Last updated: 5 November 2026
This tells you what VAULTED records about you, why, and what you can do about
it. It describes the app as it actually behaves; if something here does not
match what the app does, the app is wrong and we want to hear about it.
VAULTED gives every device an anonymous account on first launch. You are not
asked to sign up, and you can play the whole game without ever telling us who
you are. Signing in with Apple is optional and exists so your progress survives
a new phone. The only advertising is a short video you can choose to watch for
free coins; it never plays on its own. We sell nothing about you to anyone.
An account identifier. On first launch the app creates an anonymous Firebase
account. It is a random identifier; it is not your Apple ID, your email, your
phone number. Everything below hangs off it. Without it there is no way to keep your coins, your level or your streak.
A display name. The name you choose. It appears to other players on the
leaderboards and in a match. It is filtered before it is shown to anybody.
Signing in with Apple never gives us your name or your email.
Your country. Taken from your device's region setting, so the "My Country"
board can be drawn. It is shown beside your name on the boards.
Gameplay. Your level, experience, coins, statistics, Daily results, and the
outcome of matches you play. Match guesses are recorded on the server while a
staked match is running, because the pot is paid from them and a game where
each side reports its own result is a game that can be lied to.
Purchases. When you buy coins, Apple gives the app a signed receipt. The
transaction identifier and the product identifier are sent to our server so the
purchase is credited once and once only. We never see your card, your Apple
Account, your billing address, or your name from a purchase.
Notifications, if you allow them. Your phone's push token is stored against
your account so a friend request or a table invite can reach you. It is removed
when you delete your account.
Reports. If you report a player, or a player reports you, the report is kept
for moderation with the name as it stood at the time. Reports you filed, and
reports about you, are removed when you delete your account.
Game Center friends, only if you use the Friends board. Opening it sends the
Game Center identifiers of friends who also play VAULTED, so the board can be
drawn. iOS asks your permission first, and declining costs you nothing except
that board.
Adverts you choose to watch. The Store, and a table's lobby when you are
short of the stake, offer a short video for free coins. Nothing plays unless you
tap it. The video comes from Google AdMob. The first time you tap, you are asked
two things: Google's consent form (only where the law requires one, such as the
EEA and the UK) and Apple's "Allow tracking?" prompt. If you allow tracking,
AdMob may use your device's advertising identifier to show more relevant
adverts; if you do not, it does not, and the coins are exactly the same. AdMob
also receives the information any advert needs to be delivered and counted —
your IP address, device and app details, and how you interacted with the
advert. Google's own privacy policy applies to it:
https://policies.google.com/privacy. Our server records only how many adverts
you have been paid for today, so the daily limit can be kept.
You can change your choices at any time: tracking under iOS Settings → Privacy &
Security → Tracking, and Google's consent under Profile → Settings → Ad privacy
choices where that applies.
No location from your phone; the only sense of where you are is the rough region
AdMob can work out from your IP address when it delivers an advert. No contacts other than the Game Center friend identifiers described
above. No photos, microphone, camera or health data. Nothing is tracked across
other companies' apps or websites unless you allow it in the tracking prompt
above, and then only by AdMob, for adverts.
name, Player ID, level and experience, country, vault points, your standing on
a board, your record (games, wins, matches and best streak), your achievements,
how your vault is dressed, and when you were last online. Any signed-in player
can read that profile, and it also holds your Game Center player identifier if
you use Game Center. Never your email, your real name, your balance or your
purchases.
That is the entire list. Nobody buys this data, because it is not for sale.
For as long as the account exists. Delete the account and it goes, apart from
the exceptions listed under Deleting your account.
Profile → Settings → Delete account, inside the app. It removes your account
and its data: coins, statistics, Daily history, achievements and profile.
Three exceptions, stated plainly:
and account removed. Deleting them would silently rewrite everybody else's
ranking, and a board that quietly reorders itself is worse for the people still
on it than an anonymous entry.
with your name removed, and a match still being played is finished first, so
nobody at the table loses their stake.
on file, because a purchase has to be provable and a refund has to find it.
Deletion is immediate and cannot be undone.
VAULTED is not directed at children under 13 and we do not knowingly collect
anything from them. If you believe a child has created an account, contact us
and it will be removed.
Wherever you live, you can ask what is held about you, ask for it to be
corrected, and ask for it to be deleted — the last of which you can do yourself,
immediately, in the app. For the first two, write to us.
If this policy changes materially, the app will say so before the change takes
effect rather than quietly updating a page nobody is watching.
support@vaulted.app