Privacy Policy

2026-10-24

Who is responsible

The operator and privacy contact for ORILLA Truco are identified above. This policy describes the game client, account service, virtual-coin purchases and related support.

Information processed

We store a random game account identifier, an authentication-provider subject identifier if linked, your nickname, chosen preset avatar and frame, coin balance, VIP purchase points, match results and transaction/settlement records. Device credentials use protected device storage; the server stores session-token hashes. We do not require your real name, contacts, location, microphone, camera or bank-card details.

Purpose and legal grounds

Account data is used to authenticate, synchronize your profile, maintain the wallet, recover matches and provide the game you request. Purchase identifiers support delivery, refunds, reconciliation and fraud prevention. Applicable legal grounds include performing the service contract, complying with legal obligations, and proportionate security interests; optional permissions or marketing require separate consent where applicable.

Providers and disclosures

Google, Meta/Facebook and Apple process their sign-in services under their own policies. Google Play or the App Store handles payment and provides transaction identifiers to verify delivery. Encrypted Apple authorization tokens are retained only to revoke linked Apple access when an account is deleted. Hosting and infrastructure providers may process service data for the operator. No advertising SDK or cross-app advertising tracking is currently enabled, and we do not sell personal information.

Retention and security

Active-account data is retained to operate your account. Account deletion removes or anonymizes the visible profile and removes authentication links and sessions. Necessary payment, anti-fraud and settlement records can remain only under the operator-approved retention policy stated below. The applicable retention criteria and backup handling are specified below. Access controls, HTTPS in production and protected credentials reduce risks but do not eliminate them.

Deletion and rights

In Settings choose Delete account. Finish or leave an active online match first. Apple-linked access is revoked as part of deletion; legacy links may require signing in with Apple again. You may also request deletion, access or correction using the external deletion page or contact above without reinstalling the app. Ownership must be verified; do not send passwords, session tokens or full payment-card details. Local display/audio settings can be reset on your device. Rights and complaint routes depend on your jurisdiction.

Children, regions and changes

The game includes simulated card-game stakes using non-redeemable virtual coins and is not directed to children. Applicable age and territory restrictions must be respected. Contact the operator if a child supplied data. Hosting locations, subprocessors and international-transfer safeguards are specified below. Material changes are published with a new effective date and any legally required notice.

Operations analytics and administrator access

We count daily API requests and policy-page views, plus signed-in players’ activity dates and last-active times, to operate the service and produce reports. Analytics do not store raw IPs, URL query parameters, session tokens or hidden cards, and do not use cross-site advertising tracking. Player activity and operator access audits are retained for 90 days. Deleting an account unlinks its activity records. Separately authenticated operators have read-only access to necessary account, wallet and match information. Aggregate request counts also rotate after 90 days. We also record a random installation ID, startup and sign-in attempts (including failures), screen/button events, foreground and table time, including before sign-in and linked to your account after sign-in. The offline queue holds at most 256 events for up to 7 days; server details are retained for 90 days.

Account profiles, sign-in links and sessions are removed or anonymized when deletion is completed. Minimal purchase and settlement records may be kept for fraud prevention, refunds and legal obligations for up to 7 years, with annual review and deletion when no longer necessary; longer only if legally required. Database backups rotate out within 14 days. Vultr keeps the two most recent machine backups. Restored data must have completed deletion requests reapplied before service resumes. Support emails are reviewed and deleted within 12 months after closure unless needed for an ongoing dispute. Deletion requests normally receive a response within 30 days, subject to applicable law and ownership verification.

Game accounts and game data are hosted on Vultr infrastructure in Miami, United States. DNS is provided through Porkbun; support uses Gmail. Data may be processed outside your country. These providers process necessary service information under their applicable terms and privacy policies. We minimize transferred data and restrict operational access. Available Google, Apple and Facebook features remain disabled until their provider configuration is completed; store billing also remains disabled until configured. Contact us about international processing and applicable rights.