Privacy policy
Updated 2026-10-18
togly.mn (the all-ages app), the togly.mn 18+ app and togly.mn web rooms use as little information about you as they can. There are no accounts, passwords, phone numbers or email addresses. This policy is written to comply with Mongolia’s Law on Personal Data Protection (2021, in force since 2022).
What stays on your phone
- Player names, language, settings, cards you’ve seen, the 18+ app’s age confirmation date and a hash of your PIN. These are stored only on your device and are deleted with the app.
- The decks you own are kept on your device, and by RevenueCat so you can restore them (see Purchases below).
When you play in a room
- The name you enter and your moves (votes, written answers, drawings) are kept on our server for the life of the room. Everything in it is deleted within 3 hours of the last move.
- A random seat key is stored in your browser or phone so you can get back to your seat if the connection drops. It doesn’t identify you.
- IP addresses are used briefly, in memory, to stop flooding. They aren’t stored or shared.
- Names and text typed in rooms are checked against a word filter. Hosts can remove a player from their room.
Purchases
Payments are handled by the App Store or Google Play; we never see card details. To restore what you bought, RevenueCat keeps your purchases under an anonymous ID. When a host opens a room, that ID is used to unlock their decks in the room.
Notifications
If you allow notifications, the app sends our server:
- Apple’s or Google’s push token (the address notifications reach your phone at).
- A usage summary with no names in it: install date, the days you played, which games, whether you’ve bought anything and how many decks, when a 24-hour pass ends, language, time zone, which app (all-ages or 18+), and the anonymous purchase ID.
Player names and typed text are never included. It’s used for game-night reminders and news about new decks and holiday parties: at most twice a week, never late at night. Notifications travel through Expo’s service to Apple and Google. Marketing notifications have their own switch in Settings → Notifications. Turn notifications off, or leave the app unopened for 120 days, and this is deleted; a log of sent notifications is kept for a year.
Microphone (18+ app)
When you start King’s Cup’s “Uukhai!” meter, the app measures how loud the room is, on the phone. Nothing is recorded or sent. The all-ages app never uses the microphone.
Crash reports and statistics
When the app crashes, a technical report (device model, app version, error trace) goes to Sentry. To learn which cards get played or skipped, anonymous events (card ID, game, counts) go to PostHog. Player names and typed text are never included.
The website and web rooms (togly.mn) use Google Analytics to learn how many people visit, which pages they read, how many rooms get opened and which games get played. Google receives the kind of page, browser and device type, language and approximate location (country, city); never a room code, a player’s name or anything typed. Google Analytics keeps a “_ga” cookie in your browser. None of it is used for advertising, and rooms opened inside the app don’t load Google Analytics. To opt out, block cookies for togly.mn or install Google’s Analytics opt-out add-on.
Children
The all-ages app collects nothing from children and shows no ads. The 18+ app is for adults only.
Your rights
You can see, correct or delete information about you. On-device data is removed by deleting the app. For anything else, write to support@togly.mn; we answer within 30 days.