Legal
Privacy Policy
Last updated: September 7, 2026
This Privacy Policy explains how Mind Rivals (“Mind Rivals”, “we”, “us” or “our”) collects, uses, shares and protects information when you use the Mind Rivals mobile game, its online services, or the playmindrivals.com website (together, the “Services”).
Privacy questions and requests can be sent to cinarsoft93@gmail.com.
1. Information we collect
Account and identity information
- A random guest identifier is created when you first use the game. We also create an internal player identifier, a generated display name and a public player tag.
- If you choose to link an account, we receive a stable account identifier from the selected sign-in provider. For Google-linked accounts, we may also receive a verified email address and display name when Google supplies them. The current Huawei sign-in flow does not request email or profile permissions.
- Provider credentials are used to verify or reconnect the account. We do not store your Google or Huawei password. Mind Rivals session tokens are stored on the server only as cryptographic hashes. On supported Android devices, the active token is protected using the Android Keystore.
Game and progression information
We process and store information needed to run the game and preserve progression, including matchmaking state, match identifiers, game mode, board size, match status and timing, opponents, scores, results, disconnects or forfeits, rating, league and rank, experience and level, season progress, and equipped or unlocked cosmetic items. Individual card selections are processed during a live match and are not kept as a permanent turn-by-turn history.
Your generated display name or public tag, league/rank, selected cosmetic, and match score or result may be shown to opponents or other players in game features such as matchmaking, matches, recent matches and leaderboards. Your provider email address and provider account identifier are not shown to other players.
Notification information
If notifications are enabled, we process an installation identifier, push provider and token, distribution channel, app build, locale, notification permission state, registration timestamps, and delivery or acknowledgement status. This information is used to route service and game notifications through Firebase Cloud Messaging, Huawei Push Kit or Apple Push Notification service, depending on your device and app distribution channel.
Diagnostic, device and network information
The app uses Firebase Crashlytics to receive crash reports and diagnose stability problems. Crash reports may include stack traces, relevant app state, app version, device model and operating-system information, memory or storage information, timestamps, and a Crashlytics/Firebase installation identifier.
Our server, hosting provider and content-delivery/security provider may process IP address, request time, connection details, user agent and related network logs to deliver the Services, troubleshoot failures and protect against abuse. We do not request precise location, contacts, photos, camera, microphone or health data.
Website information
The website stores your EN/TR language choice in your browser’s local storage. It does not currently use advertising cookies or analytics. Cloudflare may process standard request and network information when it delivers the website and proxies traffic.
2. Why we use information
We use the information described above to:
- create and maintain guest or linked player accounts;
- provide matchmaking, real-time matches, rankings, progression, cosmetics and account recovery;
- send notifications you have allowed;
- authenticate users, secure sessions, prevent abuse and protect competitive integrity;
- investigate crashes, errors and service availability;
- comply with legal obligations and enforce the Terms of Use; and
- respond to support, privacy and account-deletion requests.
Where applicable law requires a legal basis, we rely on performance of our contract with you to provide the game, our legitimate interests in operating and securing the Services, your consent for optional notifications where required, and compliance with legal obligations. You may withdraw notification permission at any time in your device settings.
3. When information is shared
We do not sell personal information. We do not share personal information for cross-context behavioural advertising, and the current version of Mind Rivals does not contain an advertising or analytics SDK.
We share only what is necessary with:
- other players, for the public game information described above;
- Google, for Google sign-in, Firebase Cloud Messaging and Firebase Crashlytics;
- Huawei, for Huawei ID sign-in and Huawei Push Kit on the AppGallery version;
- Apple, for Apple platform distribution and push-notification delivery where applicable;
- Cloudflare and our server-hosting provider, for website/API delivery, security and hosting; and
- authorities or other parties when required by law, needed to protect users or the Services, or involved in a lawful business transfer.
These providers process information under their own terms and privacy notices and, where applicable, on our instructions as service providers.
4. International transfers
Mind Rivals is operated from Türkiye. Some service providers may process information in other countries. Where required, we use contractual or other lawful safeguards for international transfers. Privacy protections and government-access rules may differ between countries.
5. How long we keep information
- Account, progression and game records are kept while your account is active and as needed to provide the Services.
- Account sessions have a maximum lifetime of 90 days unless they are replaced or revoked earlier. Revoked-session records may be retained for security and audit purposes.
- Push tokens and installation records are kept until they are replaced, invalidated, deleted with the account, or no longer needed.
- Firebase states that Crashlytics crash reports and associated minidumps are retained for 90 days before deletion begins.
- Security, request and infrastructure logs are kept only as long as reasonably necessary for security, troubleshooting and legal obligations, according to the applicable system settings.
- When you delete your account, identity links, active sessions, push installations, guest identifier and public player tag are removed, and the display name is replaced with a generic deleted-player label. De-identified historical match, rating, cosmetic and season records remain attached to an internal non-public record to preserve match results, rankings and database integrity. They can no longer be used to sign in and are excluded from live leaderboards.
We may retain information longer where required by law, needed to establish or defend legal claims, or necessary to investigate fraud or security incidents. Information that has been irreversibly aggregated or anonymised may be retained without a fixed period.
6. Security
We use measures designed to protect information, including encrypted HTTPS/WSS transport, hashed server-side session tokens, restricted production credentials and platform-protected local credential storage where supported. No storage or transmission system is completely secure, so we cannot guarantee absolute security.
7. Your choices and rights
Depending on where you live, you may have rights to access, correct or delete personal information; object to or restrict certain processing; receive a portable copy; withdraw consent; and complain to a data-protection authority. We may need to verify your identity before fulfilling a request.
You can disable notifications through your device settings. You can delete the account and associated identifying information from Profile > Account > Delete Account in the app. A linked account requires fresh verification with its sign-in provider, and deletion cannot be completed during an active match or matchmaking session. You may also follow the instructions at https://playmindrivals.com/account-deletion.html or contact cinarsoft93@gmail.com.
Residents of jurisdictions with “sale” or “sharing” opt-out rights may note that Mind Rivals does not sell personal information or share it for cross-context behavioural advertising.
8. Children’s privacy
If you are below the age at which you can consent to the processing of personal information where you live, use Mind Rivals only with permission from a parent or legal guardian. We do not knowingly collect a child’s personal information in violation of applicable law. If we learn that this has happened, we will take appropriate steps to delete or de-identify it. A parent or guardian may contact cinarsoft93@gmail.com.
9. Third-party services
The privacy practices of third-party services are described in their own notices:
- Google Privacy Policy: https://policies.google.com/privacy
- Firebase Privacy and Security: https://firebase.google.com/support/privacy
- Huawei Privacy: https://consumer.huawei.com/privacy/privacy-policy/
- Apple Privacy Policy: https://www.apple.com/legal/privacy/
- Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
10. Changes to this policy
We may update this policy when the Services or legal requirements change. We will post the revised policy here and change the “Last updated” date. If a change materially affects your rights or how we use personal information, we will provide an additional notice where required.
11. Contact
Email: cinarsoft93@gmail.com
You may also contact the competent data-protection authority in your country. In Türkiye, this is the Personal Data Protection Authority (KVKK).