Jombero - Privacy Policy

Last updated: 5 October 2026

Jombero is a card game for iPhone and Android. This page says what the game keeps about you, why, and how to have it deleted. It is short because the game keeps little.

In brief: you play as a guest with a name you choose. We keep your progress, your scores and what you bought. We show no ads, we do not track you across other apps or sites, and we do not sell or share your data for marketing.

Who is responsible

Jombero is made and run by Girts Dreimanis, Latvia (the "controller" of your data under the EU's data protection law, the GDPR). Write to info@toppler.xyz about anything on this page.

What we keep

Your player account. A random player id, and a session token kept in the app that keeps you signed in on your device. No email address, phone number or password is asked for.
Your name. The name you choose, which other players see on the leaderboards. Please do not use your real name. Names can be reported by other players and reset if they break the rules.
Your play. Your progress on the journey, your cards, gear, coins, diamonds and lives, the fights you play (the moves, so the server can check a result), your scores and your places on the leaderboards, prizes and gifts you received, and friends who joined through your invite link. We also note the days you play, when you start and stop playing each day, how many practice runs and fights you played offline (just those two numbers, sent once you are online again), and which kind of device you first played on, to see whether players come back. This is counted by us, on our own server, with no outside analytics tool.
Your purchases. What you bought, when, its price and the store's reference for the purchase. We never see or keep your card number or payment details: payment is handled by Apple or Google.
A sign-in, if you choose one. If you save your account with Sign in with Apple or Google, we keep the identifier Apple or Google gives us for you, so that you can reach your account from another device. With Sign in with Apple we also keep a token Apple issues to us for your sign-in. Its only use is to tell Apple to end that sign-in when you remove it or delete your account, and it is deleted from our server then. We do not receive or keep your email address or your name from them.
Your internet address (IP), briefly. Used to limit abuse, such as too many new accounts or sign-in attempts from one place, and it may appear in short-lived technical logs. The address itself is not stored with your account. A scrambled form of it is kept with a new account to stop invite abuse, and for one day with a friend's invite link you opened, so that the friend is credited when you start the app; it cannot be turned back into your address.
On your device. The game stores its settings, its tutorial notes and, when you play offline, your best offline practice run and a note of where your journey stood last time you were online, in the app's own storage. This stays on your device.

What we do not do

No advertising, and no advertising identifiers.
No tracking across other companies' apps or websites, and no analytics or profiling tools from third parties.
No access to your location, contacts, photos, camera or microphone.
No selling of personal data.

Why we keep it

To run the game you asked to play (performance of a contract): your account, your progress, your purchases and delivering what you bought.
To keep the game fair and safe (our legitimate interest): checking fights on the server, running the leaderboards, limiting abuse, handling reported names.
To meet legal duties: keeping records of purchases and refunds as tax and accounting law requires.

Who else handles it

We use a few service providers, only for the purposes above:

Hosting: the game's server and database run in a data centre in the European Union.
Apple (App Store) and Google (Google Play): purchases in the apps, and sign-in if you choose it.
RevenueCat: confirms purchases to our server, using your player id and the purchase's details.

Some of these companies are based in the United States and may process data there, under the safeguards the law requires (such as the EU-US Data Privacy Framework or standard contractual clauses). Their own privacy policies apply to what they collect directly from you, such as your payment details.

How long we keep it

Your account and your play are kept for as long as you have the account.
When you delete your account, your name, your sign-ins and your sessions are removed at once, and you are signed out everywhere. Scores already on the leaderboards and purchase records stay, under an anonymous name that no longer points to you.
Purchase records are kept for as long as tax and accounting law requires.

Your choices and rights

Delete your account: in the game, open Menu > Account and choose Delete my account ; or write to us. Deleting does not refund purchases.
Change your name at any time in the game.
Remove a sign-in (Apple or Google) in Menu > Account.
Under the GDPR you may also ask for a copy of your data, for a correction, for a restriction of its use, to object to its use, or to take it elsewhere. Write to info@toppler.xyz and tell us your player name; we answer within a month.
If you think we handle your data wrongly, you may complain to your local data protection authority; in Latvia that is the Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv).

Children

Jombero is not aimed at children under 13, and we do not knowingly collect personal data from them. The game asks for no personal details to play. If you believe a child has given us personal data, write to us and we will remove it.

Changes

If this policy changes, the new version is published on this page with its date. A change that matters is also announced in the game.

Contact

Girts Dreimanis, Latvia - info@toppler.xyz