HOOKAH ROYALE

Privacy Policy

Effective date: August 19, 2026 · Last updated: August 19, 2026

This Privacy Policy explains how Xsatori Labs LLC ("we," "us," or "our") collects, uses, and shares information when you use the Hookah Royale mobile app and website (together, the "Service"). Hookah Royale is a free, play-money social card game (Kon Khan, 31, Texas Hold'em, and Blackjack). The Service does not offer real-money gambling, real-money prizes, or any way to cash out. All in-game coins are virtual, have no monetary value, and cannot be exchanged for money or anything of value outside the game.

1. Information we collect

Information you provide

• Account information. If you create an account, we collect your email address, a password (stored in hashed form by our authentication provider), and a display name or username. You may also sign in with Google, in which case we receive your basic Google profile (name and email) to create your account.
• Guest play. You can play without an account. In guest mode, your coin balance and preferences are stored locally on your device and are not linked to an identity.
• In-game content. Chat messages you send at a table, and your table/game activity.

Information collected automatically

• Gameplay and app activity. Coins, hands played, purchases of virtual items, and similar in-game events, kept to run the game and keep your balance server-authoritative.
• Advertising identifiers. In the Android app, we show ads (including opt-in "watch to earn coins" rewarded ads) through Google AdMob, which uses your device's advertising ID and related data. There are no ads on the website.
• Technical data. Basic connection and device data (e.g., IP address, app version, and error logs) used for security, abuse prevention, and reliability.

Microphone & voice chat

Tables include an optional real-time voice chat. It is off until you choose to join the voice call. When you join, we access your microphone and transmit your audio in real time (peer-to-peer) to the other players at your table. We do not record, store, or retain voice audio. You can leave the voice call or revoke the microphone permission in your device settings at any time.

Purchases

If and when in-app coin purchases are enabled, payments are processed by the platform's billing system (e.g., Google Play Billing). We receive a confirmation and the purchased item, but we do not collect or store your full payment card details.

2. How we use information

Purpose	Examples
Provide the game	Create tables, deal hands, keep your coin balance, sync multiplayer state
Accounts	Sign-in, display name, friends, leaderboards, presence
Advertising	Show banner and opt-in rewarded ads in the Android app via AdMob
Safety & security	Prevent cheating, fraud, and abuse; debug and improve reliability
Support	Respond to your questions and requests

3. How we share information

We do not sell your personal information. We share limited data with service providers who help us run the Service, only as needed:

• Supabase — authentication and database (account, coins, profiles, presence).
• Google AdMob — advertising and advertising identifiers (Android app only).
• Google Play Billing / Stripe — payment processing for purchases, where enabled.
• Hosting/infrastructure — to deliver the app and real-time game servers.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

4. Your choices & rights

• Microphone: voice chat is opt-in; you can revoke the permission at any time.
• Ads: you can reset or limit your advertising ID in your device settings.
• Access & deletion: you may request access to or deletion of your account and associated data by emailing us (see below). We will delete your account data within 30 days, except where we must retain limited records for legal, security, or anti-fraud reasons.

5. Children

The Service is intended for adults and is not directed to children. Because it includes simulated gambling and a hookah-lounge theme, it is rated for mature audiences and should not be used by anyone under the age required by the app's store rating in your region. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

6. Data security & retention

Data is encrypted in transit (HTTPS/WSS/TLS). We retain account and gameplay data for as long as your account is active and as needed to provide the Service, then delete or anonymize it. Voice audio is not retained.

7. International users

We operate from the United States. If you use the Service from outside the U.S., your information may be processed in the U.S. and other countries where our providers operate.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, an in-app notice.

9. Contact us