Yamb — Privacy Policy

Document version: 10 October 2026.

This notice explains the handling of personal data for Yamb on Apple and Android devices. Using the app or accepting its terms is not blanket consent to data processing.

1. Who is responsible

The controller is Rika Omega Labs d.o.o., Pavlenski put 5k, 10000 Zagreb, Croatia. Contact support@igre.app or write to that address about your data or this notice.

2. Information processed

The information processed depends on the features you use. It includes:

Information comes from you, your app or device, activity recorded by our servers and, where relevant, the store handling a purchase or another player submitting a report. A pseudonym does not make associated records anonymous.

3. Purposes and legal grounds

We process information needed to provide the features you request, maintain your account, conduct matches and deliver purchases on the basis of performing the relevant contract. Without the information necessary for a particular feature, we may be unable to provide that feature.

We use relevant technical records and reports to investigate faults, review match outcomes, detect cheating or fraud and protect other players. These purposes rely on our legitimate interests in a secure, reliable and fair service, subject to balancing those interests against your rights, particularly where children are involved. Records also support the establishment, exercise or defence of legal claims where necessary.

Processing required for consumer complaints, accounting or other statutory duties is based on the relevant legal obligation. For analytics or device access requiring consent, separate valid consent is required; accepting the EULA is not that consent. You may withdraw consent where processing is based on it, without affecting the lawfulness of earlier processing.

4. Match reviews, reports and moderator access

Administrators and authorised moderators may review relevant match history, technical logs, reported content, player information and information submitted in a complaint. Access is limited to what is relevant to assigned support, moderation or security tasks. Moderator access does not give permission to use those records for unrelated purposes or disclose them publicly.

A timeout may automatically affect a match result under the game rules. You can request human review of a disputed result or moderation measure through the complaint procedure. Logs may be incomplete and are considered alongside other relevant information.

5. Recipients and service providers

Other players can see information made visible through the relevant game feature, such as your nickname, profile presentation, rankings, match results and messages addressed to them or posted in a shared chat. Reports and technical logs are not made public merely because you participate in a match.

Authorised administrators, moderators and technical service providers may process information needed for their tasks. The app uses Google Firebase services for crash diagnostics and notification delivery and Google Analytics for Firebase for usage analytics, depending on the platform and feature. Their handling of diagnostic and installation information is described in Firebase's privacy information and Google's Privacy Policy. The relevant app store also processes purchases and platform account information under its own privacy notice.

Information may be disclosed to competent authorities or professional advisers where legally required or necessary for a specific legal claim, subject to applicable safeguards.

6. International processing

Technical providers may process information outside your country, including outside the European Economic Area. Transfers requiring GDPR safeguards must use an applicable adequacy decision or another lawful mechanism, such as standard contractual clauses. Firebase's privacy information describes Google's transfer arrangements. Contact us for information about the recipients and safeguards relevant to your data; this notice is not consent to unrestricted international transfers.

7. Retention

Routine server housekeeping currently removes operational player-action, diamond-change and rating-change logs older than 7 days. MP and OVA match results, score sheets and replay records are normally subject to a 90-day retention period; other ordinary match results and score sheets are generally subject to a 20-day period. These are operational retention windows, not deadlines for exercising your rights, and removal occurs through periodic housekeeping.

These windows do not cover all profile data, aggregate statistics, messages, reports, purchase records or third-party diagnostics. Profile information is retained while needed to provide the account and handle its deletion or recovery. Reports and related records are retained for handling the issue and any necessary follow-up; where Croatian consumer law applies, written consumer-complaint records are kept for one year from receipt. Purchase and accounting records are retained for the applicable statutory period.

Relevant evidence may need to be preserved longer for a specific dispute, security investigation or legal obligation. Any such retention must be limited to the information and period needed for that purpose. Third-party diagnostics and backup copies have separate retention and deletion arrangements; the short operational log windows are not a promise that all copies of every record disappear at the same time.

8. Your rights and deletion

Subject to the conditions in applicable law, you may request access, correction, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. You may also withdraw consent where it is the legal basis. Contact support@igre.app or follow the account deletion instructions. We may request proportionate information to verify that the request concerns your account.

We respond to GDPR rights requests without undue delay and normally within one month. Where a lawful extension is needed because of complexity or the number of requests, we will explain it within that initial period. Deleting an account does not require deletion of information that must still be retained for a legal obligation or a justified legal claim.

You may complain to the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority, including the authority in your country of residence where applicable.

9. Children and updates

Age and parental-authorisation requirements are described in section 2 of the EULA. A general permission to play does not replace any parental consent specifically required by data-protection law. A parent or guardian may contact us about a child's information.

We will explain material changes to this notice and provide any notice or obtain any consent required before a new use of data begins. A change to this webpage does not itself authorise a new, incompatible use of previously collected information.