Privacy Policy
This Privacy Policy explains what information the Android game XO Clash – Tic Tac Toe Online (package com.superxo.bara, the “App”) and its game server at xoclash.maxenergic.com (together, the “Service”) collect, how it is used, and the choices you have. The Service is provided by BA'RA – Max Energic Apps (“we”, “us”).
The short version: you can play without creating an account. We store the game data needed to run your profile, progress and online matches on our own server. We do not sell your data. Ads are served by Google AdMob, and purchases are handled by Google Play — we never see your card details. You can ask us to delete your account and data at any time by emailing support@maxenergic.com.
1. Information we collect
We only collect what is needed to run the game. Depending on which features you use, this may include:
| Data | What it is | Why |
|---|---|---|
| Guest account identifier | A random identifier generated on your device the first time you use online features, plus a server-side player ID and friend code linked to it. | To create your account without asking for an email or password, and to recognise your device when it connects to our server. |
| Profile | The nickname and avatar you choose in the game. | Shown to you and, in online features, to other players (for example on leaderboards, in matches and friends lists). |
| Game progress & cloud save | Levels, XP, coins, achievements, unlocked items, settings, statistics and your cloud save. | To save your progress and restore it on another device. |
| Google Play Games ID (optional) | If you choose to sign in with Google Play Games, your Play Games player ID. | Only to link your game account to Play Games so you can recover it. Signing in is optional. |
| Online match data | Moves, match results, ratings (ELO), rankings, tournament entries, friends lists and invites, and the quick-phrases and emotes you send. | To run online matches, matchmaking, spectating, leaderboards, tournaments and friends features. |
| Technical data | IP address and basic request information (time, requested endpoint, app version) seen by our server when the App connects. | To operate, secure and troubleshoot the Service, and to prevent abuse (for example rate limiting). |
No free-text chat. In-game communication is limited to predefined quick-phrases and emotes; you cannot type free-text messages to other players.
We do not ask for your real name, email address, phone number, contacts, photos or precise location to play. If you email us for support, we receive your email address and whatever you choose to include in your message.
Some features work entirely offline (for example matches against the AI). Data from offline play stays on your device until the App syncs your progress with our server.
2. How we use information
- To provide the game: accounts, progress, cloud save, online matches, rankings, tournaments and friends.
- To keep the Service fair, secure and working: preventing cheating, abuse and fraud, and fixing problems.
- To deliver rewards and items you earn or buy.
- To show ads (see Advertising and consent).
- To answer your support requests.
- To comply with legal obligations.
3. Third-party services
The App uses the following services provided by Google. They process data under their own privacy policies:
- Google Play Games Services (optional sign-in) – Google Privacy Policy
- Google Play Billing (in-app purchases) – Google Payments Privacy Notice
- Google AdMob and the Google User Messaging Platform (UMP) (ads and consent) – Google Privacy Policy and How Google uses information from sites or apps that use its services
4. Advertising and consent
The App shows ads served by Google AdMob. AdMob may collect and use information such as your device's advertising ID, IP address and information about ad interactions to serve, measure and (where permitted) personalise ads, in accordance with Google's advertising policies.
- Where required (for example in the EEA, the UK and Switzerland), the App asks for your consent through Google's User Messaging Platform before personalised ads are shown. You can review or change your choice from the App's settings, where this option is available.
- You can reset or delete your advertising ID, or opt out of ads personalisation, in your Android device settings (Settings › Google › Ads, or Settings › Privacy › Ads, depending on your device).
- We do not share the data stored on our own server with advertisers.
5. In-app purchases
Purchases are processed by Google Play Billing. We receive confirmation of the purchase (such as the product, purchase token and order status) so that we can deliver the item to your account. We never receive or store your card number or other payment details.
6. Sharing and selling
We do not sell your personal information, and we do not share it for money or other valuable consideration. We share information only:
- with other players, to the extent needed for online features (for example your nickname, avatar, rating and match moves);
- with the Google services listed above, as part of how those features work;
- with our hosting provider, which runs the server our game uses;
- when required by law, or to protect the rights, safety and security of our players, the Service or others.
7. Where data is stored and security
Game data is stored on our own server at xoclash.maxenergic.com, which runs on a virtual private server (VPS) that we manage. Data is sent between the App and our server over encrypted connections (HTTPS). We use access tokens for authentication and limit access to the server to what is needed to operate it.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to fix problems promptly if they occur.
Depending on where you live, your information may be processed in a country other than your own.
8. Retention
- Account, profile, progress and cloud save data are kept while your account is in use, and deleted when you ask us to delete your account (see below).
- Online match records, ratings and leaderboard entries are kept as long as needed to run rankings, tournaments and fair play, and are deleted or anonymised when your account is deleted.
- Server logs are kept only for a limited period for security and troubleshooting, then deleted.
- Support emails are kept as long as needed to help you and for our records.
We may keep limited information longer where the law requires it (for example records of purchases).
9. Deleting your account and data
You can ask us to delete your XO Clash account and the data associated with it at any time.
How to request deletion of your account and data
- Open XO Clash and note your nickname and your friend code (shown in the Friends tab of the Online section).
- Send an email to support@maxenergic.com with the subject “XO Clash account deletion request”, including your nickname and friend code (and, if you signed in with Play Games, say so).
- We may ask you to confirm the request from within the App or answer a question to verify that the account is yours.
- We will delete your account, profile, progress, cloud save and online data from our server, and confirm by email, normally within 30 days.
Uninstalling the App or clearing its data removes the information stored on your device, but does not delete your account on our server — please email us for that. Purchases are recorded by Google Play; deleting your XO Clash account does not delete your Google Play purchase history. Data held by Google (for example your advertising ID or Play Games account) is managed through your Google account settings.
10. Your choices and rights
You can change your nickname and avatar in the App, choose whether to sign in with Play Games, and manage ad consent and your advertising ID as described above. Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, or to object to or restrict certain processing. To make a request, contact us at support@maxenergic.com. You may also have the right to complain to your local data protection authority.
11. Children
XO Clash is rated 3+ and can be enjoyed by players of all ages. We do not knowingly collect personal information from children beyond what is described in this policy, which is limited to what is needed to run the game. Communication between players is limited to predefined quick-phrases and emotes. Where applicable, ads are configured in line with Google Play's Families policies and Google's requirements for ad requests from apps that may be used by children.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@maxenergic.com and we will delete it.
12. Changes to this policy
We may update this policy from time to time, for example when we add features. We will post the updated version on this page and change the effective date above. If changes are significant, we will also let you know in the App or on our Google Play listing.
13. Contact us
BA'RA – Max Energic Apps
Email: support@maxenergic.com
Website: https://xoclash.maxenergic.com