Privacy Policy
Mexico Royale (mexicoroyale.com) — last updated July 2026
English · Magyar · Srpski · Deutsch
What this service is
Mexico Royale is a free online 3-player trick-taking card game playable in the browser and as a mobile app. You can play as a guest or sign in with Google, Facebook or Apple.
Data we collect
Guests: the display name you type, a random per-table token stored in your browser so you can reconnect to your seat, and your language/sound preferences. These stay in your browser's local storage; the display name and match results are processed on our server for the duration of play.
Signed-in players: when you sign in with Google, Facebook or Apple we receive and store your provider user ID, display name and email address (with Apple you may choose to hide your email — we then store the private relay address Apple provides). We use them solely to identify your account, show your name in games and on the leaderboard, and attribute your match results and statistics to you. We never post on your behalf.
Match data: finished match results (scores, winners, participants) are stored to power the leaderboard, your statistics and match history.
Technical logs: our server keeps short-lived operational logs (connection events, errors, IP-based rate limiting) to keep the service working and abuse-free.
Usage statistics (opt-in)
If you allow it, we collect anonymous usage statistics — games played, app language, platform, approximate country — via PostHog (hosted in the EU). Nothing is collected before you opt in; withdrawing your consent in Settings also deletes the random statistics identifier. Signed-in accounts store your last-seen platform and language to support account features. We never sell personal data.
Advertising
From the first public store release, the mobile app shows ads served by Google AdMob. In the EEA and the UK, ads respect the choices you make in the consent dialog (Google's certified consent platform); you can change those choices anytime in the app's Settings. Without consent, ads are non-personalized or absent. On iOS, personalized ads additionally require your permission via Apple's App Tracking Transparency prompt. The web version shows no ads.
What we do not do
We never sell personal data. No tracking cookies on the website, no cross-site tracking, and no usage statistics unless you opt in. Ads appear only in the mobile app once it is publicly released, and only under the consent choices described above.
Cookies and local storage
We do not use tracking cookies. The game stores functional values in your browser's local storage (session token, per-table seat tokens, name, language, sound preference, your analytics choice and — only if you opted in — a random statistics identifier). Clearing your browser storage removes them.
Data retention and deletion
Match results are kept to maintain the leaderboard and player statistics. You can delete your account and all associated data yourself at any time: sign in, open your profile (My stats on the web, Profile in the app) and choose Delete account — deletion is immediate and removes your identity, entitlements and match attribution. Alternatively, email szityi@gmail.com from the address linked to your account and we will remove it within 30 days.
Legal basis and contact
Data is processed to provide the game you ask for (contract), to keep the service secure (legitimate interest), and — for opt-in usage statistics and, once ads launch, personalized advertising — on your consent, which you can withdraw at any time in Settings. You can also ask us for a copy or correction of your data, and you have the right to lodge a complaint with your data protection authority. For any privacy question or request, contact szityi@gmail.com.