Version 2026-11-03. This describes what the Defty service actually collects and does. One item is still to be filled in and is marked where it falls.
Defty is made and run by Elie Abijaoude, of Elias Baaklini Street, Achrafieh, Beirut, Lebanon. Defty is one person rather than a company. That person decides how your personal information is used, which makes them the data controller, and you can reach them about it at defty.app@gmail.com.
| What | Details |
|---|---|
| Your account | Your email address, your password (stored only as a one-way hash, never readable), your date of birth, which version of the terms you accepted and when, and whether your email address has been confirmed. |
| Where you are | Your country, as reported by our network provider from your internet connection. We record it with each round. We don't use GPS or your precise location. |
| Your device and connection | Your IP address; the app or browser you use; a random identifier kept on your device; and a one-way hash of general characteristics of your device (screen size, time zone, languages, platform, number of processor cores, touch support). We keep only the hash, not the characteristics themselves. |
| What you have bought | Which product it was: Defty Plus by the month or by the year, or one of the three single purchases. With it the App Store's own reference for the purchase, whether a subscription is running, cancelled or over, and the dates it began and renews or ends. Not your card, which Apple holds and we never see. |
| How you play | Every tap in every game: when it happened, by our clock and your device's, where on the board it landed, what it hit and whether it was right. Also your results, your scores and where they came, and how long your connection takes to reach our servers. |
Defty takes no payments itself. Everything bought in the app is bought from Apple, which takes the money and holds the card; what reaches us is a signed receipt saying what was bought and until when. We hold no card details, no bank details and no billing address, and we ask nobody to prove who they are. Nothing in Defty can be won and no money is ever paid out.
We don't sell your information, show you advertising, or use it to build an advertising profile. Where the law requires a legal basis, ours are: running the contract you have with us; our legal obligations; our legitimate interest in fair play and preventing fraud; and your consent where we ask for it.
Some of these companies may process information outside your country. Where the law requires it, we use safeguards such as standard contractual clauses.
Defty sets no cookies. It is an iPhone app and nothing else: your sign-in lives in the phone's Keychain and is sent with every request, and the app keeps the random identifier described above beside it. The few pages we serve to a browser, these among them, store nothing and set nothing. There are no advertising or analytics cookies because there are no cookies.
Depending on where you live, you can ask us for a copy of your information, to correct it, to delete it, to receive it in a portable format, or to stop or limit some uses of it. You can also complain to your data protection authority. Write to defty.app@gmail.com. We may need to keep some records, such as financial ones, even after you ask us to delete your account.
Defty is for players of 13 and over, or older where local law sets a higher age for using a service like this without a parent's permission. We close accounts we find belong to someone younger, and delete what we can.
Connections to Defty are encrypted, passwords are stored only as one-way hashes, and access to player information is limited to the people who need it. No system is perfectly secure, and we'll tell you and the relevant authorities about a breach when the law requires it.
We'll post any change here, with a new version and date, and tell you in the app or by email when a change is significant.