Royal Table

Royal Table

Privacy Policy

Effective 25 October 2026

Royal Table (formerly Ludo Royal) is a collection of board and card games for Android, including Ludo, Carrom, Chess and Snakes & Ladders, made by Khuram Imtiaz (“we”). This policy explains what the game collects and why. In short: you can play without an account, the game shows ads from Google AdMob that keep it free to play, and we never sell your information.

Information we collect

Guest profile. When you first play online, the game creates a random player ID and stores your chosen display name and avatar, your level, coins and online match statistics on our server.

Account (optional). If you sign in with Google or with your email address, Google Firebase Authentication handles the sign-in and gives us your email address and a unique user ID. We do not use your Google name or photo. To sign in with email, we send a one-time code to your address; the code expires after 10 minutes and we store it only as a scrambled hash until it is used. There are no passwords. Accounts that were created with a password in earlier versions keep working; those passwords are handled by Firebase and never reach our server. For signed-in players we store the email address, whether it is verified, and a cloud save of your progress: level, experience, coins, statistics, pawns, dice and other items you own, achievements and your daily reward streak.

Online matches. We record finished matches (room code, the game and its mode, the players and their places, and game statistics such as rolls, captures, moves or points) so players can see their history and so we can keep the game fair.

Text chat and reports. Chat messages in online rooms are sent to the other players in that room. The server keeps the most recent messages in memory only while the room is open. If a player reports someone, the report (reason and optional text) is stored together with the reported player’s recent chat so we can review it.

Friends and messages (optional). Every player has a friend code that others can use to send a friend request. When you add friends we store your friend list, pending requests and the players you block, together with the direct messages and game invites you exchange with friends, so they can be shown on both phones. Each conversation keeps only its newest 300 messages, and removing a friend or blocking a player deletes your conversation with them. Your friends can see your name, avatar and level, whether you have the game open (“Online”) and roughly when you last played. If you report a friend, the report includes your recent messages with them so we can review it.

Voice chat (optional). Voice travels directly between players’ phones (WebRTC). Google’s STUN servers, and Cloudflare’s relay when a direct connection is not possible, help the phones connect. We do not record or store voice. The game asks for microphone permission only when you use voice chat.

Notifications (optional). If you allow notifications, Firebase Cloud Messaging gives your phone a push token. We store it with your language setting to tell you when it is your turn, when someone wants a rematch, when you get a friend request or a message, and for occasional game announcements. Daily reward reminders are scheduled on your phone. You can turn notifications off in the game’s Settings.

Technical data. Our servers process your IP address to connect you and to limit abuse, such as too many new profiles from one address or too many sign-in codes for one email address. It is not stored in your profile. Our service providers may keep standard server logs for security.

Crash reports and usage statistics. To find and fix problems, the game sends us reports when it crashes or stops responding: what went wrong inside the app, the app version, and your phone’s model and Android version. Crash reports are not linked to your account or IP address, and we remove email addresses, tokens and other identifiers from them before they are stored. The game also sends anonymous usage statistics: a random install ID that is not linked to your account, the app version, your phone’s operating system and language, the country derived from your connection, and which games you played offline, with their mode, result and length. To see how ads perform, it also reports what Google AdMob says each ad earned (the ad format, where it was shown and the amount), which we keep only as daily totals. We use these reports and statistics only to improve the game.

On your phone. Settings, local progress and your sign-in session are stored on your device and removed when you uninstall the game.

Ads

The game shows ads from Google AdMob: rewarded ads that you choose to watch for in-game rewards, and occasional full-screen ads between matches, never during a match. To show and measure ads, Google AdMob may collect your device’s advertising ID, your IP address and the approximate location derived from it, information about your device and the app, and how you interact with ads. If you agree, Google and its partners may use this information to show you personalised ads; otherwise you see ads that are not personalised.

In the European Economic Area, the United Kingdom and Switzerland, the game asks for your consent before any personalised advertising, using Google’s consent message. In US states with privacy laws you can opt out of the “sale” or “sharing” of your information. You can change these choices at any time under Settings → Ad privacy choices in the game (shown where these choices apply), and you can reset or delete your advertising ID in your phone’s settings. Learn how Google uses information from apps that use its services.

How we use it

To run the game: matchmaking and online play, signing you in, saving and restoring your progress, notifications you asked for, moderation and preventing cheating and abuse. Ads are provided by Google AdMob as described in “Ads”. We do not build profiles about you ourselves, and we do not sell or rent your information.

Who can see it

Other players see your display name, avatar, level, your moves, and any chat messages or voice you send while playing with them. Your friends also see your messages to them and whether you are online. Players you have not added only see you in the matches you share. We share data with the service providers below only to run the game and show ads, and with authorities only when the law requires it.

Service providers

Cloudflare hosts the game servers and database. Google provides Firebase Authentication, Firebase Cloud Messaging, Google AdMob (ads and the consent and privacy-choices messages) and Google Play. An email delivery provider sends sign-in codes on our behalf. Read the Cloudflare privacy policy and the Google privacy policy for their practices.

How long we keep it

Your account and cloud save are kept until you delete your account. Friends and messages are kept until you remove the friend, block them or delete your account. Sign-in codes are deleted when they are used or expire. When you delete your account, your profile, email, cloud save, push token, friend list, blocks and every conversation you were part of are deleted; finished matches stay in other players’ histories without your name or ID, and reports lose the link to you. Reports are kept only as long as needed for moderation. Crash reports and anonymous statistics are kept only as long as they help us improve the game.

Your choices

You can play as a guest, change your name and avatar at any time, remove friends or block and report players, turn off notifications and voice chat in Settings, change your ad privacy choices under Settings → Ad privacy choices (where these choices apply), and delete your account in the game or by email. To ask for a copy of your information or to correct it, email procoderx786@gmail.com.

Children

Royal Table is a family board game, but its online features and ads are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we will delete it.

Security

The game talks to our servers only over encrypted connections (HTTPS and secure WebSockets), sign-in is handled by Firebase, and access to our administration tools is limited to approved accounts.

Changes

If this policy changes, we will update this page and its effective date. Important changes will also be announced in the game.

Questions? Email procoderx786@gmail.com.