Privacy policy

What we store

• Your Google account basics, when you sign in with Google: your name, email address, profile picture link and Google account ID. We use them to sign you in and to show your name and picture to other players. Your email address is never shown to other players.
• Your games: the moves, results, dates and rating changes, so you can see your history and replays and so the leaderboard works.
• Chat messages you send in game rooms, which other people in the room can read.
• Guests who join an unrated room from an invite link: only the display name they type, plus their games and chat in that room.
• Moderation records: if an admin bans an account, the reason and the dates.

Games against the computer run entirely in your browser and are not sent to us.

Cookies and browser storage

• cc_token: keeps you signed in for 7 days. cc_guest: remembers a guest’s name and seat for 30 days. Both are httpOnly, so page scripts can’t read them.
• cc_session: a simple flag that tells the page you are probably signed in, so it can skip the welcome page.
• Your settings for games against the computer are kept in your browser’s local storage.

We use no analytics, advertising or tracking cookies. When you use “Sign in with Google”, Google’s sign-in button is loaded from Google and is covered by Google’s privacy policy.

Who processes the data

• Railway hosts the app and its database.
• Cloudflare provides the domain name service and network delivery.
• Google provides sign-in.

These providers handle data only to run the service. We share it with no one else, except where the law requires.

How long we keep it, and deleting it

We keep your account, games and chat for as long as your account exists, so your history and rating stay intact. To have your account deleted, or to get a copy of your data, email [email protected] from the address you sign in with. We will remove your account and personal details within 30 days. Games you played may be kept without your name, so your opponents’ histories still make sense.

Children

The service is not aimed at children under 13, and we don’t knowingly collect their data.

Changes and contact

If this policy changes, we will update this page and its date. Questions? Email [email protected].