Privacy Policy

DeNiro Card, operated by NIRO Corp · Last updated July 20, 2026

DeNiro Card is built to be played, not to profile you. There are no DeNiro accounts or sign-ups and no advertising trackers. Online free play does use a service provider and shares table state with the other players, as described below.

What's stored on your device

• Game stats — wins, losses, and streaks per game, saved in your browser's localStorage.
• Settings — sound, haptics, hints, difficulty, and house rules you pick.
• Legacy web Premium token — if you previously bought the former web unlock, a proof-of-purchase token may be saved in localStorage so that purchase can be verified on that browser. New Premium sales are disabled.
• Coin wallet — local practice coins and daily-bonus timing. Coin packs are not currently sold, so no paid coin-purchase ledger is kept on your device.

Those items live on your device. Clearing browser data removes them, including a legacy web Premium token. A native Apple App Store or Google Play Premium purchase is different: it is tied to the store account that bought it and can be restored from that same store, not from browser storage or across store platforms.

Multiplayer

Online free play is live through Supabase Realtime. When you open or join a table, the service processes a random per-tab player ID, a short generated or chosen display name, presence/connection timing, room and game settings, your equipped card-back ID, and the actions needed to run the game. Supabase also processes ordinary network information such as your IP address and service/security logs. DeNiro does not create a Supabase Auth user or durable player account for this flow. Store privacy labels conservatively treat the room/game data as linked because it is associated with an assigned session/player ID while the table is active.

Realtime table messages are delivered to the people in that room. The current peer-hosted game envelope contains the state views for every seat; a modified client could inspect hidden-card information that the normal screen does not show, impersonate an action, or disrupt a room because there is no authenticated server referee. Online is therefore casual free play only with no coin buy-ins, prizes, wallet settlement, rankings, or purchases. Do not use a table code or display name to share sensitive personal information.

Local solo stats are not uploaded. Leaving a room ends your Realtime presence; clearing site/app data removes the local random IDs and saved settings. Supabase may retain operational or security logs under its service practices. Because this flow creates no DeNiro account, there is no online player account to delete; contact us if you have a privacy request.

Payments

New DeNiro Card Premium and coin-pack sales are disabled. If optional cosmetic card backs are offered in the future, payments will be processed by Stripe on the web or Apple/Google in the native apps; card details go directly to that processor — we never see or store card numbers.

With coin sales disabled, this release does not create an anonymous wallet account, persist a wallet Auth UUID, call the wallet API, or keep an authoritative paid coin balance. To restore a prior native Premium purchase or verify an eligible historical purchase, the app can send the store product ID and receipt or purchase token to NIRO's receipt-validation service; the service checks it with Apple or Google and returns only the entitlement result to the app. That receipt is associated with the store transaction and is declared as linked Purchase History in Apple's privacy labels. We do not receive or store card numbers.

What we don't do

• No DeNiro account or sign-up for solo or free Online play.
• No advertising networks or ad tracking.
• No sale of personal data. Supabase processes the Online metadata described above as the Realtime service provider, and room participants receive the shared game state.

Contact

Questions about privacy or a purchase? Email support@niroaerial.com.