Privacy Policy
How Gammo collects, uses and protects your personal data. · Last updated 23 August 2026 · Effective 23 August 2026
The short version
- We collect only what we need to run the game: your account, your gameplay, and basic analytics.
- Your data lives on servers in the EU (Frankfurt) and is never sold to anyone.
- You can delete your account and all your data from inside the app, at any time.
- You can play as a guest — signing in with Apple, Google or email is optional.
- Under GDPR you can access, correct, export or erase your data. Just ask us.
1Who we are
Gammo (“Gammo”, “we”, “us”) is a free-to-play mobile backgammon game. This policy explains what personal data we process when you use the Gammo mobile app or this website, and your rights over that data.
For the purposes of the EU/EEA General Data Protection Regulation (GDPR), the data controller is:
- Erlend Ellingsen, based in Norway.
- Privacy & data-request contact: privacy@gammo.app
2What we collect and why
We keep data collection to the minimum needed to run Gammo. You can play as a guest without an account; some data below only applies once you choose to sign in or use a specific feature.
| What | Why |
|---|---|
| Account identity — an Apple or Google sign-in token, or your email address for email sign-in; your display name and country | To create and secure your account and let you sign back in across devices |
| Gameplay data — games, moves, dice, ratings, streaks, achievements, tournament and club membership | To run matches, keep the game state authoritative and fair, and show leaderboards |
| Push notification token — the device token issued by Apple (APNs) or Google (FCM) | To send turn reminders and the nudges you opt into (you can turn these off) |
| Chat, reports and blocks — messages you send in game/club chat, and any reports or blocks you make | To deliver messages and keep the community safe (moderation, mute/ban) |
| Contact matches — hashes of your contacts’ email addresses, if you opt into “find friends from contacts” | To show which of your contacts already play Gammo. Raw contacts never leave your device — only irreversible SHA-256 hashes are sent, and we don’t store them |
| Purchases — the store receipt and entitlement (coins, subscription, remove-ads) for any in-app purchase | To grant what you bought and validate the purchase |
| Analytics & diagnostics — feature-usage events (e.g. login funnel), app version, platform, coarse country, and crash/error reports | To understand what’s used, fix bugs and improve the app |
We do not collect your precise location, we do not read the content of your device contacts (only hashes for matching), and we do not use third-party advertising or tracking SDKs today. (See §8 if that ever changes.)
In GDPR terms, we rely on performance of our agreement with you to run your account and the game, your consent for notifications and contact matching (which you can withdraw any time), and our legitimate interest in keeping the community safe and improving the app.
3Age & children
Gammo is not directed at children. You must be at least 13 years old to use Gammo, and older where your country requires a higher age for consent to process personal data (16 in some EU/EEA states). If you are under the applicable age, please don’t use the app. If we learn we have collected data from a child below the applicable age, we will delete it.
4Who we share it with
We do not sell your personal data and we do not share it for advertising. We use a small number of trusted service providers (“processors”) who process data on our behalf under data-processing terms, only to deliver the service:
- DigitalOcean — managed database hosting (Frankfurt, EU), where your account and gameplay data is stored.
- Apple — Sign in with Apple, push delivery (APNs) and App Store in-app purchases.
- Google — Sign in with Google, push delivery (Firebase Cloud Messaging) and Google Play in-app purchases.
- Postmark — sending the one-time codes/links for email sign-in.
We may also disclose data where required by law, or to protect the rights, safety and security of Gammo and its players (for example, acting on a report of abuse).
5Where your data is stored & transfers
Your account and gameplay data is stored on servers in the European Union (Frankfurt, Germany). Some providers above (e.g. Apple and Google for sign-in, push and payments) may process limited data outside the EEA, including in the United States. Where that happens, those transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses and the providers’ certifications.
6How long we keep it
We keep your account and gameplay data for as long as your account exists, so the game works across sessions and devices. When you delete your account (see §7), we delete your personal data. Some records may be retained for a short period, or in aggregated/anonymised form, where we need them for security, fraud prevention, dispute resolution or to meet legal obligations. Purchase records may be retained as required by tax and accounting law.
7Your rights & deleting your account
Under the GDPR you have the right to access, correct, erase, export (port), restrict and object to the processing of your personal data, and to withdraw consent at any time (for example, by turning off notifications).
Delete your account in-app, any time. Open Gammo → Profile → Delete account. This permanently deletes your account and associated personal data. You can also email privacy@gammo.app and we’ll handle it for you.
To exercise any other right, email privacy@gammo.app. We’ll respond within the time limits set by law (normally within one month). You also have the right to lodge a complaint with a supervisory authority — in Norway, the Norwegian Data Protection Authority (Datatilsynet).
8Cookies, SDKs & ads
This website uses no advertising or tracking cookies. The Gammo app currently shows no third-party ads. If we introduce ads or an advertising SDK in the future, we will update this policy and, for EU/EEA users, ask for your consent before any personalised advertising or tracking takes place.
9Security
We protect your data with encryption in transit (HTTPS/TLS), server-side checks on sign-in, and restricted access to our systems, and the game server stays authoritative over game state and dice. No online service can promise perfect security, but we take sensible steps to keep your data safe.
10Changes to this policy
We may update this policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you in the app. Continuing to use Gammo after an update means you accept the revised policy.
11Contact
Questions about this policy or your data? Email privacy@gammo.app.