Docalcio Privacy Policy
Last updated: 2026-10-14
This policy explains what data the game Docalcio (the Android and iOS app and its server) collects, what it is used for, who it is shared with and how you can delete it. The data controller is Zerrow Labs. For any question, write to [email protected].
1. Data we collect
| Data | Where it comes from | What it is for |
|---|---|---|
| Identifier of your Google or Apple account (an internal Firebase code, not your email) | When you sign in | Recognising you when you come back |
| Display name of your Google or Apple account | When you sign in | Showing it on your profile |
| Email of your Google or Apple account | Processed by Firebase Authentication (Google) when you sign in. Our server does not store it | Authentication |
| Chosen language | App settings | Showing the game in your language |
| Game progress: careers, name and look of the player you create, cards, achievements, in-game currency, season pass | Created as you play | Making the game work and saving your progress |
| Crash reports: device model, OS and app version, error trace and your numeric user ID | Firebase Crashlytics (Google), only when the app crashes | Finding and fixing bugs. They never include your name or email |
| IP address and technical data of each connection | Automatic when using the app | Security, abuse prevention and rate limits. Not stored in our database |
We do not collect location, contacts, photos, microphone, camera, health data or financial information. The app has no advertising, uses no marketing analytics and does not sell or rent your data.
2. Data stored on your device
The app stores on your phone the session token (encrypted with the system's secure storage), your preferences (language, notices already seen) and a copy of the game graphics. They are removed when you sign out or uninstall the app.
3. Who we share data with
Only with providers we need for the game to work, and only what is necessary:
- Google (Firebase Authentication, Google Sign-In, Firebase Crashlytics): sign-in and crash reports. Firebase privacy.
- Apple (Sign in with Apple): sign-in on iPhone. Apple privacy.
- Cloudflare: network and security in front of our server; processes the IP of each connection. Cloudflare privacy.
- Hostinger: provider of the server where the database is stored.
When other users appear in the game (for example in top scorer tables), only the name of the player they created in the game is shown. We may disclose data if required by law or by a competent authority.
4. Security
All communication is encrypted (HTTPS/TLS). The server only accepts connections through Cloudflare, the database is not reachable from the internet and backups are stored encrypted.
5. How long we keep data
- Your account data and progress, for as long as the account exists.
- Encrypted backups are deleted automatically after 30 days at most.
- Crashlytics crash reports are kept for 90 days.
6. Deleting your account
You can delete it at any time from the app, in Settings → Account → Delete account, or by following these instructions. Your name, sign-in identifier, achievements, discovered cards, currency and season pass are deleted, and the name of the player you created is replaced with a generic one. Match statistics left in shared competitions are kept anonymously, with no link to you.
7. Your rights
You can request access to your data, correct it, delete it, object to its use or ask for a copy by writing to [email protected]. We reply within 30 days at most. If you live in the European Union, the United Kingdom or another country with a data protection authority, you can also complain to it. We process your data because it is necessary to provide the service you asked for by installing the game and, for crash reports and security, on our legitimate interest in keeping the game working and safe.
8. Children
Docalcio is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.
9. Changes to this policy
If we change this policy, we update the date above and, if the change is significant, we announce it in the app.