1. Who we are
400 – Arba3miyeh (“400,” “we,” “us”) is operated by 9434-2334 Quebec Inc. This policy describes information handled by the iPhone app, its game service and this website. Privacy questions and requests can be sent to contact@zeemsg.com.
The service is currently in beta. This policy describes the deployed beta, including its current limitations, and will be updated when our practices change.
2. Information we collect
Accounts and profiles
We store a player identifier, chosen display name and country/flag, game statistics, rating and account-related preferences. A guest session also has an identifier. Username/password registration adds your username, recovery email address, verification status and a salted password hash. We do not store your password in plain text. We store hashed authentication tokens and session-expiration information to manage sign-in.
Optional Apple Game Center features
If you use Game Center, we process Apple-provided identity and verification information to authenticate or link your account. If you allow friend discovery, we process the friend identifiers supplied by Apple to find linked players. We do not retain the raw friend-lookup list or automatically make those players your in-app friends. Apple handles its services under its own privacy policy.
Gameplay and social features
We store match and room records, bids and card plays, scores, rule settings, hand verification records, earned coin balances and ledger entries, cosmetic ownership, daily challenge progress, friendships, requests, table invitations, blocks, chat messages and reports. Information you type in chat or a support email may itself contain personal information.
Technical and support information
The service receives network information such as your IP address to deliver connections and control abuse; rate-limit records use hashed keys. Server, hosting and security diagnostics may include connection information, timestamps and errors. If you send feedback, we receive your email address and the details or attachments you provide. Apple may provide beta feedback and diagnostic information through TestFlight according to your Apple settings.
This website and your device
This website does not use advertising cookies, analytics trackers, a signup form or browser local storage. Visiting it still requires our hosting provider to handle network requests. Links to email open your email app. The iPhone app stores sign-in credentials in Apple Keychain and preferences, such as sound settings, on your device. We do not request precise location, your address book, microphone or camera for the current game features. Your country is selected by you.
3. How we use information
We use information to create and secure accounts; connect players; run games, timers and reconnection; calculate results and rankings; maintain balances and cosmetic ownership; show friends and table invitations; deliver chat; preserve hand records; handle support and reports; prevent abuse; and diagnose service problems.
Recovery and verification email delivery is not configured in the current beta. Temporary verification information is held in a restricted server outbox and is not emailed automatically. Contact support if you need account help.
We do not sell your personal information or use it for targeted advertising. The current app has no advertising or third-party analytics SDK. The beta does not process purchases or publish hand records to a public blockchain.
5. Retention and account deletion
Account information is kept while needed to operate your account. Game and social records are retained according to their operational purpose and the beta’s current storage behavior. We have not implemented a universal fixed deletion period for all match, coin-ledger, report, diagnostic or backup records.
You can initiate account deletion in the app under You → Account → Delete account. Deletion revokes sessions, clears login credentials, anonymizes your game profile, removes friendships and related requests or invitations, removes your messages from active room records, and removes your access to hand history. Interrupted deletion is retried by the server.
Some match history, coin-ledger entries, reports, security records and deletion markers can remain under an opaque player identifier. These retained records are not a guarantee of complete anonymity. They may include information needed to preserve game results, prevent abuse or meet applicable obligations. Other players may already have seen or copied information you shared.
Restricted backups may temporarily retain older copies. Automatic backup expiry is not currently configured for this beta. Backup retention and requests involving retained records are handled through support. Contact us if you need more information or want us to assess removal of information that remains.
Temporary verification tokens expire after 24 hours and password-reset tokens after 30 minutes; used or expired action records and local outbox files are removed by scheduled maintenance. Refresh sessions have a maximum 30-day lifetime from primary sign-in, subject to earlier revocation.
6. Your choices and requests
You can choose guest play where available, limit what you share in chat, decline optional Game Center friend access, mute or block players, and delete your account. Uninstalling the app does not itself delete server records.
You can request access to or correction of personal information, request deletion, or raise a concern by emailing contact@zeemsg.com. We may verify your identity before responding, and some requests may be subject to applicable exceptions. Never send us your password or authentication tokens. Where applicable, you may also raise a concern with your privacy regulator.
7. Security
We use HTTPS and secure WebSockets in transit, password hashing, access controls, session revocation and restricted database and backup storage. No online service can promise absolute security. Avoid sharing sensitive information in public profiles or table chat, and use a password you do not use elsewhere.
8. Children
400 is not directed to children under 13. If you believe a child under 13 has provided personal information through the service, contact us so we can investigate and address the information. We do not currently provide a dedicated parental-consent flow.
9. Changes and contact
We will publish changes here and update the effective date. Material changes may also be communicated in the app or through the contact information available to us.
9434-2334 Quebec Inc
Privacy and support: contact@zeemsg.com
Website: 400card.io