PartyMonkey Privacy Policy

1. About this policy

This policy explains how PartyMonkey, provided by Cyberoid.IO ("we", "us", or "our"), accesses, uses, stores, and shares information. PartyMonkey provides party games played on nearby devices over a local Wi-Fi network or hotspot. You do not need to create an online account.

Profiles and preferences are saved locally, and multiplayer game information is exchanged between participating devices. Advertising and internet connectivity checks also involve external services. Local multiplayer does not mean that the app makes no internet requests or that third parties receive no data.

2. Information used for profiles and gameplay

• Local profile and preferences: The app saves your chosen nickname, selected built-in avatar, and sound, music, and haptic preferences on your device. A nickname does not need to be your real name.
• Random profile identifier: The app generates a persistent random identifier and keeps it in the device's secure storage. This is not your phone number, IMEI, or an online account. It is used to distinguish players and support reconnection, and is included in profile information exchanged during local multiplayer.
• Session and gameplay information: Participating devices exchange information needed to run games, such as player profiles, game selections, drawings, guesses, answers, scores, and connection status. The host device manages the session and distributes relevant information to players.
• Connection and invitation information: Joining a party uses information such as the host's local network address, port, session identifier, invitation token, expiry, and certificate fingerprint. Devices involved in a connection can see the network addresses needed for that connection.

We use this information to provide gameplay, display players, synchronize game state, reconnect devices, and remember your settings. We do not operate an online account service or a cloud gameplay database for these features. Avoid entering sensitive personal information in nicknames, drawings, guesses, or other game content.

3. Camera and device permissions

Camera: If you choose to scan a host's invitation QR code, the app requests camera access. Camera frames are processed on your device to read the invitation. PartyMonkey does not save or upload camera photographs or video for this feature. The decoded invitation is used to connect to the host. You can decline camera access and use the manual invitation-entry option instead.

Network access: Internet and network-state access are used for local multiplayer, connection checks, and advertising. Where the operating system requires permission to access the local network, that permission enables hosting and joining nearby games.

PartyMonkey does not request contacts, microphone, or GPS location access for gameplay. Advertising services may still infer an approximate location from an IP address, as described below. You can review or revoke optional permissions in your device settings.

4. Advertising and Google services

PartyMonkey uses Google AdMob, through the Google Mobile Ads SDK, to display ads between games. When advertising services are used, data is sent to Google and may be processed by its advertising service providers for ad delivery, measurement, service operation, diagnostics, and fraud or abuse prevention.

Depending on the platform, SDK configuration, and applicable privacy restrictions, this can include:

• IP address, which may reveal an approximate location.
• Device and app information, such as operating system, app version, and SDK information.
• Ad and app interaction information, such as ad impressions, taps, and video views.
• Diagnostic and performance information, including SDK errors and performance measurements.
• Identifiers permitted by the platform and configuration. An app set ID, where used, supports permitted non-advertising purposes such as analytics and fraud prevention, not personalized advertising or ad measurement.

The current Android app removes the Advertising ID permission. The app configures ad requests for child-directed treatment, under-age-of-consent treatment, and a general-audience ad content rating. These settings restrict advertising behavior; they do not mean that no technical or contextual data is processed.

The app checks Google's consent status before enabling ad requests. Where required and available through Google's consent system, an in-app privacy-options control lets you review available advertising privacy choices. The availability of this control depends on the consent system's requirements. Device privacy settings may provide additional controls.

PartyMonkey does not include a separate developer-operated analytics or crash-reporting service. Google's advertising SDK may nevertheless perform its own measurement and diagnostics. We do not sell personal information for money.

Read the Google Privacy Policy, how Google uses information from apps that use its services, and Google Mobile Ads data disclosures for further information.

5. Internet connectivity checks

To determine whether a device can reach the internet, the app may send HTTPS requests to Google's www.google.com/generate_204 and Cloudflare's cp.cloudflare.com/generate_204 endpoints. These requests do not include your PartyMonkey nickname, profile identifier, or game content.

The endpoint operators receive the source IP address and ordinary connection/request metadata needed to handle the request, and may retain service logs under their own policies. The app uses the response to show connection status. See the Google Privacy Policy and Cloudflare Privacy Policy.

6. Who receives information

Information is shared with the host and other participating devices as needed for multiplayer, with Google for advertising, and with Google and Cloudflare for the connectivity requests described above. We do not upload your local profile or gameplay content to a developer-operated gameplay server.

If you contact support, we receive your email address and the information you choose to send. Our email service provider processes that correspondence to deliver and store messages. We use it to answer your inquiry and handle privacy or support requests. Do not send passwords, invitation tokens, or unnecessary sensitive information.

We may disclose information in our possession when necessary to comply with applicable law or a valid legal request, or to address fraud, abuse, or threats to safety. External providers may process information in countries other than your own under their applicable policies and legal safeguards.

7. Security

Local multiplayer connections use encrypted TLS WebSockets, with certificate verification tied to the invitation. Connectivity checks use HTTPS, and Google states that Mobile Ads SDK data is encrypted in transit using TLS. The persistent profile identifier is stored using the device's secure-storage facilities; ordinary profile preferences use app-local storage. Android app backup is disabled in the app's configuration.

Keep invitations private: someone with a valid invitation may be able to join the party while it remains valid. Use trusted devices and networks. Encryption does not prevent another participant from viewing or copying information presented to them, and no storage or transmission method can be guaranteed completely secure.

8. Retention and deletion

• Profile and settings: These remain on your device between sessions until changed or removed. You can edit your nickname and avatar in the app. On Android, clearing the app's storage through device settings removes app-local data, including the stored profile. Uninstalling removes ordinary app data, but secure-storage items, particularly on iOS, may survive uninstall or be affected by operating-system restore behavior.
• Gameplay and connection state: These are held in memory for gameplay and reconnection, rather than saved to a developer-operated game history. Some state may remain while a party is open, including across individual rounds or temporary disconnections. State is released when the corresponding session is reset or disposed of, or when the app process ends. Other participants may retain information or screenshots they independently copied.
• Advertising and connectivity data: Google and Cloudflare control the retention of information they receive under their respective policies. Clearing PartyMonkey's local storage does not delete their records. Use their privacy resources to learn about provider-specific deletion and privacy controls.
• Support correspondence: We retain correspondence as needed to answer and resolve inquiries and meet applicable legal obligations. You can ask us to delete correspondence, subject to any necessary legal retention.

PartyMonkey does not provide online account creation, so there is no online PartyMonkey account to delete. For help with local-data removal or information you have sent to us, email support@cyberoid.io. We cannot remotely erase information stored solely on your device, copies on other players' devices, or records controlled independently by external providers.

9. Children and family privacy

The app does not ask players to provide their age or date of birth. It uses the child-directed and under-age-of-consent advertising settings described above. Players should use a nickname rather than identifying information and avoid sharing personal details in game content.

A parent or guardian with concerns about a child's information can contact support@cyberoid.io for assistance with information in our possession and guidance on device-local data. Permission prompts and this policy do not substitute for parental authorization where it is required by law.

10. Your choices and privacy requests

You can edit your local profile, revoke optional permissions, stop participating in a party, remove app-local data using device controls, and use any available advertising privacy options. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, or portability of personal information, object to certain processing, withdraw consent where processing relies on it, or complain to your local data-protection authority.

Send requests about information handled by Cyberoid.IO to support@cyberoid.io. We may need proportionate information to verify and respond to a request. We can only act on information within our control; requests concerning an external provider's independent processing should also be directed to that provider. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

11. Changes and contact

We will update this policy when our practices change and revise the date above. Where required, we will provide additional notice or seek consent before materially changing how personal information is used.

For questions about this policy or PartyMonkey's privacy practices, contact Cyberoid.IO at support@cyberoid.io.