Privacy policy

Who we are

Arojen Tarinat is developed by Juuso Honkonen and Vilho Valkeala, independent developers in Finland. They are the controllers of the personal data described here. Contact them about privacy at contact@arojentarinat.com.

This policy covers the Arojen Tarinat Android app, the browser version of the game and this website.

In short

We do not sell your personal data, and you never need an account to play.

Why we may process your data

We process personal data only for the purposes described in this policy and on a legal basis permitted by the GDPR:

• Providing the game and features you request: performance of our agreement with you (Article 6(1)(b)), including account services, cloud saves, multiplayer and the optional Moose assistant.
• Gameplay analytics: your consent (Article 6(1)(a)). You can change your choice in Settings.
• Crash reports and community safety: our legitimate interests (Article 6(1)(f)) in fixing errors and keeping online play safe.
• Notifications: your permission (consent), which you can withdraw through your device settings.
• Advertising: your choices in Google's consent form where consent is required. Google may act as an independent controller for some advertising processing.
• Purchases and accounting: performing our agreement with you (Article 6(1)(b)) and meeting legal obligations (Article 6(1)(c)).
• Support requests: our legitimate interests in responding to you (Article 6(1)(f)) or, where relevant, steps you request before entering into an agreement (Article 6(1)(b)).
• Website operation and security: our legitimate interests (Article 6(1)(f)) in delivering the site and protecting it from misuse.

Data on your device

Your campaigns, save slots, settings, achievements and statistics are stored on your phone. They stay there until you uninstall the game or clear its data. Android may include them in your own device backup, which is under your control.

Accounts and cloud save

Creating an account is optional. If you sign in with email or with Google, we store:

• your email address, or the identifier and email address Google shares when you choose Sign in with Google;
• a copy of your progress: statistics, unlocked achievements and save games, so you can continue on another phone.

Even without an account, the game creates an anonymous identifier when you first play online, so the server can tell players apart. The legal basis is the performance of our agreement with you (providing the game you asked for). You can delete your account and this data at any time: see Delete your account.

Multiplayer, chat and voice messages

When you play online we process the name you choose, the rooms you create or join, your realm and moves, and the messages you send:

• Chat messages are shown to the other players in your room.
• Voice messages of up to 30 seconds are recorded only while you hold the record button. The microphone is used for nothing else, and Android asks for your permission first.
• You can mute players and report messages. Reports are stored so we can review them and act against abuse.

Please do not share personal information in chat. The legal basis is the performance of our agreement with you, and our legitimate interest in keeping the community safe.

Shared game content

Generated card images and their metadata are stored in Supabase and shown to players. We process this content to provide shared game features and keep the service secure and free from abuse, based on our legitimate interests. We keep it for as long as it remains in the game and remove it on request where it can be linked to you.

The Moose assistant

When you ask the Moose a question about the rules, your current message and up to six recent messages from that session are sent through our server to OpenAI to write the answer. We do not send your name, account or other personal data with them, and we do not save AI chat transcripts in our database. The conversation remains in the app only for the current session. OpenAI may keep requests for up to 30 days for abuse monitoring and does not use them to train its models by default. Please do not include personal or sensitive information in your messages.

Analytics and crash reports

Gameplay analytics, only with your consent

The first time you open the game we ask whether we may collect pseudonymous usage statistics. If you agree, the game sends a random installation identifier, session information, platform and app version, and events such as a session starting, a campaign starting or ending, progress, settings changes or an achievement unlocked. They go to our Supabase database and, in the Google Play version, to Google Analytics for Firebase. You can change your choice at any time in Settings; turning it off also deletes what is waiting to be sent from your phone. The legal basis is your consent.

Crash reports

If the app crashes, Firebase Crashlytics sends a crash report: the technical details of the error, your phone model, Android version and app version, and a random installation identifier. We use it only to find and fix bugs, based on our legitimate interest in a working game.

Adverts

The free version shows banner adverts from Google AdMob. AdMob and its partners may process your advertising ID, IP address, approximate location, device information and interactions with adverts to show and measure adverts and prevent fraud. Where the law requires it, Google's consent form asks how you want ads to be personalised before any are shown, and you can change your choice later in Settings. Google acts as an independent controller for some advertising processing. You can also reset or delete your advertising ID in your phone's settings.

With Arojen Premium the game loads no adverts at all.

Arojen Premium and purchases

Arojen Premium is sold through Google Play. Google handles the payment; we never see your card or payment details. To confirm that a subscription is active, our server checks the purchase token with Google Play and keeps the subscription status (active, renewing or expired, and when it ends). The legal basis is the performance of our agreement with you and our legal duties for accounting.

Notifications and in-app messages

On Android 13 and newer the game asks for permission before sending notifications about news and events. To deliver them, Firebase Cloud Messaging gives your installation a random token. In-game announcements are shown with Firebase In-App Messaging. You can turn notifications off at any time in your phone's settings.

This website

This website uses no cookies, no analytics and no trackers, and all of its fonts and images are served from the site itself. Our host, Vercel, processes your IP address and browser details in short-lived server logs to deliver the pages and protect the site. The contact form only opens your own email app; nothing is sent or stored by the site.

Service providers

We use these providers to run the game. They process data on our behalf under contracts that protect it, except where a provider acts as an independent controller as described above:

Some providers process data outside the European Economic Area, for example in the United States. Such transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep data

• Account and cloud save: until you delete your account.
• Chat and voice messages: for as long as the match exists, and deleted with your account.
• Analytics events: at most 14 months.
• Shared game content: for as long as it remains in the game; we remove it on request where it can be linked to you.
• Moose assistant messages: not saved by us as chat transcripts; they remain in the app for the current session. OpenAI may keep requests for up to 30 days for abuse monitoring.
• Crash reports: up to 90 days in Firebase Crashlytics.
• Subscription records: as long as the subscription runs, then as long as accounting law requires.
• Emails to us: up to 12 months after the matter is resolved.
• Advertising data: as set out in Google's own policies.

Your rights

Under the EU General Data Protection Regulation you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting processing that took place before withdrawal. To use these rights, email contact@arojentarinat.com. Include the email you signed in with or, for an analytics request, the identifier shown in Settings so we can find the relevant data. We reply within one month.

You may also lodge a complaint with the Finnish data protection authority, the Data Protection Ombudsman, or with the authority where you live.

Children

Arojen Tarinat is meant for players aged 13 and over, because it includes chat with other players and adverts. We do not knowingly collect personal data from younger children. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

When the game changes how it uses data, we update this page and the date at the top. For significant changes we also tell you in the game.