Privacy Policy — DuelBox

Last updated: 1 September 2026

DuelBox is a collection of two-player games for Android. This policy explains what the app does and does not do with your information.

The short version

Your games stay on your phone. Nothing you type, name, or play is ever sent anywhere.

The app reports anonymous usage statistics to Google Analytics for Firebase — how often the app is opened, which screens are reached, and what kind of device it is running on. That is the only thing that leaves your phone, it is not tied to your name or to any account, and you can switch it off in Settings → Privacy.

There is no account, and no server of ours anywhere.

What stays on your device

The app stores a small amount of data locally, using Android’s own app storage:

• the display name you type in Settings, and the guest name for pass-and-play,
• your sound, vibration, theme, piece and language preferences,
• the per-game settings you choose, and your win/loss record,
• any match you left half-played, so it can be picked up again.

None of this is ever uploaded. It is deleted when you uninstall the app.

What is exchanged when you play on two devices

Choosing Two devices uses Google’s Nearby Connections, which links the two phones directly over Bluetooth and Wi-Fi. No game data travels over the internet, and none of it reaches us or anyone else.

While a match is running, the two devices exchange:

• the display name you set in Settings, so the other player knows who they are playing,
• which game is being played,
• the moves of that match, and each player’s own view of the board.

This exchange lasts only as long as the match. Nothing is stored on either device afterwards, and nothing is sent anywhere else.

Usage statistics

The app includes Google Analytics for Firebase. When it is switched on, the Firebase SDK collects a standard set of measurements automatically. We have not added any events of our own — there is no code in DuelBox that logs anything — so what is collected is exactly the SDK’s own defaults:

• App usage: when the app is first opened, when a session starts, how long it lasts, which screens are shown, and when the app or the operating system is updated.
• Device and app information: device model and make, operating system version, screen size, language, and the version of DuelBox you are running.
• Approximate location: a country, and sometimes a region or city, worked out by Google from your IP address. The app does not use your device’s location, and never asks for it.
• Identifiers: a Firebase installation ID, which is generated on your device and identifies the installation rather than you, and your device’s Android advertising ID.

We use this only to see which games people actually play and which devices to keep working on. It is processed by Google as our data processor; Google’s own handling of it is described in Google’s Privacy Policy and in How Google uses data from apps that use our services. Firebase retains this data for 2 months for the identifiers and 14 months for aggregate reporting.

What is never collected: your display name or the guest name, anything else you type, the games you play or their moves, your records, your settings, your contacts, your files, your precise location, or anything at all from a two-device match.

Turning it off

Settings → Privacy → Share usage data. Switching it off stops collection immediately and it stays off on every later launch. Nothing else about the app changes; every game works exactly the same.

You can also reset or delete your advertising ID in Android’s own settings, under Settings → Privacy → Ads.

Permissions

Two-device play asks for Bluetooth and nearby-device permissions when you first use it. Android requires them to let two phones discover and connect to each other.

• On Android 13 and later, these are requested as Bluetooth and nearby-Wi-Fi permissions, declared so that they are not used to derive your location.
• On Android 12, Android additionally requires the location permission for Bluetooth scanning. The app does not access, use, or store your location. It is requested only because Android will not permit Bluetooth discovery without it on that version.

You can decline these permissions. Two-device play will not work, but every other way of playing — pass and play, and playing the computer — is unaffected.

The app also holds the internet permission. It is used for one thing only: sending the usage statistics described above. No game data, and nothing you type, is ever sent over it.

Children

The app is not directed at children and asks for no personal information from anyone. It contains no advertising. If you are setting it up for a child, we recommend switching Share usage data off, which stops the advertising ID being collected.

Your rights

If you are in the EU or UK, you can ask what is held about you, ask for it to be deleted, or object to the processing, by writing to the address below. Switching Share usage data off in the app is the fastest way to stop it, and uninstalling the app ends it entirely.

Changes

If this policy changes, the updated version will be published here and the date at the top updated.

Contact

Questions about this policy: ataalpaltug92@gmail.com