Privacy

Last updated: 21 October 2026

This page explains what Four in a Row Evolution, the website and the app, collects about you, why, and the choices you have.

Who is responsible

Find srl is the data controller: Via Luca Marenzio 5, Concesio (BS), Italy. VAT number IT04233780982.
For anything about your data, write to info@findsrl.com. We haven't appointed a Data Protection Officer.

Playing against the AI: nothing reaches our servers. Your settings (difficulty, timer, language) stay on your device.
Your online profile: the first time you play online, we create an anonymous player: a random ID, a nickname (made up for you, and you can change it), your points, streaks, games and wins. We never ask for your name, email or phone number.
Online matches: the moves, the result and both nicknames, to run the match and show it to both players.
A sign-in token, which tells our server which profile is yours. On the website it's a cookie; in the app it's kept in your phone's secure storage. It isn't used for tracking or ads.
Your IP address, to limit abuse such as too many new profiles or guessed codes. It's kept for at most 10 minutes and never stored with your profile.
Usage statistics (app only, and only if you allow them): with Google Analytics for Firebase, which screens are opened and how games end (mode, result, AI level), plus technical data the tool collects, such as device model, system and app version, approximate country and an app-instance identifier. The advertising ID is never collected.
Reminders (app only, if you allow notifications) are scheduled on your phone. Nothing is sent from our servers, and we don't collect a push token.
Technical request data: our hosting provider processes data such as your IP address and browser type to deliver the website and the app's server, and to keep them secure.

Your profile, matches and sign-in token: to provide the game you ask for, including online play and the leaderboard (performance of a contract, Art. 6(1)(b) GDPR).
IP address and technical request data: to keep the service secure and prevent abuse (our legitimate interest, Art. 6(1)(f) GDPR).
Usage statistics: to understand how the app is used and improve it, only with your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time on the app's Privacy screen, which also erases the statistics data kept on your phone.
We don't sell your data, show ads or use your data to profile you.

Your nickname and points appear on the public leaderboard, and your opponents see your nickname. Pick a nickname that doesn't reveal who you are.

Your profile: until you delete it. In the app: Privacy → Delete my profile. From the website: write to us with your nickname.
Online matches: deleted at most an hour after their last move. Friend codes expire after 10 minutes.
IP addresses used against abuse: at most 10 minutes.
Usage statistics: 14 months, then Google Analytics deletes them.
Cookies: the sign-in cookie lasts up to 5 years and the language cookie 1 year, unless you clear them sooner.

Vercel (hosting): our server code runs in Frankfurt, Germany. Vercel's network may route requests through other countries, including the United States.
Upstash (database): profiles, matches and the leaderboard are stored in Frankfurt, Germany.
Google (Firebase, app only, with your consent): usage statistics are processed by Google, including in the United States.
These providers process data only on our behalf. Transfers outside the EU are protected by the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
The App Store and Google Play handle downloads under Apple's and Google's own privacy policies.

You can ask to see, correct, delete or receive a copy of your data, to restrict or object to its use, and withdraw your consent at any time, without affecting what happened before.
You can change your nickname on the leaderboard page, and delete your profile in the app or by asking us from the website.
Before acting on a request, we may ask you to show that a profile is yours, for example by renaming it to a word we send you.
You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

The game is for everyone. In Italy you must be at least 14 to agree to the use of your data yourself: if you're younger, ask a parent or guardian before playing online or allowing usage statistics.
If you believe a child under 14 has an online profile without permission, write to us and we'll delete it.

The "player" cookie signs you in to your online profile. It's needed for online play.
The "locale" cookie remembers the language you chose.
Your settings for games against the AI are kept in your browser's local storage.
These are all technical, so they need no consent and there's no cookie banner. The website has no analytics or advertising cookies.

When this policy changes, we'll update this page and its date. For important changes, we'll also tell you in the app or on the website.

Questions? Write to info@findsrl.com.