Privacy

Last updated: 17 October 2026

Oreacle lets people study strategy-game replays and guess the winner alone or with invited players. You can play without creating an account. This page explains information handled by the app, optional accounts, and its game service.

Information you provide

When you create or join a live room or challenge, Oreacle sends the display name you enter, the room or challenge code, and your vote to the room service. A room also stores the replay board and event data needed to show the game, its winner, placement mode, participants, votes, and room status. Replay player identifiers and names are removed or replaced with generic player labels by the app before room data is stored.

The app creates room and participant access tokens so you can resume a session. The device keeps the active room token and session state in local app storage. The room service stores a one-way hash of access tokens. On the device, Oreacle also remembers up to eight recent challenge codes to make them easier to reopen. Anyone with a shared room code may be able to join while a room has space and remains open, so share codes only with people you intend to invite.

Sign-in is optional. You can use Sign in with Apple or an email sign-in link to sync progress across devices. Google Firebase Authentication processes your sign-in information, provider identifiers, email address (including an Apple relay address when used), and security-related network information. Oreacle receives a verified account identifier and uses it to associate your saved games with your account. Firebase handles email delivery; Oreacle does not ask you for an email password.

My Games stores the boards you completed, your predictions, the actual rankings, scores, game modes, and dates. Guest practice is saved on your device. When you sign in, completed guest practice and eligible Daily Prophecy results can be transferred to your account. The app also records boards you have seen so training can prefer fresh boards.

Friends use a shareable friend code and a request that the other player can accept or decline. Accepted friends can see your display name and eligible Daily Prophecy results after they have submitted their own prediction. Oreacle does not share your email address or private My Games history with friends. You can remove or block a friend. Oreacle does not access your contacts, precise location, or private messages. Do not put sensitive information in your display name.

Retention

Live room records, including replay data, names, and votes, are scheduled to expire 24 hours after the room is created. A challenge accepts votes until everyone in its expected group has voted or its seven-day deadline arrives. Its results are kept until 30 days after that deadline, even if everyone finishes earlier. The service is configured to clean up expired records daily and also cleans them up during room creation or when an expired room is accessed. A record may remain after its expiry until cleanup runs.

The app saves room access tokens and session state on your device until you leave or exit the room, or clear the app or browser storage. Recent challenge codes are also saved on your device, with up to eight kept for convenience. These local records have no automatic expiry. Clearing storage or removing the app's data removes the local copy. It does not immediately delete a room record from the service; the retention periods above apply.

Account history, seen-board records, friend relationships, and account Daily Prophecy results remain until you delete the account. Guest Daily Prophecy submissions on the service are scheduled for cleanup after 90 days. Local guest history remains until you transfer it or clear the app or browser storage. Successful sign-out removes cached account history from that device while preserving the cloud account.

In Account, Delete account and progress requires a fresh sign-in. It deletes the Firebase login identity and Oreacle account, saved progress, and friend relationships, and anonymizes linked room display names. A room's existing predictions and scores can remain until its normal expiry. Small one-way deletion markers may be retained to prevent previously deleted attempts from being imported again. If provider authorization revocation is temporarily unavailable, the app reports the issue rather than claiming deletion has completed.

How information is used and shared

Oreacle uses room information to create and run the game, show participants their shared results, prevent duplicate votes, and limit abusive request rates. Rate-limit records use a hash derived from the network address or room access token and are scheduled for cleanup after seven days. The service receives network information needed to process requests.

The native iOS app includes Google Mobile Ads and Google's User Messaging Platform. If ads are enabled for the installed build, Google may process information such as IP address, device identifiers, ad views or interactions, and diagnostic or performance information to deliver and measure ads and operate its SDK. Google's data practices can depend on your location, consent choices, SDK version, and ad configuration. Review Google's iOS data disclosure. Ads are shown only at eligible breaks after games; the web version does not show ads. Where required, Google's consent form is presented and a Privacy options control is available. UMP ad consent and Apple's App Tracking Transparency choice are separate. If UMP allows ad requests and Apple's tracking status is not determined, Oreacle asks for tracking permission before initializing Google Mobile Ads. Personalized ad requests are made only when permission is authorized; if permission is denied, restricted, unavailable, or not authorized after the prompt, Oreacle requests non-personalized ads. Room play remains available regardless of these choices.

Cloudflare hosts the website and game/account database. Firebase Authentication provides optional sign-in, and Apple provides Sign in with Apple. Oreacle does not initialize a separate analytics SDK or include a push notification service. Read Firebase privacy information and Apple sign-in privacy information. The privacy disclosures for your installed app version apply.

Your choices and requests

You can choose not to provide a name or join a room; multiplayer features then will not work. You can leave or exit a room in the app and clear local storage to remove the device's saved token and recent codes. If you have a privacy request about a room record, email admin@marevaideas.com and include the room code and relevant details. Do not send an access token. A room deletion control is not available in the app, and a request may not be fulfillable before the automatic expiry described above.

For an ad consent choice, use the consent form or the in-app Privacy options control when it is shown. You can also manage device-level advertising settings in iOS.

Security and contact

Oreacle uses room-scoped access tokens and account sessions, storing their server identifiers as hashes. Browser account sessions use secure HTTP-only cookies; the iOS app stores its account session in the system Keychain. Provider credentials needed to maintain and revoke sign-in are encrypted on the server. Account validity checks run when the app is used, with a short cache, rather than continuous polling. No internet transmission or storage method is completely secure. Contact admin@marevaideas.com with privacy questions or concerns.