Effective Date: June 5, 2026 | Last Updated: June 5, 2026
Bitlitic LLC ("Bitlitic," "we," "us," or "our"), an Ohio limited liability company, operates the Ultimate Cards mobile application ("App"). This Privacy Policy explains what information we collect, how we use it, the legal bases on which we rely, and the rights you have. It applies to all users of the App.
Summary: Ultimate Cards is a virtual card-table and party-game app for local and online multiplayer, for ages 13 and up. You must be 18 or older to create an account. We collect only what is needed to run accounts, show ads, process purchases, and improve the App. We do not sell your personal data, and we do not knowingly collect personal information from children under 13.
Age restrictions. The App is for users aged 13 and older. It is not directed to, and may not be used by, anyone under 13. You must be 18 or older to create an account, and because in-app purchases run through an account, to make a purchase. On platforms where we offer the optional Drinking Game pack — currently Android and the web app, but not iOS — the minimum age to use the App is 18, and that pack's "Alcohol" and "Risqué" modes are restricted to account holders aged 21 or older.
The data controller responsible for your personal data is:
The App is currently offered only to users located in the United States and the United Kingdom. It is not intended for use elsewhere.
When you create an account, we collect:
If you sign in with Google or Apple, we receive your name and email from those services. If you use Sign in with Apple's "Hide My Email," we receive only a private relay address.
Before using the App, you are asked to enter your date of birth at an age-confirmation step. If you use the App without an account ("Guest"), your attested date of birth is stored only on your device and is not transmitted to us. If you create an account, your date of birth is stored with your profile in our cloud database (Google Firebase) to verify your eligibility to hold an account and, where they are offered, for age-restricted (21+) modes.
We use Firebase Analytics (provided by Google) to understand how the App is used. This automatically collects:
We use Google AdMob to display advertisements. AdMob and its partners may collect:
On iOS, we request your permission through Apple's App Tracking Transparency (ATT) framework before the advertising identifier is used for cross-app tracking. If you decline, the App does not use the ATT-gated identifier for tracking, and your advertising experience is limited in line with your choice and your device's ad settings. You can also obtain non-personalized advertising through the opt-outs in Section 10. If you purchase "Remove Ads," advertising and related data collection stop.
The App lets players send chat messages and create custom "house rules" during multiplayer sessions. In local peer-to-peer games this content is exchanged directly between devices and is not stored on our servers. In online games, content may transit our or our providers' infrastructure to deliver it to other players and to enforce our Acceptable Use Policy. Do not share sensitive personal information in chat.
For peer-to-peer multiplayer, the App uses your device's local IP address and Bluetooth/Bonjour discovery to connect with nearby players. This data is used only to establish the connection and is not used to identify you to us.
In-app purchases are processed by Apple (App Store) or Google (Play Store). We do not collect or store your payment card details. We receive confirmation of completed purchases and an anonymized purchase identifier to deliver your entitlement (e.g., "Remove Ads").
| Data | Purpose | Legal basis (UK GDPR) |
|---|---|---|
| Email, name, display name | Create and operate your account; identify you to other players | Performance of a contract |
| Date of birth | Verify you meet the applicable age requirements — 13+ to use the App, 18+ to hold an account, 21+ for restricted modes (age assurance) | Legitimate interests; performance of a contract |
| Analytics data | Understand usage, fix bugs, improve the App | Legitimate interests; consent where required |
| Advertising identifiers | Show ads (personalized only with consent) | Consent |
| Chat / house-rule content | Deliver multiplayer features; enforce our policies and safety | Performance of a contract; legitimate interests |
| Local IP / discovery data | Establish peer-to-peer connections | Performance of a contract |
| Purchase confirmations | Deliver entitlements; prevent fraud | Performance of a contract; legitimate interests |
Where we rely on consent (for example, personalized advertising), you may withdraw it at any time through your device settings or by purchasing "Remove Ads." Where we rely on legitimate interests, we have balanced those interests against your rights.
We do not sell your personal data for money. We share data only with the service providers below, who act as our processors or as independent controllers under their own policies:
We may also disclose information when required by law, to enforce our Terms, to protect the rights, safety, or property of Bitlitic or others, or in connection with a merger, acquisition, or sale of assets.
Note for California residents: the use of advertising identifiers for cross-context behavioral advertising may be considered "sharing" under California law. You can opt out as described in Section 9.
We are based in the United States. If you are in the United Kingdom, your personal data will be transferred to and processed in the United States by us and by our providers, which include Google LLC (Firebase and AdMob), Apple Inc., and RevenueCat, Inc. Where we transfer personal data outside the UK, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with the providers' own approved transfer mechanisms. A copy of the relevant safeguards is available on request from customer-service@bitlitic.com.
We retain account data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Analytics data is retained according to Firebase's configured retention period (currently 14 months). You may request deletion of your account and associated data at any time (see Sections 8 and 9).
Server logs. Our multiplayer relay server records standard web-server access logs for each request, including your IP address, timestamp, requested path, response status, and user agent. These logs are used only to operate and secure the service — diagnosing faults and detecting abuse — and are automatically deleted after 14 days. They are not used to build a profile of you, are not combined with your account data, and are not sold or shared for advertising.
Data transmitted between the App and our servers is encrypted in transit using HTTPS/TLS. Multiplayer game messages are cryptographically signed for integrity. We use the security features provided by Firebase to protect stored data. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
The App is not directed to children under 13. The U.S. Children's Online Privacy Protection Act (COPPA) applies to children under 13: we do not knowingly collect personal information from anyone under 13, and if we learn that we have, we will delete it promptly.
Users aged 13 to 17. Accounts are restricted to users aged 18 and older. We do not knowingly create or maintain an account for anyone under 18, and if we learn that a person under 18 has created one, we will terminate it and delete the associated information. Users aged 13 to 17 may still play as guests without an account. In that case the date of birth they attest to is stored only on their device, no profile is created, and no personal information is transmitted to us.
Consistent with the UK Age Appropriate Design Code, we apply the following by default to every player, without requiring anyone to opt in: we collect the minimum information needed to run the App, we do not sell personal data or use it for profiling, and our safety controls — profanity filtering, in-app reporting, and blocking — are always on. Where a user's attested age is under 18 (or unknown), advertising is additionally capped to content rated suitable for teens, is requested on a non-personalised basis regardless of any tracking permission, and is flagged to our ad provider as being served to a user below the age of consent.
If you believe a minor has provided us personal information, contact customer-service@bitlitic.com.
You may request to access, correct, or delete your personal data, or to close your account, by contacting customer-service@bitlitic.com. You may opt out of personalized advertising through your device settings or by purchasing "Remove Ads."
If you are a California resident (or a resident of another U.S. state with a comprehensive privacy law, such as Virginia, Colorado, Connecticut, or Texas), you have the right, subject to applicable law, to: (a) know the categories and specific pieces of personal information we collect; (b) delete personal information; (c) correct inaccurate information; (d) opt out of the "sale" or "sharing" of personal information; (e) limit the use of sensitive personal information; and (f) be free from discrimination for exercising these rights.
The categories of personal information we collect, and how they are disclosed, are:
| Category (Cal. Civ. Code §1798.140) | Examples | Disclosed to / "Shared"? |
|---|---|---|
| Identifiers | Email, name, display name, device/advertising IDs, IP address | Disclosed to service providers; advertising IDs "shared" for cross-context behavioral advertising |
| Customer records | Account profile, date of birth | Service providers only |
| Commercial information | Purchase confirmations / entitlements | Service providers only |
| Internet/network activity | App usage and event analytics | Service providers; analytics partner |
| Geolocation (approximate) | Country/city derived from IP | Service providers; analytics partner |
| Inferences | None used to build profiles | Not used for profiling |
We do not sell personal information for money. We do "share" advertising identifiers for cross-context behavioral advertising as those terms are defined under California law. We do not use sensitive personal information to infer characteristics about you. Do Not Sell or Share / Limit: you can opt out of this "sharing" by enabling Limit Ad Tracking / declining App Tracking Transparency on iOS, opting out of ad personalization on Android (Section 10), or purchasing "Remove Ads"; you may also email customer-service@bitlitic.com with the subject "Do Not Sell or Share." We honor opt-out preference signals, including the Global Privacy Control (GPC), where required. To exercise any right, email customer-service@bitlitic.com; you may use an authorized agent, and we will verify your request before acting on it.
If you are in the UK, you have the right to: access your data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk). We will respond to verified requests within the timeframes required by law (generally one month). We have assessed our obligations under Article 27 of the UK GDPR and, given the limited and occasional nature of our processing of UK data, do not currently consider a UK representative to be required; we will appoint one if that position changes. For all data-protection matters, contact customer-service@bitlitic.com.
The App is a native mobile application and does not use browser cookies. It uses device identifiers and SDKs (Firebase, AdMob) as described above. Where required by law (including the UK Privacy and Electronic Communications Regulations), non-essential identifiers are used only with your consent.
We may update this Privacy Policy from time to time. We will update the "Last Updated" date and, for material changes, provide additional notice (such as an in-app notice). Your continued use of the App after changes take effect constitutes acceptance of the updated policy.