Privacy Policy — Ludo Online

Last updated: 28 October 2026

Ludo Online ("the app") is published by VAB Technologies. This policy explains what the app collects, why, and what you can do about it. It covers the Android app with the package name com.ludoonline.app and the iPhone app with the bundle ID com.vabtechnologies.ludoonline.

What we collect

DataWhenWhy
Your name, email address, profile picture, and Google account identifier Only if you choose "Sign in with Google". The app is fully playable without signing in. To identify you across sessions and devices, and to show your name and picture to the other players in your game and to your friends.
Your Apple account identifier, your name if you choose to share it, and your email address if you choose to share it (this may be a private relay address from Apple's "Hide My Email"). We also keep a token from Apple that lets us revoke the app's access to your Apple account. Only if you choose "Sign in with Apple" on iPhone. The app is fully playable without signing in. To identify you across sessions and devices, and to show your name to the other players in your game and to your friends. The Apple token is used only to revoke Sign in with Apple when you delete your account.
A random player identifier for this installation (a "guest" account) The first time you open the app So your coins, stats and friends are kept without signing in. If you later sign in with Google or Apple, the guest account is merged into that account.
Game activity: games played and their results, captures, achievements, coin balance and coin history (entry fees, winnings, daily rewards, spins, rewarded videos), and when you open the app While you use the app To run the game, keep your stats and coins, apply daily limits, prevent cheating, and understand in aggregate how the app is used.
Friends: your friend code, friend requests, your friends list, players you recently played with, and whether you are online When you use the Friends features To let you add friends, see who is online and invite them to a game. Only your friends see your online status.
Invites: the invite codes you share, and whether an invited friend installed the app and played (on Android, read from the Google Play install referrer) When you share an invite link, or install the app from one To give the inviter their invite reward, once per friend.
Referral links: the referral code in the link you installed the app from, the country you signed up from and whether you later opened the app from India (both worked out from your IP address), and a one-way, keyed hash of your IP address at sign-up Only if you install the app from a referral link shared by one of our promoters (on Android, read from the Google Play install referrer) To pay the promoter who introduced you, once you have played a few games on two different days, and to spot repeated sign-ups. The country is worked out on our own server (IP geolocation by DB-IP); we keep the country, never your IP address, and the hash cannot be turned back into it.
In-app notifications (for example "friend request received") When something happens that concerns you To show them in the app's notification bell. They are deleted after 30 days.
A session identifier, your chosen name and colour, and the current room code Stored on your own device So the app can put you back into your game if it is closed or loses connection.

The app does not access your precise location, contacts, photos, files, camera or microphone. Coins have no cash value: they cannot be bought, sold, withdrawn or exchanged for money.

Advertising (Google AdMob)

The app shows ads, including banners, a full-screen ad between games, and optional videos you can watch for coins or an extra spin. Some ads are our own house banners, served from our server and not personalised. The others are served by Google AdMob, Google's advertising service, through the Google Mobile Ads SDK included in the app.

To show and measure ads and to prevent ad fraud, the Google Mobile Ads SDK collects and shares with Google:

When you finish a reward video, Google sends our server a signed confirmation containing your player identifier, so we can add your reward exactly once.

Your choices:

See how Google uses data from apps that use its services: policies.google.com/technologies/partner-sites, and Google's Privacy Policy.

Tapping an ad opens the advertiser's website or app, where their own privacy policy applies.

Where your data goes

Your account, game, coin and friends data is stored on servers operated by VAB Technologies and is used only to run the app. Data is sent over encrypted (HTTPS) connections. We do not sell your data, and apart from what the Google Mobile Ads SDK collects as described above, we do not share it with advertisers or data brokers.

Signing in uses Google Sign-In or Sign in with Apple, so Google or Apple processes that sign-in. See Google's Privacy Policy and Apple's Privacy Policy.

Keeping and deleting your data

Your account and game data are kept while you use the app and until you ask us to delete them. Notifications are deleted after 30 days.

On iPhone you can delete your account in the app: Home → gear icon → Settings → Delete account. Your account is deleted straight away, together with your coins and coin history, stats, friends, friend requests, notifications and referral record. Games you played stay in the other players' history, shown as "Deleted player". If you signed in with Apple, the app's access to your Apple account is revoked at the same time. The app then starts again as a new guest.

After any deletion we keep one thing: a one-way hash of your Google or Apple account identifier. It cannot be turned back into the identifier and holds nothing else about you. It is kept only so that deleting an account and signing up again cannot collect the sign-up coins twice.

On Android, or if you prefer, you can have your account and its data deleted by emailing support@vabtechnologies.com from the address you signed in with. If you play as a guest without signing in, include the friend code shown in the app's Friends tab so we can find your record. We will delete it within 30 days. Data held by Google for advertising is governed by Google's own policies and your choices above.

Computer players

Some tables may include computer players. They take the empty seats when not enough people are waiting to play, and are marked with 🤖 next to their name. Their names and pictures are made up and drawn by us: they are not real people, and no one's data is used for them.

Children

Ludo Online is intended for users aged 13 and over. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has used the app, contact us and we will delete the record.

Changes

If this policy changes, the new version will be posted at this address with an updated date above.

Contact

VAB Technologies — support@vabtechnologies.com
www.vabtechnologies.com