Privacy Policy
PlayIt · Last updated 24 September 2026
PlayIt is a multiplayer games hub. This policy describes exactly what the app stores, why, who it is shared with, and how to get rid of it. It describes the software as built rather than what it might do one day.
You can use PlayIt without giving us anything
Tapping play creates a guest account. That needs no email, no name and no password — the app generates a random identifier for your device and a display name like Player_4821. Most of what is described below only applies if you choose to sign in.
What we store
| Data | When | Why |
|---|---|---|
| A random device identifier | Always | Recognises your device so you keep the same account between sessions. |
| Display name | Always | Shown to the people you play with. Auto-generated for guests. |
| Email address | If you register or use Google Sign-In | Signing you in and recovering your account. |
| Password | If you register with one | Stored only as a cryptographic hash. We cannot read it. |
| Google account id and profile picture URL | If you use Google Sign-In | Linking your account and showing your avatar. |
| Games played, moves made, and when | While playing; a move-by-move replay of a finished match is kept for 90 days | Running the game, letting you rejoin one in progress, and letting you watch recent matches back. |
| The result of each finished match — who you played, who won, how it ended, and your rating | Kept until you delete your account | Your record, your match history, ratings and leaderboards. |
| Friends and friend requests | If you add friends | The friends list. |
| Online / offline status and last-seen time | Always | Showing friends whether you are available. |
| Notification device token and preferences | If you enable notifications | Sending "your turn" and invite alerts. Deleted when you turn them off. |
| Your IP address | With every request; server logs are kept for 14 days | Security: limiting repeated sign-in attempts and abuse, and investigating problems. Never linked to advertising or shared. |
What we do not store
- Chat messages are never saved. They are passed between players in the room and then gone — there is no chat history, and we cannot read past conversations.
- No advertising identifiers, and no advertising.
- No location data.
- No contacts, photos, microphone or camera access.
- Your password in any readable form.
Who else sees it
We do not sell your data, and we do not share it for advertising. It reaches these parties only:
- Other players. Your display name, avatar, online status and moves are visible to people you play with. That is the game.
- Google — only if you use Google Sign-In, to verify who you are.
- Firebase Cloud Messaging (Google) — only if you enable notifications, to deliver them.
- Our error monitoring — if the app hits an error, a report goes to DevIt's own crash log on our server: the error, the app version, your browser and system (for example "Chrome 128 · Android 14"), which screen it was, and a random identifier for this browser that is not linked to your account. It does not include your name, email, chat, or game contents.
- Our hosting provider, which stores the database on our behalf.
- Cloudflare, which carries traffic to games.devit.ma and protects it from attacks; it sees your IP address and the requests you make, as any network provider does.
Deleting your account
In the app: Settings → Delete account. It is immediate and permanent — your profile, game history, friends, devices and notification settings are all removed. Nothing is kept in a "deleted" state.
If you cannot reach the app, see the account deletion page for how to request it another way. You can also export a copy of everything we hold about you from the same place.
How long we keep things
- Account data: until you delete your account.
- Finished games: cleared automatically a short time after the game ends.
- Match replays — the move-by-move record you can watch back: deleted automatically 90 days after the match ends. Your match results and ratings are separate and stay until you delete your account.
- Abandoned rooms: swept automatically once inactive.
- Notification tokens: until you disable notifications or delete your account.
Children
PlayIt is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to how it is processed. Account deletion and data export are both built into the app; for anything else, contact us.
Changes
If this policy changes materially we will update the date at the top and note it in the app.
Contact
Questions or requests: [email protected]