Royal Triad Privacy Policy

Effective date: August 4, 2026
Last updated: August 18, 2026

This Privacy Policy explains how RG REMARKABLE GAMES LTD ("Remarkable Games", "we", "us", or "our") collects, uses, discloses, and protects personal data when you use the Royal Triad mobile application, web game, and related online services (together, the "Service").

1. Controller and contact details

RG REMARKABLE GAMES LTD is the controller responsible for the personal data described in this Policy.

For a privacy or account-deletion request, email us with the subject "Royal Triad Privacy Request". To help us locate the correct account, include your Royal Triad player ID and the sign-in provider you used. Do not send us your password, identity token, authorization code, purchase token, or full payment details.

2. Personal data we collect

Account and profile data

Depending on the platform, we receive a persistent player identifier and sign-in-provider identifier from Apple, Google Play Games, or a distribution portal. We may also receive a display name and avatar URL. On iOS, Sign in with Apple may return your name and email address; Royal Triad uses the name if you choose to provide it, but our application database does not store the email address returned by Apple.

We receive an identity token and, where provided, an authorization code or server authentication code to verify the sign-in. We use these credentials for authentication and do not intentionally store them in the Royal Triad account database.

Gameplay, social, and economy data

We process lobby membership, match identifiers, seat and turn information, cards and actions played, match results, wins, games played, win rate, virtual-coin balance, selected avatar and table customizations, and timestamps associated with these records. Your display name, avatar, gameplay presence, and leaderboard statistics may be visible to other Royal Triad players. Technical player identifiers may also appear in live match data needed to synchronize the game.

Leaderboard data

Royal Triad operates its leaderboard on our Cloudflare-hosted server. After a completed match, we store and update the player's persistent player identifier, optional display name, total games played, wins, and calculated win rate. We use the account-creation timestamp only to break ranking ties and calculate the player's rank. When a player opens the leaderboard, we return leaderboard entries containing rank, optional display name, games played, wins, and win rate to provide this in-app feature. We do not use leaderboard data for advertising or cross-app tracking.

Purchase data

If you make an in-app purchase, we receive the store provider, product and product identifier, transaction or purchase-token identifier, order identifier where available, quantity, virtual goods credited, purchase status, and timestamps. Apple, Google, or the applicable portal processes your payment details. We do not receive or store your full payment-card number.

Analytics and technical data

Royal Triad uses Google Analytics to understand use of the Service. We send events such as app start and boot completion, locale and build identifier, tutorial and shop interactions, matchmaking wait time and selected rule, match start/result/duration, card-action type and round number, purchase stage and product identifier, language changes, and leaderboard interactions. We do not intentionally include your Royal Triad player ID, name, email address, authentication credentials, or full purchase token in our custom analytics-event parameters.

Google Analytics may also collect its own client or device identifier, session statistics, approximate location derived from the IP address, browser and device information, operating system, app or browser version, language, request time, and interaction data. Google states that Google Analytics 4 uses IP addresses to derive location information and discards them before the IP address is logged.

Our servers and infrastructure providers also automatically process information needed to deliver and secure the Service, such as IP address, request URL and method, timestamps, user-agent or device/network metadata, response status, error and diagnostic information, and security signals.

Data stored on your device

Royal Triad stores some preferences and session information locally on your device, including a player identifier, avatar, virtual-coin balance, entry fee, language, tutorial state, and customization choices. Clearing the app's storage or deleting the app may remove this local data, but it does not by itself delete server-side account or transaction records.

3. How we collect data

We collect data directly from you and your actions; automatically from the app, browser, device, network requests, and gameplay sessions; from platform sign-in providers; from app stores and payment providers; and from providers that host, protect, or measure the Service.

4. Why we use data and our legal bases

• To authenticate you, maintain your profile, provide multiplayer matches, operate the leaderboard and virtual economy, and fulfill purchases — to perform our contract with you.
• To operate, troubleshoot, secure, and prevent fraud or abuse of the Service — for our legitimate interests in providing a reliable and safe game and, where applicable, to comply with legal obligations.
• To measure use, understand game balance and player journeys, and improve the Service through analytics — with consent where applicable law requires consent, and otherwise for our legitimate interests where those interests are not overridden by your rights.
• To retain and disclose records when required by tax, accounting, consumer-protection, law-enforcement, or other applicable law — to comply with legal obligations and establish, exercise, or defend legal claims.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

5. When we disclose data

We may disclose the relevant data to Cloudflare (hosting, database, networking, security, and operational logging); Google (Analytics, Google Play Games, and Google Play purchase verification where applicable); Apple (Sign in with Apple, App Store distribution, and purchase processing); an applicable distribution portal; professional advisers and authorities; and a buyer, successor, or group company in a corporate transaction subject to appropriate safeguards.

Other players receive the limited profile, presence, and gameplay information necessary for multiplayer matches and leaderboards.

We do not sell personal data for money. We do not use Royal Triad data for targeted advertising in the iOS app, and the current iOS app does not display third-party advertisements. We require service providers that process personal data on our behalf to protect it consistently with this Policy and applicable law.

Third parties process data under their own terms and privacy notices where they act as independent controllers. Review the privacy information published by Apple, Google, and Cloudflare.

6. International transfers

We are established in Cyprus, in the European Economic Area (EEA). Some providers and their infrastructure may process data outside Cyprus, the EEA, the United Kingdom, or your country of residence. Where required, we rely on an adequacy decision, the European Commission's Standard Contractual Clauses, the EU-U.S. Data Privacy Framework where applicable, or another lawful transfer mechanism, together with supplementary safeguards where appropriate.

7. Retention and deletion

• Account, profile, gameplay statistics, and virtual-economy records are normally kept while your account remains active and are deleted or anonymized after a valid deletion request, unless a longer period is required for the reasons below.
• Live lobby and match state is short-lived operational data and is generally cleared after a session ends or becomes empty; the current server is configured to clean empty live-session state after approximately one minute.
• Identity tokens and authorization codes are used to authenticate a request and are not intentionally retained in the Royal Triad account database.
• Operational and security logs are retained for a limited period determined by troubleshooting, security, fraud-prevention, and legal needs, then deleted or aggregated.
• Analytics information is retained according to the relevant Google Analytics configuration and only while needed to measure trends and improve the Service; aggregated reports may be kept longer when they no longer identify an individual.
• Purchase, tax, accounting, fraud-prevention, dispute, and legal-claim records may be retained after account deletion. Cyprus law may require relevant accounting records to be retained for at least six years after the applicable entries or transactions, and another law or unresolved claim may require a longer period.

When deletion is required, we delete or irreversibly anonymize the data. Where we must retain a limited record, we restrict it to the relevant legal, accounting, fraud-prevention, or claims purpose.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, withdraw consent, opt out of certain sale, targeted-advertising, sharing, or profiling practices, and complain to a data-protection authority.

To exercise a right, contact info@remarkable.games with the subject "Royal Triad Privacy Request". We may ask for limited information necessary to verify your identity and locate your account. We aim to respond within one month, or within another period required by applicable law. You may also complain to the Office of the Commissioner for Personal Data Protection of Cyprus, or to your local supervisory authority.

You may limit Google Analytics through available consent controls, device or browser privacy settings, content blockers where supported, or by contacting us. Clearing Royal Triad's local data can reset locally stored identifiers and preferences, but does not delete server-side data.

9. Account deletion

You may request deletion of your Royal Triad account and associated personal data by emailing info@remarkable.games with the subject "Royal Triad Account Deletion" and including your player ID and sign-in provider. We will verify the request, delete or anonymize data that we are not legally required to retain, and confirm completion. Deleting your account does not cancel or refund a completed in-app purchase; refund requests are handled under the applicable app store's rules.

10. Children

Royal Triad is not directed specifically to children below the minimum age at which they may lawfully consent to online data processing in their country. We do not knowingly collect personal data from a child in a manner prohibited by applicable law. If you are a parent or guardian and believe a child provided personal data without the consent required by law, contact us so that we can investigate and delete it where appropriate.

11. Security

We use administrative, technical, and organizational safeguards designed to protect personal data, including encrypted network transport, access controls, provider credential verification, and measures intended to prevent duplicate or fraudulent purchase credits. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Policy when the Service, our providers, or legal requirements change. We will post the revised Policy at this URL and update the date above. If a change materially affects your rights or how we use personal data, we will provide additional notice where required.

13. Contact us

RG REMARKABLE GAMES LTD
HE 461103
Prodromou 75, ONEWORLD PARKVIEW HOUSE, Floor 4
2063 Nicosia, Cyprus
info@remarkable.games