Privacy Policy

Effective October 9, 2026

This policy explains how Mini Rumble at minirumble.lol (the "Service"), operated by Melehat Ari ("we", "us"), handles your information. We collect as little as we need to run a multiplayer game, and we do not sell your data or show third-party ads.

1. Information we collect

When you play (no account needed)

Nickname you type, your chosen character and cosmetic look, and what you do in a room (moves, scores, chat messages and drawings). This is shared live with the other players in your room and is not kept after the room closes.
Connection data: your IP address and basic device/browser information, which our game servers need to connect you and to protect the Service from abuse. Server logs are kept for a short time.
Local storage in your browser for settings such as language, volume, nickname, selected server region and your look. We do not use advertising or tracking cookies.

When you create an account

Your username and a password (stored hashed by our authentication provider), or, if you sign in with Google, your Google account identifier and email address.
Progress: level, XP, games played, wins, per-game results and any optional game ratings or comments you submit.

When you buy something

The item, price, time and order ID, linked to your account so we can deliver the item and handle refunds.
Payment details (card number, billing address, email for the receipt) are collected directly by our payment partner. We never receive or store your full card details.

Analytics

We use privacy-friendly, cookieless analytics (Umami) to count page views and game events such as "game started". Events never include your username, account ID or email.

2. How we use it

to run rooms and matches and show your name, look and score to the players you play with;
to save your account, progress and purchased items;
to process purchases, refunds and support requests;
to keep the game fair and safe (chat filtering, abuse prevention);
to understand which games people enjoy and improve them.

Legal bases (where GDPR applies): performing our contract with you (running the game, your account and purchases), our legitimate interests (security, abuse prevention, aggregate analytics) and legal obligations (tax and accounting records for purchases).

3. Who processes your data

Supabase: account authentication and database.
Google: only if you choose "Sign in with Google"; web fonts are also loaded from Google Fonts.
Our payment partner: payment processing, fraud prevention, tax and receipts. It may act as the merchant of record for your order.
Hosting providers: our game servers run in Europe and India; you can pick the region on the home screen.
Umami: anonymous analytics.

We share data with these providers only to run the Service. We may also disclose information if required by law.

4. How long we keep it

Room data (nicknames, chat, drawings): only while the room is open.
Account data: until you delete your account.
Purchase records: as long as tax and accounting law requires, even after account deletion.

5. Your rights

You can ask us to access, correct, export or delete your data, or object to its processing. Email support@minirumble.lol from the address linked to your account (or include your username), and we will respond within 30 days. You can also complain to your local data protection authority.

6. Children

Mini Rumble is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us and we will delete it.

7. Security

Traffic is encrypted with HTTPS/WSS, passwords are hashed, and access to the database is restricted.

8. Changes

We will update the effective date above when this policy changes and announce significant changes in the game.

9. Contact

Privacy questions: support@minirumble.lol