Poslednja izmena / Last updated: 13. septembar 2026 (September 13, 2026)
Politika privatnosti (srpski)
Ko smo mi
Meksiko je kartaška igra za 3 igrača, dostupna na igraj-meksiko.com i kao Facebook Instant Game. Igru razvija i održava Nikola Hadžić, individualni developer.
nikola.hadzic.n@gmail.com
Koje podatke prikupljamo
Identitet naloga — zavisi od toga kako se prijavljuješ:
- Standalone web (Google / Facebook / email login preko Auth0): dobijamo i čuvamo neutralni identifikator naloga koji izdaje Auth0 (nikad tvoju lozinku, nikad direktno u našoj bazi), i — ako ti to izabrani nalog za prijavu učini dostupnim — tvoje ime za prikaz i sliku profila.
- Facebook Instant Games: Facebook-ov "Zero Permissions" Player ID (kriptografski potpisan, verifikovan na serveru) — bez imena i slike, jer ih Facebook u ovom modelu uopšte ne prosleđuje igrama.
Podaci o igri i ekonomiji (uvek na našem serveru, nikad kod trećih strana):
- Stanje virtuelnih coina i istorija transakcija (dnevni bonus, ulaznice, nagrade za pobedu, nagrade za odgledane reklame)
- Istorija odigranih partija, sezonski rang bodovi, osvojene medalje
- Ko te je pozvao u igru, ako si igru otvorio preko linka za pozivanje prijatelja
Podešavanja sačuvana samo na tvom uređaju (nikad se ne šalju na naš server):
- Izabrani jezik interfejsa, uključen/isključen zvuk — preko browser localStorage-a
Reklame (samo na standalone web verziji, ne unutar Facebook-a):
- Ako je uključeno, Google AdSense (H5 Games Ads) prikazuje reklame za nagradu u coinima i pritom može koristiti kolačiće/identifikatore uređaja po sopstvenim pravilima — videti Google-ovu politiku privatnosti. Unutar Facebook Instant Games verzije, reklame u potpunosti servira i kontroliše Facebook (Meta) preko svog SDK-a — mi samo dobijamo potvrdu da je reklama odgledana, ne i bilo kakve podatke o samoj reklami.
Šta NE prikupljamo
- Nikad ne vidimo niti čuvamo tvoju lozinku — to u potpunosti obrađuje Auth0 ili Facebook
- Ne prikupljamo platne/finansijske podatke — coini u igri nisu prava valuta, ne mogu se kupiti ni isplatiti novcem
- Ne koristimo sopstvene alate za praćenje/analitiku (Google Analytics i sl.)
Kako koristimo podatke
Isključivo da bismo omogućili igranje partija (uparivanje igrača, računarski protivnici kad nema dovoljno igrača, vremenski limit po potezu), prikazali rang listu i tvoj profil, i sprečili zloupotrebu ekonomije igre (npr. dnevni limit nagrada za reklame).
Sa kim delimo podatke
Ne prodajemo niti iznajmljujemo tvoje podatke nikome. Sledeći spoljni servisi obrađuju deo podataka u naše ime:
- Auth0 — prijava na standalone web verziji (Auth0 privatnost)
- Meta / Facebook — identitet i reklame unutar Facebook Instant Games verzije (Meta politika privatnosti)
- Google AdSense — reklame za nagradu na standalone web verziji, ako je uključeno
- Hetzner Online GmbH — hostuje naš server i bazu podataka (EU, Finska)
Čuvanje i brisanje podataka
Podatke čuvamo dok tvoj nalog postoji. U bilo kom trenutku možeš zatražiti potpuno brisanje naloga i svih ličnih podataka — pošalji zahtev na nikola.hadzic.n@gmail.com sa email adrese ili nalogom koji koristiš za prijavu, radi verifikacije. Brišemo: stanje coina i istoriju transakcija, istoriju učešća u partijama, sezonske rang bodove i medalje, i sam nalog. Zapisi o odigranim partijama (npr. konačan rezultat) mogu ostati u agregiranom obliku radi integriteta istorije drugih igrača, ali se odvajaju od tvog identiteta — više ne mogu biti povezani s tobom. Zahtevi se obrađuju u razumnom roku, obično u roku od 30 dana.
Deca
Meksiko nije namenjen deci mlađoj od 13 godina i svesno ne prikupljamo podatke od dece te starosne grupe.
Izmene ove politike
Ako značajno izmenimo ovu politiku, datum na vrhu stranice će biti ažuriran.
Privacy Policy (English)
Who we are
Meksiko is a 3-player card game, available at igraj-meksiko.com and as a Facebook Instant Game. It is developed and operated by Nikola Hadžić, an individual developer.
nikola.hadzic.n@gmail.com
Information we collect
Account identity — depends on how you sign in:
- Standalone website (Google / Facebook / email login via Auth0): we receive and store an opaque account identifier issued by Auth0 (never your password, never stored directly by us), and — if made available by the login provider you choose — your display name and profile picture.
- Facebook Instant Games: Facebook's Zero Permissions Player ID (cryptographically signed, verified on our server) — no name or photo, since Facebook's Zero Permissions model does not provide these to games at all.
Gameplay and economy data (always on our own server, never with a third party):
- In-game coin balance and transaction history (daily bonus, match entry fees, match win rewards, rewarded-ad credits)
- Match history, season leaderboard points, earned medals
- Who invited you, if you joined through a friend's invite link
Preferences stored only on your device (never sent to our server):
- Chosen interface language, sound on/off — via browser localStorage
Advertising (standalone website only, not inside Facebook):
- When enabled, Google AdSense (H5 Games Ads) serves rewarded ads for in-game coins and may use cookies/device identifiers under its own rules — see Google's Privacy Policy. Inside the Facebook Instant Games version, rewarded ads are served and fully controlled by Facebook (Meta) through its own SDK — we only receive a confirmation that an ad was completed, no other ad-related data.
What we do NOT collect
- We never see or store your password — that is handled entirely by Auth0 or Facebook
- We do not collect any payment/financial information — in-game coins are not real currency and cannot be purchased or cashed out
- We do not run our own analytics/tracking tools (e.g. Google Analytics)
How we use this data
Solely to run matches (matchmaking, AI opponents when not enough players are available, per-turn time limits), show the leaderboard and your profile, and prevent abuse of the in-game economy (e.g. daily caps on ad rewards).
Who we share data with
We do not sell or rent your data to anyone. The following third-party services process data on our behalf:
- Auth0 — login for the standalone website (Auth0 privacy)
- Meta / Facebook — identity and ads inside the Facebook Instant Games version (Meta Privacy Policy)
- Google AdSense — rewarded ads on the standalone website, when enabled
- Hetzner Online GmbH — hosts our server and database (EU, Finland)
Data retention and deletion
We keep your data for as long as your account exists. You may request full deletion of your account and personal data at any time — email nikola.hadzic.n@gmail.com from the address or account you use to sign in, so we can verify the request. We delete: your coin balance and transaction history, match participation history, season leaderboard points and medals, and the account itself. Records of a completed match (e.g. the final score) may remain in aggregate form to preserve other players' match history, but are dissociated from your identity — they can no longer be linked back to you. Requests are processed within a reasonable time, typically within 30 days.
Children
Meksiko is not directed at children under 13, and we do not knowingly collect data from children in that age group.
Changes to this policy
If we make a material change to this policy, the date at the top of this page will be updated.