Your table. Your data. No hidden hand.

01 / SCOPE

What this notice covers

This notice covers Okey Arena at dsagames.com, its public web APIs, and the DSA Games Okey Arena iPhone client. The app provides offline play against bots and optional live four-player World Tables. No email address or password is required to use the guest online mode. Sign in with Apple is optional and the app never receives your Apple ID password.

02 / ON YOUR DEVICE

Preferences and offline progress

The website stores a versioned profile in browser local storage. It contains your selected language, sound and bot settings, rack sort preference, tutorial status, and offline round statistics. It does not contain a password, payment card, contact list, or precise location.

The iPhone client stores the same preferences and offline statistics in AsyncStorage. It can also save an unfinished offline round—including its tiles, hands, stock, and discards—so play can resume after the app closes. Before creating a World Tables guest profile, the app generates and persists a separate 256-bit profile-recovery secret in the iOS Keychain; after creation it also stores the guest ID, display name, and session token there. The recovery secret is used only to create, renew, or delete that guest profile; it is never used as a gameplay credential.

If you choose Sign in with Apple, the iPhone client also keeps the server-confirmed Apple credential identifier, your game display name, and the game session in the iOS Keychain. It uses the credential identifier only to ask iOS whether your Apple authorization is still active. Raw Apple identity tokens are not saved on the device by Okey Arena.

03 / SERVICE DATA

What the hosted service processes

Cloudflare delivers the site, terminates secure connections, runs the application, and protects the administration area. Like other hosting and security providers, it may process network and request metadata—such as IP address, user agent, timestamps, and security events—to operate and defend the service.

World Tables processes a generated player ID, generated display name, session and room identifiers, seat and ready state, connection events, game actions, tile identifiers for your own moves, match result, and timestamps. The server owns the live deck and hands. Each player receives their own hand plus public counts and discards; opponents’ private hands and the stock order are not sent to that player.

Cloudflare hosts the API, database, and realtime rooms and may process network and security metadata such as IP address, user agent, request URL, timestamps, and error or abuse signals. The current app contains no advertising, attribution, cross-app behavioral-tracking, or data-sale feature or SDK.

The usable recovery secret is persisted only in the iOS Keychain and is sent to the service only over HTTPS for profile creation, renewal, or deletion. The service stores only its one-way SHA-256 digest, does not log the secret, and replaces it after each successful profile renewal so the previous value no longer works.

When you choose Sign in with Apple, iOS sends a short-lived signed identity token to the service over HTTPS. The service verifies Apple's signature, issuer, app audience, expiry, and the request nonce before creating a game session. The database stores only a one-way SHA-256 digest of the verified Apple subject for account continuity; it does not store the raw Apple subject, identity token, or Apple ID password. The current app does not request an email address from Apple.

04 / GAME ACCOUNT & MATCH RECORDS

Data used for online play

The service database stores the player ID and display name, role and account status, rating and game totals, last-active time, and creation/update timestamps. Online table and participant records can include room ID, mode, visibility, region, participants, seats, ready/leave state, result, score, winner, and start/end timestamps. An Apple-authenticated account additionally has a one-way Apple-subject digest and authorization status. Neither the guest nor current Apple flow requests an email address.

05 / WHY DATA IS USED

Operation, fairness, and safety

• Remember settings and calculate offline statistics on your device.
• Deliver the service, diagnose failures, prevent abuse, and protect administration.
• Create a guest or Apple-linked game identity, reserve a seat, reconnect a player, and validate server-owned matches.
• Investigate reports, enforce game rules, and maintain an accountable audit trail.

The current clients contain no data-sale, ad-targeting, or cross-app tracking feature or SDK.

06 / YOUR CONTROL

Access, deletion, and choices

You can remove the browser profile by clearing site data for dsagames.com. On iPhone, deleting the app clears ordinary local storage; Keychain and operating-system backup behavior depends on your device and Apple settings. Deleting local data does not by itself delete the guest player and match records already stored by the online service.

To delete the online profile in the app, open World Tables and choose Delete online profile. The app keeps the Keychain record until the server confirms deletion. The service then revokes the guest identity, releases waiting seats, removes the guest user row and direct user references, and changes saved participant names to “Deleted Player.” If a live hand is underway, its anonymized server-controlled seat remains only long enough to finish by the normal turn clock so the other players are not stranded. Non-identifying historical match rows remain for game integrity and aggregate records. The service may also retain one-way revocation digests derived from the deleted credential and guest subject so a lost response can be retried and the deleted credential cannot recreate the profile. These records contain no usable plaintext secret or deleted user row and are used only for deletion security and confirmation.

While the guest profile remains active and the recovery secret remains in the iOS Keychain, it has no age-based expiry and can authorize profile renewal or verified deletion after the ordinary session expires. Deleted, suspended, or banned profiles cannot be recovered. If the device credential is lost, use the official web support route or email engdsabir@gmail.com. Include the guest player suffix shown in the app if available, but never include a session token, recovery secret, password, payment detail, or identity document in an initial request.

Signing out removes the Apple-linked game session from that device; it does not revoke Sign in with Apple or delete the server account. To delete the linked online account, use Delete online profilewhile signed in. Apple may also notify the service when consent is revoked or the Apple account is deleted; the service verifies that signed notification and disables or deletes the matching Apple-linked identity. You can separately manage apps using your Apple ID in iOS Settings.

07 / RETENTION & SECURITY

Limited collection, protected access

Local data remains until you clear it or remove the app, subject to device and Keychain behavior. Before profile deletion, player, Apple-identity digest, table, participant, and service-security records are retained for operation, fairness, abuse prevention, and support; a fixed automatic deletion schedule is not currently published. After confirmed profile deletion, the guest user row and direct identifiers are removed while anonymized, non-identifying match records and one-way credential/subject revocation digests may remain. Those digests support safe deletion retries and prevent deleted-credential reuse; they do not contain the usable recovery secret or the deleted user row. Cloudflare may retain network and security logs under its service configuration and applicable obligations.

Administrative pages are designed to fail closed and require Cloudflare Access identity verification. No system can guarantee absolute security, so please report a suspected issue through the support route or the privacy contact address above.

08 / CHILDREN & CHANGES

A public game, not a child-directed account service

Okey Arena is not directed to children under 13. The guest flow does not ask for a birth date, email, or password, but it does create a persistent player identifier when a World Table is created or joined. Optional Sign in with Apple is controlled by the user's Apple account and device settings. A parent or guardian may contact support about a child’s guest record. Material changes will appear here with a new date.