This policy applies to TRIACTO on the web and Android, including the Android application
com.triacto.app. Shared drawing is introduced in version 1.4.0; the online rules, reporting,
blocking, and moderation described below are introduced in version 1.4.1. Available features
depend on the version you use.
The short version
- Offline games stay on the device. MartNexS does not receive the match.
- Online play sends the room information and drawing strokes needed to keep participating screens in sync.
- Offline drawings stay in device memory; online drawings are cleared as a round advances, restarts, or ends.
- Online rooms are removed by an hourly cleanup after 24 hours without activity.
- Safety reports expire after 30 days; blocks remain until removed. A reported drawing may be retained separately for review.
- TRIACTO has no advertising, analytics, tracking SDK, account system, or in-app purchases.
- Local settings remain on the device until the player clears the app or browser data.
The rest of this policy explains those points in detail.
Controller and contact
Salvatore Matteo Martorelli, operating as MartNexS, is the data controller for the online-room processing described in this policy. Questions or requests can be sent to martnexs.trrr@gmail.com.
Please mention TRIACTO in the subject. If the request concerns an online room, include the room code and approximate time if available. Do not send an identity document, password, or other sensitive information unless it is genuinely needed and specifically requested. TRIACTO has no user accounts or passwords.
Information kept on the device
TRIACTO stores the following information locally in the browser or Android app:
- language;
- music, sound-effect, and vibration preferences;
- the display name entered by the player;
- a randomly generated client identifier;
- a legacy word-pack setting that no longer limits access to content; and
- the version of the online rules accepted by the player, in versions with online safeguards.
Offline match state and drawings are held in app memory. They are not uploaded to MartNexS.
MartNexS does not receive this local information during offline play. It remains on the device until the player clears the site’s or app’s data, resets the relevant browser storage, or uninstalls the Android app.
Information used for online rooms
When a player creates or joins a private room, TRIACTO sends the information needed to run that match:
- display name and random client identifier;
- room code and selected language;
- team names, player names, and seating order;
- scores, turns, roles, timers, votes, typed guesses, and match progress;
- drawing strokes and the drawing revision needed to synchronize the current sketch;
- connection status and room creation, activity, and last-seen times; and
- the accepted online-rules version associated with room membership, from version 1.4.1.
This information is used to create the room, keep participating devices synchronized, restore the current match state, and remove inactive rooms. Player-written fields reject emoji and have length limits, but players should still use nicknames instead of real names where possible.
TRIACTO does not ask for an email address, phone number, postal address, payment details, precise location, contacts, photos, files, advertising identifier, or account credentials. It does not use room information for advertising or profiling. Reports do not automatically punish players; moderation decisions are reviewed by MartNexS.
Online rules, reports, and blocking
From version 1.4.1, players must accept the online rules before creating or joining a room. The accepted rules version is stored locally and with room membership. The rules prohibit sexual or exploitative content, threats, hate, bullying, graphic violence, illegal content, and other people’s private information. They cover player names, team names, answers, and drawings.
Players can use Safety to report a participant, room content, or the current drawing. A report contains the selected reason, room identifier and code, reporter and target installation IDs, target display name, team names, creation and expiry times, and review status. A drawing report also keeps a server-owned copy of that turn’s drawing strokes. Reports do not copy secret words or typed guesses. MartNexS receives this information privately to review harmful content and enforce the online rules. A review may lead to content removal, a suspension, or room closure.
Blocking leaves the current match and prevents the same two app installations from joining a shared room. The other participants return to the lobby. We store both installation IDs and the time the block was created. A suspension records the affected installation ID and expiry. These IDs are not verified personal identities and may change after reinstalling or clearing app data.
Why this information is processed
Online-room information is processed because it is necessary to provide the multiplayer feature a player asks to use. Where applicable, the legal basis is performance of that requested service under Article 6(1)(b) GDPR. MartNexS also relies on its legitimate interests under Article 6(1)(f) GDPR to operate and secure the room service, prevent misuse, maintain reliable connections, and diagnose technical failures. This includes reviewing reports of harmful content and maintaining blocks or temporary suspensions needed to protect online play.
Providing online-room information is not a legal requirement. Without the display name, client identifier, and match data listed above, the online feature cannot work. Offline play remains available without sending match information to MartNexS.
Service providers and other recipients
Convex provides the database and real-time connection for online rooms. It processes the room data needed to synchronize the match and the reports, blocks, and suspensions described above. Cloudflare hosts the MartNexS website and this privacy page.
Netlify hosts the primary web version, and itch.io hosts another browser version. GitHub Releases distributes the direct Android download. Google Play distributes the store version. These providers receive the network requests needed to deliver the game or file and may record ordinary technical information such as IP address, request time, browser or device headers, and security logs under their own terms and privacy policies.
Some providers may process information outside the player’s country. The location of processing and any applicable international-transfer safeguards depend on the provider and its current service configuration. Contact MartNexS for more information about the providers used for TRIACTO.
MartNexS does not sell room information and does not share it with advertisers or data brokers.
Retention: how long information is kept
An automated job runs every hour and removes an online room after 24 hours without activity. A room may therefore remain in the service until the next cleanup run after that period.
Online drawings remain available during guessing and results. The active sketch is cleared when the game moves to a new turn, restarts, reaches the winning screen, or the room is deleted. A new drawing turn starts with an empty canvas. A safety exit also clears the active drawing. A reported drawing is retained separately with the report, even after the active sketch or room is removed. Drawing strokes are not used for advertising or analytics.
Reports expire 30 days after creation and are deleted during scheduled cleanup. Reviewing a report does not extend its expiry. Blocks remain until removed, including when a player asks to remove a block they set. Suspensions expire 30 days after the moderation decision and are deleted during cleanup.
Local settings remain on the player’s device until the player clears them or uninstalls the app. Hosting and distribution providers may keep technical logs for their own security and operational periods, as described in their policies. Service-provider backups may remain for their applicable backup-retention periods. Uninstalling or clearing local app data does not itself delete server records.
Your choices and rights
A player can avoid online-room processing by using offline mode. Local settings can be removed by clearing the site’s or app’s data or uninstalling the Android app.
Depending on the law that applies, a person may ask for access to, correction of, deletion of, or restriction of their personal data; request data portability; or object to processing based on legitimate interests. Requests can be sent to the contact address above. They are handled without charge and within the time required by applicable law.
For online data requests, include the Support reference shown in Settings in version 1.4.1, plus a room code and approximate time if available. This reference helps locate the random installation ID in room and safety records. You can also ask to remove a block you set or appeal a moderation decision. Because TRIACTO has no accounts, we may need limited context to identify the relevant records. Do not send passwords or unnecessary identity documents.
A person may also complain to the data-protection supervisory authority for the country where they live or work, or where they believe a data-protection issue occurred.
Security
TRIACTO uses HTTPS and secure WebSocket connections for online play. Room actions are checked on the server, player-written fields have length limits, and inactive rooms are deleted on the schedule described above. No online service can guarantee absolute security, so room codes should be shared only with the people intended to join.
On Android, TRIACTO uses internet and network-state access, audio for music and effects, optional vibration, and wake-lock support while the game is active. It does not request access to the camera, microphone, location, contacts, photos, or general file storage. Recording and background playback are disabled.
Children
TRIACTO is intended for players aged 13 and older. It does not verify a player’s age, create child profiles, or intentionally request personal information from children. A parent or guardian who believes a child entered personal information in an online room can contact MartNexS with the room code and approximate time, if known. Please do not send unnecessary identity documents.
Advertising, purchases, and external support
TRIACTO contains no advertising, behavioral tracking, analytics SDK, crash-reporting SDK, subscription, paid word pack, in-app purchase, or Google Play Billing integration. The current game content is included free of charge.
The Google Play app’s website link opens the TRIACTO product page in the system browser. Optional support offered on the studio website is handled by Ko-fi and its payment providers under their own terms. A tip does not unlock content, remove a restriction, or provide a gameplay advantage. TRIACTO does not receive payment-card details.
Changes to this policy
The effective date shows when this policy first applied to TRIACTO. The updated date changes when the wording or data practices are revised. If a future release materially changes how personal data is used, this page will be updated before or when that change takes effect.