player.
- No contacts, no location, no camera, no microphone, no health data.
- No analytics or crash-reporting SDK. The app does not include Firebase Analytics, Crashlytics, Sentry or any comparable telemetry.
- No push notification tokens. See below.
07 Notifications are scheduled on your device
If you turn on reminders, the app schedules them locally on your device — a daily-reward nudge and a streak warning. There is no push server, no Firebase Cloud Messaging, and no device token is generated or sent anywhere. We have no way to send you a message. Turning reminders off cancels the scheduled notifications.
08 Ads
Ads are opt-in and rewarded only: you tap to watch a video in exchange for chips. There are no banners, no interstitials, and nothing plays unless you ask for it.
Rewarded video is served by Google AdMob. The app requests non-personalized ads only, so AdMob is instructed not to use your advertising profile to target them. AdMob still receives the technical data it needs to deliver and measure a video and to prevent fraud — including your IP address, device and OS details, and ad interaction events. That processing is governed by Google's Privacy Policy.
You can further limit ad tracking on your device: on iOS via Settings → Privacy & Security → Tracking, and on Android via Settings → Google → Ads.
09 Purchases
Chip packs are optional in-app purchases handled entirely by the App Store or Google Play. Payment is processed by Apple or Google — we never see your card number, billing address or any payment credential.
The app receives only the product identifier and a transaction identifier, which it uses to grant the chips once and not twice. Chips are added to your balance, which syncs like the rest of your profile if you are signed in.
10 Who your data is shared with
We do not sell personal data. It reaches these parties and no others:
- Other players — your username, chip total, prestige and weekly result, via the public leaderboards and Hall of Fame. Nothing else about you is exposed.
- Google Firebase (Authentication, Cloud Firestore) — the backend the game runs on.
- Google AdMob — only when you choose to watch a rewarded video.
- Apple / Google — when you make an in-app purchase.
- Law enforcement or regulators — only where we are legally required to, or to protect rights and safety.
11 Deleting your account and data
Open Settings → Delete account and confirm. The app then, in order:
- removes your entries from any archived Hall of Fame week;
- releases your username reservation, freeing the name for someone else;
- deletes your
users/{uid}profile document; - deletes your Firebase Authentication account, including the stored email address;
- wipes all local game data from the device.
Deleting as a guest wipes the device — there is nothing in the cloud to remove.
For security, Firebase refuses to delete an account on a stale session. If you are asked to sign in again first, that is why; the app will pick up where it left off. World feed entries are not deleted, because they contain no identifying information to delete — only a number and a timestamp.
If you cannot reach the in-app option, the Other Information page has a deletion request form.
12 Retention
Your profile is kept for as long as your account exists. Delete the account and the records above are removed immediately, not queued. Anonymous World feed entries and aggregate weekly archives may persist, as they identify nobody.
13 Security
Traffic is encrypted in transit. Access to your profile is enforced by Firestore security rules: your profile document is writable only by your own account, and a username can only be attached to a profile that actually holds the reservation for it. On-device data is stored in MMKV within the app's private sandbox.
Public reads are intentional for leaderboard data. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.
14 Children
Just Blackjack simulates casino card play and is not directed at children. It is not intended for anyone under 13, or under the minimum age set by the app's rating in your country, whichever is higher. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
15 International transfers
Firebase processes and stores data on Google infrastructure, which may sit outside your country. Where required, we rely on the transfer mechanisms and safeguards Google provides for its Cloud and Firebase services.
16 Your rights
Depending on where you live, you may have rights to access, correct, export or erase your personal data, and to object to certain processing. The in-app delete covers erasure completely. For anything else, contact us using the support address on the app's store listing and we will respond within the period your local law requires.
17 Changes
We will update the effective date at the top when this policy changes, and will give additional notice in the app or on the store listing if a change is material.
18 Contact
For privacy questions or requests, use the support contact listed on the Just Blackjack App Store or Google Play page.