Privacy.

In short: we collect as little as possible. No ads, no tracking, and you only need an account if you want one.

ControllerNussbaumer Artworks, Viktoriastrasse 21, 3013 Bern, Schweiz · hallo@mysticgame.ch
On your deviceWithout an account, the app and the score keeper store settings, language, your player name, scores and your stats only locally on your device (in the browser in localStorage). In the browser you delete them in your browser settings, in the app (iOS or Android) by removing the app.
Play onlineOnline rooms use Supabase Realtime. Your player name, the room code and the game progress are transmitted while the room is open. Nothing is stored permanently.
Account (optional, in the app)In the app you can create an account if you want: on iPhone, iPad and Mac with Sign in with Apple, on Android with Sign in with Google, or anywhere with a code by email. Apple and Google only pass on your name and email address to us. We then store your email address (with Apple, an anonymous relay address if you choose), your display name, your username, your profile colour, your stats and settings, your recent games, your friends list and when you were last online. We use this data only to make the account work.
What friends seeFriends see your display name, your username, your profile colour, whether you are online right now, and invitations you send them. In the leaderboard among friends they also see how many games and wins you have and your average points, for this week, this month and all time. From online games you played together, each side sees who won more often. Anyone who knows your username can send you a friend request. The rest of your stats, your settings and your history stay private.
NotificationsIf you allow notifications, we store the device identifier for push notifications (from Apple on iPhone and iPad, from Google via Firebase Cloud Messaging on Android) with your account. That way you get invitations, friend requests and accepted requests even when the app is closed. You choose which ones in the settings. The identifier is removed when you sign out or delete your account.
Game CenterIf you are signed in to Apple Game Center on your iPhone, the app sends your number of wins, all time and for the current week, to the Game Center leaderboards after each game. Players worldwide see your Game Center name and your wins there. Apple processes this data under its own privacy policy. Without a Game Center sign-in nothing is sent; you can sign out in the iOS Settings under Game Center.
Errors and usageSo we can find bugs and see what gets played, the app sends anonymous reports to Supabase (Zurich): technical error messages, opening the app (at most once a day), and the start and end of a game with the game mode, number of players and whether you won. Platform, app version and language are included. There is no device identifier, no name and no link to your account, and everything is deleted after 90 days. You can turn this off in the settings under «Anonymous usage data».
Where data is storedAccount data is stored with Supabase in a data centre in Zurich. We send the sign-in code through an email service provider. We don't pass on or sell any data.
Deleting your accountYou can delete your account in the app at any time (Profile › Settings › Delete account). Your profile, stats, friends list and game history are deleted immediately and for good. Without the app, you can also email hallo@mysticgame.ch from your account's address: we then delete it promptly.
Hosting & fontsThe website is hosted by Vercel. Visiting it creates technically necessary server logs (e.g. IP address, time). The font «Bricolage Grotesque» is loaded from Google Fonts.
Orders & contactIf you write to us or place an order, we use your name, address and email only to process it.
PaymentIn the shop you pay via Stripe (Stripe Payments Europe, Ireland). Stripe receives your email address, shipping address and payment details for this and processes them under its own privacy policy. We never see your card or TWINT details.
Your rightsYou can ask for access to, correction or deletion of your data at any time. An email is enough.
Last updatedSeptember 2026