PRIVACY POLICY — KONBA COQ
Who we are and scope
Konba Coq is a game created by Oblik Lab. This policy applies to the Android application (ht.tizon.konbacoq) and konbacoq.web.app. Last updated: 21 September 2026. Privacy contact: tizondife509@gmail.com.
Playing without an account
You can play solo and practise without creating an account. An account is used for connected features such as playing with friends. Your language, sound and game settings can be stored locally on your device.
Account and community data
When you register or sign in, Firebase Authentication processes your email address, account identifier and authentication information. If you choose Google sign-in, Google also provides profile information such as your display name and profile picture. Profiles may contain a username, selected avatar, language and acceptance of the terms. Enabled community features also process friends, blocked players, invitations, rooms and abuse reports. Other players can see your player name and avatar through these features; your email is not displayed as a public profile field.
How we use information
We use this information to authenticate you, show your player identity, connect players, deliver requested account messages, handle support requests and protect the service against abuse. We do not sell personal data. This version does not integrate advertising or audience analytics SDKs.
Google sign-in between the browser and game
To connect your game with Google, the browser temporarily stores an encrypted sign-in exchange in Firestore. The decryption key stays in your game and browser. Access to the exchange expires within five minutes; the game requests its deletion after retrieving it. An interrupted flow can leave an expired encrypted record in the database. The game keeps a refresh token in private application storage so you stay signed in after closing or restarting it. On Android, this token is encrypted using Android Keystore and excluded from backups. Passwords are never saved. Signing out removes the local session.
Online matches and network information
Online matches use Firebase Firestore to exchange lobby identifiers, player account identifiers and WebRTC connection information, including network addresses. Access to a lobby expires after ten minutes, although expiry does not itself erase the stored record. Match messages, player names, selected roosters and arenas are exchanged directly between the players over WebRTC. Google STUN services help establish this connection. Your opponent may learn your public IP address through the peer-to-peer connection. Do not share your lobby code publicly if you want a private match.
Service providers and security
Google/Firebase provides hosting, authentication, database and, where enabled, notification services. Providers may process IP addresses, request details and technical logs to deliver and secure those services, including on infrastructure outside your country. Connections to Firebase use HTTPS and WebRTC data channels use transport encryption. Access rules restrict database access. No system can guarantee absolute security.
Local storage and optional notifications
The website stores your language and sign-in session in browser storage. If you enable website notifications, a notification registration token and related preferences are used to send them. You can revoke permission in your browser settings. The current Android game does not request access to your contacts, camera, microphone or precise location.
Retention and deletion
Account and community information is kept while needed to operate your account, until deletion is requested. Expired sign-in exchanges or lobbies may remain stored until cleaned up; access expiry is not automatic erasure. Provider technical logs follow the provider’s retention rules. A deletion request covers your authentication account, profile, associated social records, notification registrations and remaining connection records. Information required for security or a legal obligation may be retained only as needed; any such exception will be explained when handling your request.
Your choices and contact
You can request access, correction, export or deletion by emailing tizondife509@gmail.com from the address associated with your account. Include your player name if you have one; never send your password. Use the account settings when export or deletion tools are available. If they are unavailable, the email route remains available without installing the game. We may ask you to verify account ownership. Uninstalling the application alone does not delete your online account. See the account deletion page linked below.
Policy updates
We update this page when data practices change and show the revision date above. If a new feature requires additional permission or consent, it will be requested when relevant.