word-waltz / files / firestore.rules
firestore.rules
f038874d 2026-03-24 Pavel Safronov | 1 | rules_version = '2'; |
| 2 | service cloud.firestore { | |
| 3 | match /databases/{database}/documents { | |
| 4 | match /games/{gameId} { | |
| 5 | // Confidentiality is enforced by client-side AES-GCM-256 encryption. | |
| 6 | // The encryption key lives only in the URL fragment and is never sent | |
| 7 | // to the server, so Firestore only ever sees opaque ciphertext. | |
| 8 | allow read, write: if true; | |
| 9 | } | |
| 10 | } | |
| 11 | } |