Marki Privacy Policy

Effective date: July 11, 2026

Marki ("Marki", "we", "us", or "our") is a football card game operated from Tunisia. This policy explains what information Marki processes, why it is processed, how long it is kept, and the choices available to you.

Marki is intended for people aged 13 and older. It is not directed to children under 13.

Information We Process

Information You Provide

When you use online play, Marki processes:

• The player name you choose.
• The room code used to create or join a match.
• Answers and votes submitted during a match.
• Match settings and actions, such as readiness, card plays, passes, and replay requests.

Do not use your full legal name or include sensitive personal information in a player name or game answer.

Technical and Session Information

Marki creates and processes:

• Random player and room identifiers.
• A random authentication token used to protect your online session. The server stores only a cryptographic hash of this token.
• Connection state, match state, scores, hands, turns, and other data required to synchronize an online game.
• Basic network metadata, such as IP address, request time, and user agent, which may be processed automatically by our hosting and network providers for security and service operation.

Marki does not currently include advertising, third-party analytics, or third-party crash-reporting SDKs.

Information Stored on Your Device

Marki stores app preferences, including language and notification preferences, on your device. For online session recovery, it may store the room code, player identifier, player name, and the latest room snapshot. The online authentication token is stored using the device's secure storage facilities where supported.

How We Use Information

We process information to:

• Create, join, operate, synchronize, and restore online matches.
• Authenticate players and prevent one player from acting as another.
• Apply game rules, calculate results, and display match state.
• Maintain service security, investigate abuse, and diagnose operational failures.
• Respond to support, privacy, and deletion requests.

We do not sell personal information or use it for targeted advertising.

Legal Basis

We process game and session information because it is necessary to provide the online game you request. We may process limited technical information where necessary to secure and maintain the service and to comply with legal obligations.

Sharing and Service Providers

Information is shared only as needed to operate Marki:

• Other players in the same room can see your chosen player name, connection/readiness state, score, public game actions, answers, and votes where required by the game rules. Private hands are intended to be visible only to their owner.
• Infrastructure and hosting providers may process application traffic and basic network logs while hosting the Marki API and game server. The current game-server deployment is configured for Render.
• Authorities or other parties may receive information when required by law or necessary to protect users, Marki, or the public.

We do not allow service providers to use Marki data for their own advertising purposes.

Retention

• Active room and match data is currently held in game-server memory. A player's room data is removed when that player leaves, and the room is deleted when its last player leaves. Server restarts also clear in-memory rooms.
• Abandoned rooms may remain until the server restarts or the room is otherwise removed. We are working to add explicit inactivity expiration before public production.
• Online session information remains on your device until you leave the room, the session is found to be invalid, you clear app data, or you uninstall Marki.
• Infrastructure providers may retain security and access logs under their own operational retention schedules.
• Support and deletion-request correspondence may be retained as reasonably necessary to resolve the request and document compliance.

Security

Marki uses encrypted HTTPS/WSS connections in production, random session credentials, server-side token hashing, and secure device storage for session credentials where supported. No system can guarantee absolute security. Please report suspected security issues to hello@marki.app.

Your Choices and Data Deletion

You can remove your active room membership and local online session data by selecting Leave room in the app. Because Marki does not currently provide user accounts, requests are identified using the information you provide about the relevant room and player.

To request access, correction, or deletion of information associated with you, email hello@marki.app with the subject Marki data deletion request. Include your player name, approximate match date, and room code if available. Do not send your session token. We may request additional information to verify and locate the relevant data.

We will respond within a reasonable period and comply with applicable legal requirements. Some information may be retained where required for security, fraud prevention, legal compliance, or resolving disputes.

Children's Privacy

Marki is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact hello@marki.app so we can investigate and delete it where appropriate.

International Processing

Marki is operated from Tunisia. Hosting providers may process information in other countries. Those countries may have different data-protection laws from your country.

Changes to This Policy

We may update this policy when Marki's features, providers, or legal obligations change. The effective date above will be updated, and material changes will be communicated where appropriate.

Contact

Marki
Tunisia
Email: hello@marki.app