Privacy policy — Ramio
Last updated: 10 September 2026
This is an English translation of the French policy; in case of discrepancy, the French version prevails.
This policy describes the data processed by the “Ramio” mobile app (a manipulation rummy card game, hereafter “the app”) and the players’ rights.
Who is responsible for the data?
The app is published under the trade name Quintain Games (see the legal notice); the data controller is the publisher, Tristan Hurel. Contact: contact@quintaingames.com
Use of the game is also governed by the terms of use.
What data is collected?
The app collects the strict minimum needed for the game to work:
- E-mail address and password: to create the account and sign in. The password is never stored in clear text (it is hashed by our authentication provider). If you choose Sign in with Google or Apple, the app only receives the e-mail address of the chosen account (no access to your other Google or Apple data).
- Guest account: you can try the game without creating an account. An anonymous technical account (with no e-mail address) is then created to keep your progress; you can convert it into a full account at any time, or delete it like any other account.
- Nickname: the name shown to other players during a game. It is unique and visible to signed-in players (friends are added by nickname).
- Friends list and invitations: the friendships you create in the game and the room invitations exchanged between friends.
- Messages between friends: the private messages you exchange with your friends from the “My friends” screen are stored so that the conversation remains readable. They are visible only to you and your correspondent, and are deleted with the account.
- Game results: score, ranking, date and game mode of every finished game, to feed the “My profile” screen (personal statistics, history and Elo ranking).
- Notification token: a technical device identifier provided by the notification service, used to receive friend invitations as push notifications. Deleted at sign-out.
- Reports: if you report a player (nickname or inappropriate remarks), we keep the reported nickname, the reason you give and the date, in order to moderate the game. Room chat messages are never stored; offensive words are masked automatically.
- Blocked players: if you block a player, we keep that link (your account, the blocked account, the date) to prevent that player from contacting you (friend requests, messages, invitations, in-game chat). The blocked player is not informed; you can unblock them at any time from the “My friends” screen. These links are deleted with the account.
- Technical connection data: IP address and technical logs, processed transiently to route online games and secure the service.
- Anonymous audience measurement: to know whether the game is enjoyed and to improve it, the app sends a random device identifier (never linked to your account or e-mail address), the date of first opening, the days of use, two discovery milestones (tutorial finished, first game started) and the visual theme (“kit”) chosen in the app. These measurements cannot identify you.
- Crash reports: in case of a technical error, an anonymous report (device model, system and app versions, technical trace of the error) is sent to our provider Sentry (ingested in the European Union) to fix bugs. It is not linked to your account.
The app collects no location data and no photos.
Why this data, and on what legal basis?
- Performance of the contract (the terms of use): account, nickname, games, friends, messages, rankings, turn notifications.
- Legitimate interest of the publisher: security of the service, fighting cheating and abuse, moderating reports, fixing bugs, anonymous audience measurement to improve the game.
- Consent, asked for in the app and withdrawable at any time: finding friends among your contacts, “push” notifications, and — once advertising is switched on — personalised advertising.
- Legal obligation: limited retention of technical logs.
Advertising
The current version of the app shows no advertising.
At public release the game will remain free and may show advertising served by Google AdMob: optional videos (watched deliberately for a hint, an unlock or a bonus) and, in some cases, ads between two games. In the European Economic Area, the United Kingdom and Switzerland, a consent window will then appear before any personalised advertising; you may refuse, change your mind at any time in the app, and still play. On iPhone the system tracking permission (App Tracking Transparency) will also be requested. This policy will be updated and dated at that point, before any of it goes live.
Phone contacts (optional feature)
The app offers to find your friends among your contacts. This feature never activates on its own: it asks for your consent in the app, then for the system permission.
If you use it:
- only encrypted fingerprints (SHA-256 hashes) of your contacts’ e-mail addresses are sent to our servers — never the names, never the addresses in clear text, never the phone numbers;
- these fingerprints are compared on the fly with those of existing accounts to suggest matching players, then forgotten: nothing from your address book is kept;
- you can refuse or revoke the permission at any time in the phone settings, without losing any other feature of the game.
Where is the data stored?
- Accounts and game results are stored at Supabase (database hosting provider), in a data centre located in the European Union.
- The game server (real-time games) is hosted at Fly.io; the state of a game in progress is kept in memory only, for the duration of the game.
- Some providers are established outside the European Union (Fly.io and Google Firebase, in the United States): those transfers rely on the European Commission’s standard contractual clauses and, where applicable, on the EU–US Data Privacy Framework. Sentry (crash reports) ingests in the European Union.
Exchanges between the app and the servers are encrypted (HTTPS/WSS).
How long is the data kept?
- Account and game history: as long as the account exists.
- When the account is deleted, the associated personal data is deleted or anonymised without undue delay.
Who has access to the data?
Nobody other than the publisher and its technical providers (Supabase, Fly.io, Google Firebase for delivering notifications, and Sentry for crash reports), strictly to the extent needed to run the service. The data is neither sold, nor rented, nor shared for advertising or commercial purposes. The other players in a game only see your nickname and your game actions.
Your rights (GDPR)
Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict and port your data.
You can delete your account directly in the app: “My profile” screen, “Delete my account” button (see the Delete your account page). Deletion is immediate and erases the account, the statistics and the game history.
To exercise your other rights, or to request deletion without access to the app, write to contact@quintaingames.com. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Minors
The app is a card game with no money at stake and no inappropriate content. It is open from 13 years old; in France, the permission of a person with parental authority is required below 15. A legal guardian may request the deletion of their child’s account at contact@quintaingames.com. In-app purchases (tokens, theme kits, premium option) will be offered at public release; they are described in the terms of use.
Changes
This policy may evolve (for instance when new features are added). The version in force is published at the address given on the App Store and Google Play listings, with its update date.
The website
The quintaingames.com/ramio website sets no cookies and writes nothing on your device. An anonymous traffic counter records the page viewed, the language and the referral channel, with no IP address or identifier.