Last updated: 24 October 2026
This policy covers the card games published by Piotr Demidowicz (demicode) on the App Store: Remik, Makao, Kuku, Kury, Schotten Totten, Wojna, Rock Paper Lizard, Mariasz and the Planning Poker estimation tool ("the apps"). It is the document linked from each app's App Store page. Polish version: privacy-policy.pl.md.
Names you enter for pass-and-play or local games and the state of the game are kept on your device only. In local Wi-Fi games they are exchanged directly between the participating devices (Apple Multipeer Connectivity) and are never routed through any server. They are discarded when the game ends.
To find nearby players the apps ask for permission to use the local network. It is used exclusively for peer-to-peer play; no data leaves the local network.
Online sessions in Planning Poker (joined with a link or a code) go through a small relay we run on Cloudflare Workers (Cloudflare, Inc.). While the session runs it forwards, between the host's device and the participants' devices, what the session needs: names, groups, the story titles you type and the votes, plus a random identifier of each device (so a participant whose connection drops comes back as the same person). The relay keeps this only in memory while it forwards it, at most for a few minutes after someone disconnects; it writes no logs of the content and nothing is kept after the session ends. Cloudflare processes the connection (including your IP address) under its own privacy policy (https://www.cloudflare.com/privacypolicy/). Wi-Fi and SharePlay sessions don't use the relay.
Online play is optional and provided by Apple's Game Center. If you sign in, Apple handles authentication and matchmaking and shows other players your Game Center display name and avatar under Apple's own privacy terms (https://www.apple.com/legal/privacy/). The apps only receive what Game Center exposes during a match (display name, player identifier, game moves) and keep it for the duration of the match. We do not store or forward it.
The apps on iOS, iPadOS and Mac Catalyst include Firebase Crashlytics, Firebase Performance Monitoring, Firebase Remote Config and Google Analytics for Firebase (Google LLC). The following is sent to Google:
This data is not linked to your identity, is not used for advertising or tracking, and is only used to fix problems and improve the games. It is processed by Google under the Firebase terms (https://firebase.google.com/support/privacy). Crashlytics keeps crash reports for 90 days, Performance Monitoring up to 90 days and Analytics keeps event data for 14 months at most. The native macOS build of Remik does not include Firebase.
In App Store terms this is declared as Diagnostics → Crash Data, Performance Data, Other Diagnostic Data; Usage Data → Product Interaction; Identifiers → Device ID — Data Not Linked to You, not used to track you.
Remik and Kury can show ads provided by Google AdMob (Google LLC): a banner on the main menu and a full-screen ad between games — never during your turn or an online match. To show and measure ads, the Google Mobile Ads SDK processes:
Consent. When you are in the EEA, the UK or Switzerland the app first asks for your consent through Google's consent form (UMP). Without consent you see only non-personalised ads. You can change your choice any time in the app's Settings (“Privacy & ads”) and in iOS Settings → Privacy & Security → Tracking.
Google's use of this data is described at https://policies.google.com/technologies/ads and https://policies.google.com/privacy. We do not receive data that identifies you; AdMob only gives us aggregate reports.
Remove ads. The one-time in-app purchase is processed by Apple. We only learn from Apple that this device's Apple Account owns it — no payment details reach us.
In App Store terms the ads add Identifiers → Device ID; Usage Data → Advertising Data; Location → Coarse Location; Diagnostics — and, only when you allow tracking, data used to track you (Device ID, Advertising Data).
The apps do not access contacts, photos, precise location, microphone, camera or health data. Apps other than Remik and Kury contain no ad SDKs.
The apps are suitable for all ages and are not directed at children under 13. We do not knowingly collect personal information from children; ads in Remik and Kury are requested as suitable for general audiences.
If we change how the apps handle data we will update this page and the "Last updated" date above.
Piotr Demidowicz (demicode) — piotrek.demidowicz@gmail.com