Privacy Policy
Last updated: July 30, 2026
In brief: Bolt Duel requires an account to access online features and stores your profile, game statistics, and match history on Firebase infrastructure operated by Google LLC. The app uses Firebase Analytics and Firebase Crashlytics to fix bugs and understand which features are used: device model, OS version, app version, country, in-app events, and crash reports. We do not sell your personal data or share it with data brokers or advertisers.
1. General Information
Bolt Duel ("the App") is a real-time multiplayer card duel game inspired by Speed/Spit, developed and published by IOCODO LLC ("we", "our", "us"). Two players each hold a face-down stockpile and a five-card hand; both play simultaneously to empty their cards first.
This Privacy Policy explains what information is collected, how it is used, and the choices available to you when you use the App.
2. Local Data Stored on Your Device
The App stores certain data locally on your device to support offline access, performance, and a consistent experience. Depending on how you use the App, this may include:
- Account information such as your display name and email address
- Game statistics including wins, losses, draws, and your current ELO rating
- In-app preferences and settings (music, volume, hints)
- Crash reports and diagnostic data (collected by Firebase Crashlytics)
- Usage analytics and in-app events (collected by Firebase Analytics)
Some of this data is also synchronized with Firebase backend services operated by Google LLC, as described in the sections below.
3. Account and Authentication
Bolt Duel allows you to play against the bot as a guest without creating an account. To access online matchmaking, the ELO leaderboard, and to save your progress, you may sign in via Firebase Authentication (Google LLC).
Supported sign-in methods: Google Sign-In, Sign in with Apple, Email/Password, and Anonymous (guest). When you sign in, Firebase Authentication processes your credentials and we store a user profile (display name and email address) in Firebase services. Anonymous guest sessions generate a random identifier; no email or credential is collected.
4. Data Stored in Firebase Backend Services
Bolt Duel uses several Firebase services operated by Google LLC to store and synchronize data required to run the game:
- Firebase Realtime Database: stores live game state, match data, matchmaking queues, and presence information.
- Cloud Firestore: stores user profiles, game statistics, and leaderboard entries.
- Firebase Cloud Functions: runs server-side logic for ELO calculation, account deletion, and other game operations. These functions process your account identifiers and game data to perform their tasks.
- Firebase Remote Config: delivers configuration values (feature flags, game parameters), fetched without sending your account details.
- Firebase App Check: verifies that requests originate from genuine Bolt Duel app installations, using device attestation tokens rather than anything that identifies you personally.
- Firebase Cloud Messaging (FCM): reserved for future push notifications; not used for personalized advertising.
Data stored in Firebase is subject to Google LLC's data processing terms and privacy policies.
5. Analytics and Crash Reporting
The App uses Firebase Analytics and Firebase Crashlytics (both Google LLC) to help us understand how the App is used and to diagnose technical issues.
- Firebase Analytics collects usage events and app activity (such as screens viewed, features used, and session duration) along with device and instance identifiers. This data is used in aggregate to improve the App.
- Firebase Crashlytics collects crash reports and diagnostic data (including stack traces, device model, operating system version, and App version) when the App encounters an error. This helps us identify and fix bugs.
You can limit analytics data collection through your device's privacy settings.
6. Monetization and Advertising
We do not sell your personal data. Any future change to how Bolt Duel is monetized, including the addition of advertising, will be described in an update to this policy and, where required, confirmed with an in-app consent request before it applies to you.
7. Network Requests and Third-Party Services
During normal operation, the App communicates with the following third-party services:
- Firebase Authentication (Google LLC): account sign-in and session management
- Firebase Realtime Database (Google LLC): live game data and matchmaking
- Cloud Firestore (Google LLC): user profiles and leaderboard
- Firebase Analytics (Google LLC): usage analytics
- Firebase Crashlytics (Google LLC): crash and diagnostic reporting
- Firebase Remote Config (Google LLC): app configuration
- Firebase App Check (Google LLC): request integrity verification
- Firebase Cloud Functions (Google LLC): server-side game logic
- Google Sign-In (Google LLC): optional social authentication
- Sign in with Apple (Apple Inc.): optional social authentication
- Google Fonts (Google LLC): font assets loaded at runtime
Important: Google LLC acts as the data processor for Firebase Analytics, Crashlytics, and the other Firebase services listed above. Each third-party service processes data under its own privacy policy; see Google's Privacy Policy for provider-specific details on data handling, retention, and your rights.
8. Data Sharing and Sale
We do not sell your personal data. We do not share your personal data with third parties except as required to operate the App (specifically, by transmitting data to Firebase and Google services as described in this policy) or as required by law.
Your display name and ELO rating are visible to other players on the in-app leaderboard. No other personal data is exposed to other users.
9. Account Deletion and Data Retention
You can delete your account and all associated data at any time:
- In-app: open the Cosmic Settings screen, tap Delete Account, and confirm by typing DELETE. This immediately invokes the
deleteAccountCloud Function, which removes your Firestore user document, related game records, and your Firebase Auth account. - By email: send a deletion request to support@iocodo.com with the subject "Bolt Duel Account Deletion". We will complete the deletion within 30 days and confirm by reply.
After deletion, your data is removed from our active systems within 30 days. Firebase Analytics aggregated data may be retained in de-identified form as permitted by Google's data processing terms.
10. Your Choices
- You can play in guest (anonymous) mode without providing any personal data.
- You can rename your display name at any time in Cosmic Settings.
- You can remove locally stored App data by uninstalling the App, subject to any device backup behavior controlled by Apple or Google.
- You can opt out of Firebase Analytics on Android via your Google account's "Delete advertising ID" setting; on iOS via Settings → Privacy & Security → Tracking.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.
12. Contact
If you have questions about this Privacy Policy, please contact:
IOCODO LLC
Email: support@iocodo.com
Website: iocodo.com