Privacy Policy

Who handles the information

The operator of Yono Games at https://download.yonogames.com.in handles the browser member information described here. Privacy and deletion questions can be sent to support@yonogames.com.in.

Browser member information and purpose

After separate 18+ confirmation and affirmative consent, the browser form sends the chosen player name and user-entered Indian mobile number to this website. The purpose is to create/display the member profile and let the authenticated site admin provide profile support. The number is not OTP-verified and is not used for payment, prizes, advertising, promotional SMS or WhatsApp marketing.

Private storage and admin access

The full name/mobile profile is encrypted at rest in a SQLite database outside the public web folder. A keyed digest helps protect lookups, and only the authenticated admin panel can list the decrypted record. Public pages, metadata, structured data, the sitemap and search engines do not receive member records. Hosting administrators may have infrastructure-level access needed to operate or secure the server.

Browser cookie and local game state

The Play page uses one host-only, Secure, HttpOnly, SameSite cookie containing a random device key. The server stores only a keyed digest of that key. It is used to return, update or delete the same browser member profile; it is not advertising tracking. A profile summary—player name, private member ID, last four mobile digits, consent version and dates—plus free-coin balance, total wins, refill count and unfinished games remain in this browser’s local storage. The full mobile number is not kept there. This local state is not added to the admin member list, and clearing browser storage can reset or alter the fictional values.

Offline Android APK

The separate verified Android APK declares no Android permissions, runs offline and keeps its name, mobile number and free-coin state locally on the phone. It does not sync APK profiles to this website or admin panel.

Retention and deletion

A server member record becomes eligible for deletion after 365 days without a profile update. It is automatically removed when that browser next requests its profile or during routine member/admin maintenance. The player can withdraw consent at any time by choosing “Delete server profile and local game data” in Profile; this immediately removes the live server row and clears that browser’s local game state. The authenticated admin can also delete a row. Routine hosting backups and security logs may follow the hosting provider’s separate expiry schedule.

Website and security logs

The web server or hosting provider may temporarily record technical details such as IP address, browser type, requested URL and time for security, abuse prevention and reliability. The application’s rate limiter uses a keyed IP digest rather than storing a raw IP. Profile request bodies and mobile numbers are not written to the application audit log. Completed APK requests are counted in aggregate.

Optional Google analytics

Optional Google Analytics and Google Tag Manager tracking are currently disabled on this website.

Under 18

Server member profiles are intended only for adults aged 18 or older. Do not submit a child’s name or mobile number. This website does not use behavioural advertising or sell member information.

Your choices

You may decline the member form and not use browser play, or use the separate offline APK whose profile stays on the device. You can ask support for access, correction or deletion of a server record. Because the number is not verified, support may need the private member ID and reasonable proof that the request belongs to the same browser profile.

Last updated: 7 September 2026