Last updated: 16 August, 2026
Twenty or One (“the game”, “we”, “us”) is a mobile game published by NTUK NTUK, based in Toronto, Canada. This policy explains what information the game handles, why, and what choices you have.
The short version: the game has no accounts and does not ask for your name, email address, or phone number. Most of what follows describes the small amount of technical and gameplay information needed to run duels, plus the advertising described in section 5.
The game does not collect, and does not ask for:
When you first open the game, it generates a random identifier and stores it on your device. This is how the game recognises your progress, streak, and challenge history without an account. It is generated by the app; it is not your device’s serial number or hardware ID. Deleting the app removes it from your device.
If you play with friends, you choose a display name so other players in your room can tell who is who. It may be a nickname — we do not verify it and do not need your real name. Display names pass through an automated filter for offensive words. Anything you type here is visible to other players in your room, so please do not put personal information in it.
To run duels and let you play against recorded opponents, the game records how a turn was played: which deal you were given, which target lane you chose, the cards you placed and removed, and when you locked in — all with timestamps. It is stored against your device identifier, not against you personally.
The game counts a small number of events so we can tell whether features work: a challenge being sent, a challenge being opened, an install arriving from a challenge link, and how often players choose a rematch. It also counts, across all players, how many chose each lane in the daily puzzle — the figure shown as “X% went Low”. These are aggregate counts and are not used to build a profile of you.
| Information | Purpose |
|---|---|
| Device identifier | Run the game without accounts; keep your streak, settings and challenges attached to your device |
| Display name | Let other players identify you in friend rooms |
| Gameplay recordings | Provide opponents to play against, validate results, and prevent cheating |
| Anonymous counters | Understand whether features are working; improve the game |
| Advertising data | Show ads, which fund the free version (see section 5) |
If you are in the UK or European Economic Area, our legal basis is legitimate interests for running the game and for anonymous counting, and consent for personalised advertising, which you may withdraw at any time.
We use a small number of service providers. We do not sell your information, and we do not share it with anyone beyond the following:
These providers operate internationally, so information may be processed outside Canada, including in the United States and the European Union, under the safeguards those providers maintain.
The free version of the game shows optional rewarded ads, supplied by Google AdMob. To do this, AdMob may access your device’s advertising identifier, IP address, and information about how you interact with ads. Google’s handling of that information is governed by its own privacy policy, available at policies.google.com/privacy.
Your choices about ads: Where required by law, we ask for your consent before showing personalised ads, and you can change your answer later in the game’s settings. You can also reset or limit your advertising identifier in your device settings — on iOS under Privacy & Security, on Android under Ads. And you can remove ads entirely with a one-time purchase.
The game offers a one-time purchase to remove ads. Payment is handled entirely by the App Store or Google Play. We never see your card details or billing address — we receive only confirmation that a purchase was made, so the game can unlock the feature.
Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, or object to how it is used. Canadian users have these rights under PIPEDA; users in the UK or EEA under the GDPR; users in California under the CCPA/CPRA.
Because the game has no accounts, the only way we can find your information is by your device identifier. You can see it, copy it, and request deletion from the game’s Settings screen. You can also email us the identifier using the address below. We will respond within 30 days.
Deleting the app also removes the identifier and local data from your device.
The game is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided information to us, contact us and we will delete it.
Information is transmitted over encrypted connections and stored with our service providers under their security controls. No system is perfectly secure, but the game’s design limits exposure: there are no accounts, no passwords, and no contact details to lose.
If this policy changes in a way that materially affects you, we will update the date at the top and, where appropriate, tell you in the game. Continuing to play after a change means you accept the updated policy.
Questions, requests, or complaints: [email protected]
If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. If you are in the UK or EEA, you may contact your local data protection authority.