Privacy Policy
Last updated: October 27, 2026
legs (the “Service”) respects your privacy and collects only the minimum information needed. This policy explains what information the Service collects, how it is used, and how it is stored.
1. Information we collect
There is no separate sign-up or login screen. The app automatically creates or restores an anonymous account. The following information is collected or generated to provide the Service:
• Anonymous account identifier: an automatically assigned account ID. It does not itself contain your name, email address or phone number, but links your nickname, game records and usage information to the same account.
• Nickname: the display name you enter.
• Game and room data: room codes, participants, prize items, game choices and results, and records of rooms created and games played.
• In-app chat messages: text exchanged in legs waiting rooms. The app does not read your email inbox or SMS/MMS messages on your phone.
• Notification information: device push tokens (FCM/APNs) used to deliver notifications, and the notification permission status reported by the app. Permission status is collected independently of push-token registration; disabling notifications does not by itself stop collection of that status.
• Advertising information: Google AdMob may process advertising identifiers (IDFA on iOS or the Android advertising ID), approximate location inferred from IP addresses, device and ad-interaction information, and crash/performance diagnostics such as launch time or hang rate to serve, measure and improve ads. Use of identifiers and personalized ads depends on applicable consent choices and device settings. On iOS, access to IDFA requires App Tracking Transparency (ATT) permission.
• Environment, usage and diagnostic information: our servers store the app platform, version and build, OS version, device category, preferred language, displayed app language, time zone, notification permission status, latest activity and app-open/foreground times, and daily activity/foreground records linked to the anonymous account ID. These are reported at app launch or return to the foreground, authentication and API requests, as applicable. Time zone is not used to infer your location. Google Firebase Analytics separately collects usage events and device/app information, and Firebase Crashlytics collects crash and diagnostic data. These records may use pseudonymous account or installation identifiers and are not necessarily fully anonymized.
2. How we use information
We use this information to run real-time games, synchronize players, provide result links and deliver notifications. Account-linked environment and activity records support usage analysis, feature improvements and investigation of device-, language- or version-specific problems. Automatic authentication refreshes may count as activity; app opens and returns to the foreground are recorded separately. AdMob processes the information needed to serve and measure ads. We do not sell user-entered game or chat data, or use it for marketing. We do not provide our server's account-linked environment and activity records to advertisers for targeting.
3. Processors and third parties
We use the following providers' infrastructure to operate the Service:
• Our app backend: account authentication, database storage, real-time synchronization, and storage and analysis of account-linked environment and activity records.
• Google Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs): delivery of push notifications.
• Google AdMob: serving ads in the app. If you grant tracking permission, personalized ads using the advertising identifier (IDFA) may be shown.
• Google Firebase Analytics and Crashlytics: usage analysis and crash/diagnostic reporting. Their processing may use pseudonymous app-installation identifiers. For details, see https://firebase.google.com/support/privacy.
We do not sell the personal information you enter. You can manage advertising choices and notification permissions in device settings and, where available, consent prompts. Notification permission and collection of the app's reported permission status are separate. These settings do not by themselves delete account or activity records already stored on our servers.
4. Retention and deletion
• Ladder results and share links: automatically deleted 30 days after creation.
• Room, member, and chat data: deleted when the room expires.
• Account and operational records: anonymous account identifiers, latest reported environment/notification settings, daily activity/foreground records and operational game statistics are stored separately from expiring room details. These server records currently have no automatic expiry. You may request deletion using the contact details below, subject to verification of the records concerned. Uninstalling the app does not automatically delete server records, and the account may be restored through iCloud Keychain or an Android device backup.
5. Your rights
You may request access to or deletion of your records using the contact details below. As accounts have no email/password login, include information that can help locate and verify the relevant records, such as a room code. We may ask for additional information needed to verify the request. Resetting or uninstalling the app is not a request to delete server records.
6. Security
Communication with our servers is encrypted using HTTPS, and access to account-linked records is restricted to service operation and support needs. The app does not require a name, email address or phone number for sign-up, but an anonymous account ID can still link records to the same account; we do not describe those records as fully anonymous.
7. Children's privacy
The Service is suitable for all ages and does not knowingly collect information specifically from children.
8. Changes to this policy
If this policy changes, we will post the changes and the date on this page.
9. Contact
Privacy inquiries: cs@devryner.com (Devryner)
Support page: https://cs.devryner.com/apps/legs