foldmate

Privacy

Solo games and the daily sheet stay on your device. Playing friends needs a Google sign-in, and then we keep only what a match needs.

In short

• No ads, no tracking cookies, no selling of data, no profiles for advertising.
• Playing the computer and the daily sheet: no account, nothing leaves your device.
• Playing friends: you sign in with Google; we keep your name, a friend code, your friends and your matches.
• You can delete your account, with your friends and matches, from the game at any time.
• We count visits with Cloudflare Web Analytics, which stores nothing on your device and doesn't follow you.

What stays on your device

Your language, theme, sound and vibration settings, which opponents you have unlocked, your daily sheet results and the sheet in progress are saved in your browser's local storage, on this device only. Clearing this site's data in your browser, or uninstalling the app, deletes them.

Playing friends

To play friends you sign in with your Google account through Firebase Authentication, a Google service. Google tells us your account's ID, name and e-mail address; Firebase keeps them in its list of signed-in users so you can sign in again. We don't show your e-mail address to anyone and don't write to you.

In our database (Cloud Firestore, a Google service, stored in Warsaw, Poland) we keep:

• your profile: the name other players see (your Google first name to start with; you can change it), your six-letter friend code, how many matches you have played and won, and a rating;
• your friends: who added whom, and when;
• your matches: both players' names, the targets each hid, every drop and fold, the scores and who won.

Your profile name and code can be seen by other signed-in players. A match can be seen only by its two players, and your opponent sees your targets only after you have both finished a round. Moves are checked and scored on our server (Cloud Functions, also in Warsaw).

To keep cheats and bots out, the friends' part uses Firebase App Check with reCAPTCHA Enterprise: when you play friends, Google checks that the requests come from the real game, using signals from your browser. It runs only in the friends' part, not in solo games or the daily sheet. See Google's privacy policy.

Deleting your account

In Play friends, choose Delete account. That removes your profile, your friend code and your friends at once, deletes matches nobody has joined yet, and replaces your name in your other matches with a dash, so your opponents keep their results without your name. Your sign-in is deleted too. Signing out leaves everything in place for the next time.

Visit counts

To know whether people play Foldmate, we use Cloudflare Web Analytics on foldmate.youlius.com. When the page loads, a small script from Cloudflare sends one report with the page address and the site you came from, your browser, operating system and type of device, your country (worked out from your IP address) and how fast the page loaded. It doesn't use cookies or local storage, doesn't give you an ID and doesn't fingerprint your device, so a visit can't be linked to you. We only see totals. Nothing about your games is sent. The reports are handled by Cloudflare, Inc., which may process them in the United States under the EU–US Data Privacy Framework; see Cloudflare's privacy policy.

Hosting

The game's files are served by Firebase Hosting, a Google service. Like any web host, it may process technical data such as your IP address to deliver the files and keep the service secure. After your first visit the game is stored on your device and the solo games and daily sheet work offline.

Sharing

When you share a daily result, the picture and text are made on your device and handed to your system's share sheet, clipboard or downloads. Invite links contain only your friend code or a match number.

Who we are

Foldmate is made by Youlius, which decides what is kept and why: your name, friends and matches are kept to let you play friends (the service you asked for), visit counts and App Check because we have a legitimate interest in knowing the game is used and keeping it fair. You can ask to see, correct or delete your data, or object, by writing to contact@youlius.com, and you may complain to your data protection authority (in Poland, the UODO).

Po polsku

Gra z komputerem i kartka dnia działają bez konta, a ich wyniki i ustawienia zostają w pamięci przeglądarki na tym urządzeniu. Do gry ze znajomymi logujesz się kontem Google (Firebase Authentication). Wtedy w bazie Google Cloud Firestore w Warszawie trzymamy: nazwę widoczną dla innych graczy (możesz ją zmienić), sześcioznakowy kod znajomego, liczbę rozegranych i wygranych meczów i ranking, listę znajomych oraz twoje mecze (nazwy obu graczy, ukryte cele, krople, wyniki). Mecz widzą tylko jego dwie osoby, a cele rywala dopiero po zakończeniu rundy. Ruchy sprawdza i liczy serwer (Cloud Functions w Warszawie), a Firebase App Check z reCAPTCHA Enterprise pilnuje, żeby żądania pochodziły z prawdziwej gry. Konto ze znajomymi i meczami usuniesz w każdej chwili przyciskiem Usuń konto. Odwiedziny liczymy anonimowo przez Cloudflare Web Analytics, bez ciasteczek. Bez reklam i bez sprzedawania danych. Kontakt: contact@youlius.com.

Last updated 22 October 2026.