Bolt Duel

Privacy Policy

Last updated: May 15, 2026

1. General Information

Bolt Duel ("the App") is a real-time multiplayer card duel game inspired by Speed/Spit, developed and published by IOCODO LLC ("we", "our", "us"). Two players each hold a face-down stockpile and a five-card hand; both play simultaneously to empty their cards first.

This Privacy Policy explains what information is collected, how it is used, and the choices available to you when you use the App.

2. Local Data Stored on Your Device

The App stores certain data locally on your device to support offline access, performance, and a consistent experience. Depending on how you use the App, this may include:

• Account information such as your display name and email address
• Game statistics including wins, losses, draws, and your current ELO rating
• In-app preferences and settings (music, volume, hints)
• Crash reports and diagnostic data (collected by Firebase Crashlytics)
• Usage analytics and in-app events (collected by Firebase Analytics)

Some of this data is also synchronized with Firebase backend services operated by Google LLC, as described in the sections below.

3. Account and Authentication

Bolt Duel allows you to play against the bot as a guest without creating an account. To access online matchmaking, the ELO leaderboard, and to save your progress, you may sign in via Firebase Authentication (Google LLC).

Supported sign-in methods: Google Sign-In, Sign in with Apple, Email/Password, and Anonymous (guest). When you sign in, Firebase Authentication processes your credentials and we store a user profile — display name and email address — in Firebase services. Anonymous guest sessions generate a random identifier; no email or credential is collected.

4. Data Stored in Firebase Backend Services

Bolt Duel uses several Firebase services operated by Google LLC to store and synchronize data required to run the game:

• Firebase Realtime Database — stores live game state, match data, matchmaking queues, and presence information.
• Cloud Firestore — stores user profiles, game statistics, and leaderboard entries.
• Firebase Cloud Functions — runs server-side logic for ELO calculation, account deletion, and other game operations. These functions process your account identifiers and game data to perform their tasks.
• Firebase Remote Config — delivers configuration values (feature flags, game parameters). No personal data is required to fetch remote config values.
• Firebase App Check — verifies that requests originate from genuine Bolt Duel app installations. Uses device attestation tokens; does not collect personal information on our behalf.
• Firebase Cloud Messaging (FCM) — reserved for future push notifications; not used for personalized advertising.

Data stored in Firebase is subject to Google LLC's data processing terms and privacy policies.

5. Analytics and Crash Reporting

The App uses Firebase Analytics and Firebase Crashlytics (both Google LLC) to help us understand how the App is used and to diagnose technical issues.

• Firebase Analytics collects usage events and app activity — such as screens viewed, features used, and session duration — along with device and instance identifiers. This data is used in aggregate to improve the App.
• Firebase Crashlytics collects crash reports and diagnostic data — including stack traces, device model, operating system version, and App version — when the App encounters an error. This helps us identify and fix bugs.

You can limit analytics data collection through your device's privacy settings.

6. Advertising

Bolt Duel does not display advertisements. No advertising SDK is active in this version of the App.

7. Network Requests and Third-Party Services

During normal operation, the App communicates with the following third-party services:

• Firebase Authentication (Google LLC) — account sign-in and session management
• Firebase Realtime Database (Google LLC) — live game data and matchmaking
• Cloud Firestore (Google LLC) — user profiles and leaderboard
• Firebase Analytics (Google LLC) — usage analytics
• Firebase Crashlytics (Google LLC) — crash and diagnostic reporting
• Firebase Remote Config (Google LLC) — app configuration
• Firebase App Check (Google LLC) — request integrity verification
• Firebase Cloud Functions (Google LLC) — server-side game logic
• Google Sign-In (Google LLC) — optional social authentication
• Sign in with Apple (Apple Inc.) — optional social authentication
• Google Fonts (Google LLC) — font assets loaded at runtime

8. Data Sharing and Sale

We do not sell your personal data. We do not share your personal data with third parties except as required to operate the App — specifically, by transmitting data to Firebase and Google services as described in this policy — or as required by law.

Your display name and ELO rating are visible to other players on the in-app leaderboard. No other personal data is exposed to other users.

9. Account Deletion and Data Retention

You can delete your account and all associated data at any time:

• In-app: open the Cosmic Settings screen, tap Delete Account, and confirm by typing DELETE. This immediately invokes the deleteAccount Cloud Function, which removes your Firestore user document, related game records, and your Firebase Auth account.
• By email: send a deletion request to support@iocodo.com with the subject "Bolt Duel Account Deletion". We will complete the deletion within 30 days and confirm by reply.

After deletion, your data is removed from our active systems within 30 days. Firebase Analytics aggregated data may be retained in de-identified form as permitted by Google's data processing terms.

10. Your Choices

• You can play in guest (anonymous) mode without providing any personal data.
• You can rename your display name at any time in Cosmic Settings.
• You can remove locally stored App data by uninstalling the App, subject to any device backup behavior controlled by Apple or Google.
• You can opt out of Firebase Analytics on Android via your Google account's "Delete advertising ID" setting; on iOS via Settings → Privacy & Security → Tracking.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy, please contact:

IOCODO LLC
Email: support@iocodo.com
Website: iocodo.com